EP4246373A2 - Producing document templates having security features - Google Patents

Abstract

What is disclosed is a use of an electronic document template for a value or security document for producing the value or security document, the electronic document template for the value or security document being generated using a method having the following steps: Provision (301) of a database (DB) , in which different types of optical security features are each assigned one or more channels for the optical detection of the security feature in question with an optical reading device, the optical reading device being designed to separate the channels, selection (302) of a plurality of types of optical security features from the Database and instantiation of the selected types in each case by placing and scaling security features of the selected types on an electronic representation of a document carrier layer of the value or security document to generate a layout draft, checking (303) of the layout draft, for spatially overlapping or adjacent ones of the instantiated types of Security features are checked to see whether they occupy a common one of the channels, and if this is the case, the output of a signal, and input of a correction (304) of the layout draft in response to the signal, as well as the storage (305) of the resulting corrected layout draft as the electronic document template.

Description

Area

The invention relates to the use of a document template with security features for producing a valuable or security document, in particular a so-called valuable or security document such as an identity card, a passport or a credit card. The invention further relates to a combination of a document template for a value or security document and the value or security document that is produced using the document template.

State of the art

Documents, e.g. valuable and security documents such as ID cards, passports or credit cards, are used in many security-critical application scenarios. The risk is correspondingly high that an authorized owner of such a document or an unauthorized third party will physically manipulate the document after it has been issued, for example to gain unauthorized access to a protected building complex, access to protected data, or access to the services provided . For example, an unauthorized third party could attempt to replace the owner's facial image, which is printed on an ID document that has already been produced and issued or on a personalized value document, with his own facial image or with a morphed image (identity theft). Other manipulations are also possible, such as manipulating location and age information on the document or making a physical copy of a genuine document.

If the document has electronic components, such as in particular a data memory and a microprocessor, there are various approaches in the prior art to a document or at least the content of its data memory using individual identifiers, cryptographic keys, signatures and other document-specific or person-specific data or algorithms to be clearly identified and tamper-proof.

However, not all valuable and security documents have appropriate data storage and/or microprocessors to ensure the security of the document and/or its information content against manipulation using algorithmic and/or cryptographic procedures. Even if appropriate electronic components are present, using them during an integrity check is often time-consuming or complex. The said electronic means of ensuring integrity are often insufficient, namely when the integrity of the document is at least on some occasions based on purely optical features, such as a hologram, a facial image of the owner of the document, a handwritten signature of the owner, etc should. For example, the facial image of a person, which is printed on that person's passport, ID card or employee ID card, is regularly used to prove to other people that the owner of the document is the person for whom the ID card was issued. In such scenarios, it is not sufficient to simply ensure that electronic components or data storage of the document are intact, ie have not been manipulated.

The GB 2 352 708 A describes an ID card that includes a substrate on which characters are displayed; and an at least partially transparent overlay on which characters and optionally a photographic representation and handwriting can be printed that at least partially covers the substrate so that the characters on the substrate and the overlay are visible side by side.

The WO 00/38932 A1 describes a document which has at least one document number, an optical marking with a machine-readable identifier and a memory field for recording a control number on a substrate. The control number is only generated at the moment of delivery to an authorized person using a cryptographic operation from at least the document number, the identifier and a first secret key and written into the memory field. A certificate of authenticity generated in this way can be checked for authenticity with a verifier using a cryptographic operation and the information stored on the document using a second key.

The WO 2018/109035 A2 describes a method for verifying a security document using a reading device. First transmission and/or reflection properties of a first area of the security document are recorded in a first spectral range by the reading device. From this, a first data set specifying these properties is created. The first area overlaps, at least in some areas, an optical security element arranged on the security document or embedded in the security document. Second transmission and/or reflection properties of the first area of the security document are recorded in a second spectral range by the reading device. From this, a second data set specifying these properties is created. The first spectral range differs from the second spectral range. The authenticity of the security document and/or the security element is checked based on at least the first data record and the second data record.

The US 2005/010776 A1 describes systems and methods for securing an identification document that has at least one storage element capable of storing information. An encryption key is provided, the encryption key comprising a public key and a private key. An optically variable element (OVD) in a machine-readable format is created, with the OVD associated with the public key. A payload of data is generated for storage in the storage element. At least a portion of the payload is encrypted with the private key, and the encrypted payload is transmitted to at least one location on the identification document. At least a portion of the payload may be based on data randomly selected from data stored in the storage element or encrypted from data stored in the storage element. The storage element can be an optically variable Element (OVD), optical storage media, a hologram, a kinegram, an Excelgram, a pixelgram, a three-dimensional barcode, a two-dimensional barcode, a magnetic stripe and a chip. Transmitting the encrypted payload may include at least one of embedding, digital watermarking, printing, and encoding encrypted data in at least one location on the identification document.

The WO 2020/004633 A1 describes an authentication body comprising a sheet-shaped lamination sheet having a first area formed in the lamination sheet and in which personal identification information is recorded, and a second area formed in the lamination sheet and having a hologram structure in which verification data is recorded, the first individual information is assigned.

Rather, it must also be ensured that the optically detectable personal data of the document have not been manipulated or that such manipulation can be identified quickly and reliably.

Subject of the invention

The invention is based on the object of creating an improved approach to providing a value or security document.

The tasks on which the invention is based are each solved with the features of the independent patent claims. Embodiments of the invention are set out in the dependent claims. The embodiments listed below can be freely combined with one another, provided they are not mutually exclusive.

• Zurverfügungstellung einer Datenbank, in der verschiedenen Typen von optischen Sicherheitsmerkmalen jeweils ein oder mehrere Kanäle zur optischen Erfassung des betreffenden Sicherheitsmerkmals mit einem optischen Lesegerät zugeordnet sind, wobei das optische Lesegerät zur Trennung der Kanäle ausgebildet ist,
• Auswahl einer Mehrzahl von Typen der optischen Sicherheitsmerkmale aus der Datenbank und Instanziierung der ausgewählten Typen jeweils durch Platzierung und Skalierung von Sicherheitsmerkmalen der ausgewählten Typen auf einer elektronischen Repräsentation einer Dokumententrägerschicht des Wert- oder Sicherheitsdokuments zur Erzeugung eines Layoutentwurfs,
• Prüfung des Layoutentwurfs, wobei für räumlich überlappende oder aneinander angrenzende der instanziierten Typen von Sicherheitsmerkmalen geprüft wird, ob diese einen gemeinsamen der Kanäle belegen, und
• wenn dies der Fall ist, Ausgabe eines Signals und Eingabe einer Korrektur des Layoutentwurfs als Antwort auf das Signal,
• Speicherung des resultierenden korrigierten Layoutentwurfs als die elektronische Dokumentenvorlage.

In one aspect, the invention relates to a use of an electronic document template for a valuable or security document for producing the valuable or security document. The electronic document template for the value or security document is generated using a computer-implemented process. The procedure points to one

• Providing a database in which one or more channels are assigned to different types of optical security features for the optical detection of the security feature in question with an optical reading device, the optical reading device being designed to separate the channels,
• Selecting a plurality of types of optical security features from the database and instantiating the selected types by placing and scaling security features of the selected types on an electronic Representation of a document carrier layer of the value or security document to generate a layout draft,
• Checking the layout design, whereby spatially overlapping or adjacent types of security features are checked to see whether they occupy a common one of the channels, and
• if so, issuing a signal and inputting a correction to the layout design in response to the signal,
• Saving the resulting corrected layout draft as the electronic document template.

Embodiments can have the advantage that they make it possible to ensure during the design of such documents that an integrity check of the finished document can actually be ensured using an optical reading device, in particular with acceptable error probabilities. This makes it possible to ensure that the finished document is optimized with respect to the optical reading device, which means that important features of the document cannot be reliably recognized. A design process is provided that takes the system of document and inspection or reading device into account, so that the possibilities and limitations of the optical reading device and the manufacturing process can be taken into account when designing the documents. In particular, systematic pseudo-errors during processing in the field due to contradictory design of security features can be avoided.

Embodiments can have the advantage that they allow the available optical security features to be freely selected and combined with one another in the course of designing the document layout using the database. If, during the course of the design, security features are instantiated in such a way that they spatially overlap or are adjacent to one another and at the same time occupy a common channel, there is a risk that the optical reading device cannot cleanly separate these security features from one another or detect them in isolation from one another. For example, the optical reading device can only detect an overlay of the corresponding security features, from which it cannot individually extract the underlying security features. For example, in this case one or more of these security features cannot be detected or not completely detected by the optical reading device.

In the course of a validity check of the document, there would be a risk that the corresponding security features would be detected by the optical reading device, for example classified as incomplete or missing as a whole. The security features, although present and valid, would therefore be classified as invalid by the optical reading device, which could result in the document containing the security features being incorrectly classified as invalid.

If the corresponding security features were neglected or disregarded during a validity check due to the risk of false rejection, the effort involved in incorporating the corresponding security features into the document would have been in vain. Furthermore, ignoring security features would compromise the security level of the corresponding document and the security of the corresponding document could be put at risk. In particular, there would be an increased risk of incorrect acceptance of an invalid document that does not contain the corresponding security features at all or in an incomplete and/or incorrect form. However, if the corresponding security features are assumed to be necessary for confirming the validity of the document, the document would not be able to be validated or verified by an appropriate optical reading device. A successful validity test would either be impossible from the outset or at least prone to failure because there would be a high probability of false rejection.

For a security feature, it may be necessary for the optical reading device to detect a plurality of predefined characteristic details of the security feature to be checked as being present. For example, the security feature is compared with a reference template. If the match is sufficient, i.e. if the recorded security feature and/or the recorded characteristic details of the security feature match the reference template, the security feature is classified as present or valid. A match may include, for example, an identity and/or a match within a predefined tolerance range.

Embodiments can have the advantage that for a given optical reading device or for a given optical reading device type, it can be checked in the course of a layout design whether the instantiated security features can actually be detected in the course of a validity check with the corresponding optical reading device or the corresponding optical reading device type . If the check of the layout draft is positive, ie no potentially problematic security feature combinations are detected, the checked layout draft is saved as an electronic document template. If the test is negative, i.e. if instantiated security features are identified in the course of the test, which the reading device cannot resolve individually and therefore cannot check, A correction of the layout draft is initiated and the resulting corrected layout draft is saved as an electronic document template.

For example, the resulting corrected layout draft is saved as an electronic document template after correction. For example, a positive test result is a prerequisite for saving the resulting corrected layout draft. In the case of a negative test result, the check and correction can, for example, be repeated several times in a row until the check of the corrected layout draft is positive and it is saved as an electronic document template without further correction.

Embodiments can have the advantage that before a document is produced, it can be ensured that all security features of the corresponding document can be validated or verified with the optical reading device that is intended to check the document. In particular, validation tests of the corresponding document with one or more corresponding optical reading devices, which are intended for validating or verifying the corresponding document, are unnecessary. Rather, corresponding validation tests can be replaced by checking the layout design before the physical document is produced.

According to embodiments, it is provided that the optical reading device has a given optical resolution and the checking of the layout draft is carried out in such a way that it is carried out for adjacent areas of the layout draft that cannot be spatially resolved by the optical reading device. According to embodiments, it is provided that the checking of the layout design is carried out in such a way that it is carried out for neighboring instantiated types of security features that cannot be spatially resolved by the optical reading device. According to embodiments, it is provided that the checking of the layout draft is carried out in such a way that it is carried out for overlapping areas of the layout draft that cannot be spatially resolved by the optical reading device. According to embodiments, it is provided that the checking of the layout design is carried out in such a way that it is carried out for overlapping instantiated types of security features that cannot be spatially resolved by the optical reading device.

Embodiments may have the advantage that the optical resolution of the optical reading device is taken into account when checking the layout design. Using the optical resolution of the optical reading device, for example, areas of the layout design and/or instantiated security features included in the layout design can be identified for which an examination is relevant. As long as the resolution of the optical reading device is sufficient, two instantiated security features as separate security features or areas of the layout design comprising two security features as separate ones In order to be able to capture areas, the capture and validation or verification of the corresponding security features is not disturbed, for example, by the fact that the security features occupy the same optical channel. The spatial separation can, for example, be sufficient to separate the corresponding security features. If, on the other hand, the optical resolution is not sufficient for spatial separation, separation can take place, for example, by occupying different optical channels.

For example, the document to be produced is a multi-layer document which is made up of a plurality of layers. For example, the layout design defines a plurality of layers in which the security features are instantiated. For example, security features are instantiated in different layers, i.e. at different levels, of the layout design. Security features that overlap or are arranged on different levels in overlapping areas of the layout design of the layout design cannot, for example, be spatially separated by the optical reading device.

According to embodiments, one or more of the channels are reader-specific channels, which are each assigned to one or more optical reader types. According to embodiments, the method further includes selecting one or more of the reader types for which the layout design is checked. The check as to whether spatially overlapping or adjacent types of security features occupy a common channel is carried out on a reader-device type-specific basis. This means that only common channels that are assigned to a common reader type are taken into account. If overlapping or adjacent instantiated types of security features occupy the same channel, but each for different types of reading devices, for example, no signal is output and therefore no correction is entered.

Embodiments may have the advantage that a layout design can be tested for a plurality of different optical reader types. It can therefore be ensured that the instantiated security features can be detected by all optical reading devices of the majority of different optical reading device types and used for document validation or verification.

According to embodiments, it is provided that production of the value or security document according to the electronic document template is subject to manufacturing tolerances with regard to the spatial arrangement of the instantiated optical security features, these manufacturing tolerances being included in the determination of the overlapping or adjacent areas that cannot be spatially resolved by the optical reading device. For example, these manufacturing tolerances are included in the determination of overlapping or adjacent security features that cannot be spatially resolved by the optical reading device.

Tolerances can occur not only on the receiver side, for example in the form of the resolution of the optical reading device, but also on the transmitter side. Tolerances on the transmitter side include, for example, manufacturing tolerances of the security features. Embodiments can have the advantage that the transmitter-side influence of the manufacturing tolerances of the instantiated security features on the detectability or separability of security features that occupy the same channel can be taken into account when checking the layout design.

According to embodiments, it is provided that the types of optical security features in the database are each assigned a verification error rate when checking for validity by the optical reading device if the security feature in question occurs sporadically, and wherein the method includes a calculation of an overall verification error rate for the layout design and / or the resulting corrected layout draft. Embodiments may have the advantage that an overall verification error rate for the layout design can be calculated based on the verification error rates of the individual instantiated security features. For example, the review of the layout design may include a review of the overall review error rate. For example, if a total inspection error calculated for a layout design exceeds a predefined threshold, a signal is output and a correction to the corresponding layout design is input in response to the signal. The resulting corrected layout draft is saved, for example, as the electronic document template. For example, the verification error rates of the individual instantiated security features are summed up to calculate the overall verification error rate. One of the examination error rates is, for example, false acceptance rates (“False Acceptance Rates”/FARs) and/or false rejection rates (“False Rejection Rates”/FRRs). The overall test error rate is, for example, an overall false acceptance rate or an overall false rejection rate. For example, an overall false acceptance rate and an overall false rejection rate are calculated.

According to embodiments, it is provided that the channels are selected from the group formed by frequency channels, flip angles, excitation wavelengths, color impressions and combinations thereof. A channel can be defined, for example, by a frequency or a frequency range in which security features are detected. A channel can be defined, for example, by a tilt angle of a surface of the document relative to a plane assigned to the optical reading device, under which security features are detected. At the assigned level acts For example, it is an image layer. The tilt angle defines, for example, a relative tilting of the surface of the document, ie the object plane, relative to the image plane. A channel can, for example, be defined by one or more wavelengths and/or wavelength ranges with which security features are stimulated. A channel can, for example, be defined by a color impression with which security features are detected.

According to embodiments, it is provided that the optical security features are selected from the group formed by guilloches, micro-writing, metameric systems, printing with fluorescence, phosphorescence and / or up-conversion colors, printing with infrared color, barcodes , in particular one- or two-dimensional barcodes, optically variable colors, transparent or reflective holograms or kinegrams, watermarks, in particular digital watermarks that carry machine-readable information, register printing elements, in particular see-through registers, see-through windows, mottled fibers, security threads, microperforations and their combinations.

According to embodiments, it is provided that the method additionally has an optimization of the document template, preferably with the aid of an optimization algorithm using an ROC curve or a performance curve taking manufacturing tolerances into account. For example, a function to be optimized is defined, which defines a property of the layout design, such as the ability to detect individual security features or an overall error rate. For example, the defined function is an ROC curve or a performance curve. The corresponding function can be defined, for example, taking into account manufacturing tolerances of the instantiated security features and/or the resolution capacity of the optical reading device. The corresponding function is minimized or maximized as an objective function in the course of executing the optimization algorithm.

Embodiments can have the advantage that the layout design and thus the document template can be optimized. In other words, parameters of the instantiated security features can be automatically optimized and the result of the optimization can be used to correct or adapt the layout design. For example, a distance between security features that occupy the same channel can be optimized. For example, the distance is minimized to a minimum distance at which the corresponding security features can just about be separated from the optical reading device. For example, manufacturing tolerances of the security features and/or the resolution capacity of the optical reading device are taken into account.

According to embodiments, it is provided that the method additionally has placement and scaling of security features to which multivariate separate channels are assigned, preferably combining the excitation wavelength and color impression channels, in order to optimize the document template.

Embodiments can have the advantage that the placement and scaling of the security features are taken into account during the optimization. For example, a distance between security features can be adjusted and therefore optimized by adjusting the placement and/or scaling of one or more of the corresponding security features. The corresponding security features are security features that occupy the same channel. For example, the corresponding security features are security features that occupy separate channels. The channels are, for example, multivariant channels. Optimizing the document template with regard to the placement and scaling of security features can, for example, aim to prevent crosstalk between separate channels.

For example, the value or security document is produced using the electronic document template. The electronic document template is made available, for example, to a production system for documents, such as valuable or security documents. For example, the manufacturing system includes an electronic design system on which the document template is created. For example, the document template is sent from the design system to the manufacturing system over a network. For example, the document template is made available to the manufacturing system on a removable storage medium.

For example, an electronic drafting system includes a printing system for printing the document. If the document is a personalized document, such as an identification document, the design system includes, for example, a personalization system for personalizing a document blank to produce the corresponding personalized document, such as a personalized value or security document. According to embodiments of the invention, the document body can comprise a plurality of material layers, with one or more of the material layers being individually personalized. For example, all material layers of the plurality of material layers are individually personalized. For example, the plurality of material layers includes one or more material layers that are not personalized. The plurality of material layers are assembled into the document body, for example after the personalization of the one or more material layers. For example, the plurality of material layers are laminated to form the document body from the plurality of material layers. The resulting document body thus includes a or several individually personalized layers of material. For example, all material layers of the resulting document body are individually personalized. For example, the resulting document body includes one or more layers of material that are not personalized. According to embodiments of the invention, the document body may consist of multiple layers of material, each individually personalized and then laminated to form the document body from the personalized layers. For example, the personalization system is configured to introduce personalization data into the document blank to be personalized. The personalization data includes, for example, attributes of an owner of the document, such as a name, an address, etc. Furthermore, the personalization data includes, for example, biometric data of the owner, such as a facial photo or fingerprint data. For example, the personalization data is printed on the document or on a document layer. For example, one or more of the security features each include personalization data of the owner. For example, the printing system includes the personalization system for printing personalization data. For example, the document includes a memory in which the personalization system stores the personalization data.

For example, the document is a composite body which comprises a plurality of material layers or sheets of material. For example, the security features are arranged on one or more of the material layers. For example, security features are incorporated into one or more of the material layers. For example, security features are printed on one or more of the material layers. In the course of producing the document, the plurality of sheets of material are arranged one on top of the other in a document-specific order, for example, to form a sheet of material booklet from which a composite body is produced, for example by means of lamination.

For example, one or more of the security features include data that is required to access a memory included in the document. For example, one or more of the tested security features is a security feature that includes corresponding data. The optical reading device, for example, records the corresponding security features. A data reading device comprising the optical reading device extracts the corresponding data from the recorded security feature. Using the corresponding data, the data reader derives, for example, a cryptographic key. The data reader uses this cryptographic key when executing a cryptographic protocol to unlock the memory of the document, ie to gain access to the memory from which the data reader reads data using a contact or contactless communication interface.

• Zurverfügungstellung einer Datenbank, in der verschiedenen Typen von optischen Sicherheitsmerkmalen jeweils ein oder mehrere Kanäle zur optischen Erfassung des betreffenden Sicherheitsmerkmals mit einem optischen Lesegerät zugeordnet sind, wobei das optische Lesegerät zur Trennung der Kanäle ausgebildet ist,
• Auswahl einer Mehrzahl von Typen der optischen Sicherheitsmerkmale aus der Datenbank und Instanziierung der ausgewählten Typen jeweils durch Platzierung und Skalierung von Sicherheitsmerkmalen der ausgewählten Typen auf einer elektronischen Repräsentation einer Dokumententrägerschicht des Wert- oder Sicherheitsdokuments zur Erzeugung eines Layoutentwurfs,
• Prüfung des Layoutentwurfs, wobei für räumlich überlappende oder aneinander angrenzende der instanziierten Typen von Sicherheitsmerkmalen geprüft wird, ob diese einen gemeinsamen der Kanäle belegen, und
• wenn dies der Fall ist, Ausgabe eines Signals und Eingabe einer Korrektur des Layoutentwurfs als Antwort auf das Signal,
• Speicherung des resultierenden korrigierten Layoutentwurfs als die elektronische Dokumentenvorlage.

In a further aspect, the invention relates to a combination of an electronic document template for a value or security document and the value or security document that is produced using the document template. The electronic document template for the value or security document is generated using a process which has

• Providing a database in which one or more channels are assigned to different types of optical security features for the optical detection of the security feature in question with an optical reading device, the optical reading device being designed to separate the channels,
• Selecting a plurality of types of optical security features from the database and instantiating the selected types by placing and scaling security features of the selected types on an electronic representation of a document carrier layer of the value or security document to generate a layout draft,
• Checking the layout design, whereby spatially overlapping or adjacent types of security features are checked to see whether they occupy a common one of the channels, and
• if so, issuing a signal and inputting a correction to the layout design in response to the signal,
• Saving the resulting corrected layout draft as the electronic document template.

The value or security document is produced using such a document template. The value or security document includes, for example, a multi-layer composite body.

The value or security document has, for example, an integrated electronic circuit and an electronic memory for storing data requiring protection and means for executing a cryptographic protocol and an interface to a data reader, which allows the data reader to access the data requiring protection after execution of the cryptographic protocol.

According to a preferred embodiment, the execution of the cryptographic protocol is only possible using an optical security feature of this document.

For example, in an electronic design system for document templates with a processor and a storage device, a computer program is stored, the execution of which by the processor causes the implementation of a method according to the invention.

For example, a production system for valuable or security documents has an electronic design system as well as a printing system for valuable or security printing and/or a personalization system for personalizing document blanks for producing the valuable or security documents.

For example, the value or security document is produced using a method which is a process for creating a test-optimized document layout, the basis of which is preferably the representation of all features based on carriers (supports), occupied reception channels and test characteristics.

This process makes features, forms and/or production data available in databases. The desired layout is created and the user can be supported. Within a test routine, the local occupancy of all channels and the expected performance are preferably analyzed using a ROC curve or a merit function. If the result is process-safe, the layout can be used and the existing data is preferably sent directly to prepress or a printing system to print the document. Otherwise, there is the possibility of reworking until the goal is achieved. For example, the correction and checking of the layout design is repeated iteratively until the check for potentially problematic feature combinations is positive and no problematic feature combinations are found. The test routine preferably also includes tests for the maximum area and channel occupancy of the document, the ratio of personal data to static features and purely aesthetic emblems, for example design elements, an estimate of the processability and the expected false acceptance rate (FAR ("False Acceptance Rate") value) and the false rejection rate (FRR) in the field based on known external data and performance curves, manufacturability due to space occupancy and use of special materials and/or the expected cost of the final document.

In connection with the description of the present invention and its embodiments, the following terms are defined as follows:
A "document" is a physical object, for example a paper-based or plastic-based card, with or without an integrated circuit, such as a chip, which establishes an identity or a property or right of the holder of the document. A document can in particular be a valuable or security document.

Examples of documents of value are banknotes. An identity document is a document that contains information regarding the identity of its owner (name, address, facial image, signature, etc.). An identity document can be, for example, an ID card, a passport, an employee ID card or a personalized document of value (e.g. credit card). Documents often contain security features such as facial images, holograms, verification numbers, cryptographic keys or the like.

A "document template" is a data object stored electronically on a design system that can be used to create a document whose properties are determined by the document template.

A "layout element" is an element of a layout of a document or a document template that has optical security features. Different types of layout elements have different optical security features or combinations of such security features.

“Optical security features” are features of a document that enable the authenticity or integrity of a document to be verified using an optical reader that includes such security features. Examples of such security features are guilloches, micro-writing, metameric systems, printing with fluorescent, phosphorescent and/or up-conversion colors, printing with infrared colors, barcodes, in particular one- or two-dimensional barcodes, optically variable colors, transparent ones or reflective holograms or kinegrams, watermarks, in particular digital watermarks that carry machine-readable information, register printing elements, in particular see-through registers, see-through windows, mottled fibers, security threads, microperforations and combinations thereof. A feature occupies one or more channels depending on the definition (CMYK vs. RGB). A feature has an area that is required as a support to apply the feature and display it undisturbed. A feature has a structure per channel that needs to be checked. Features are stored in a database with information about occupied channels, surface characteristics, structure and test conditions. In principle, features can be arranged arbitrarily in the layout, although an overlap of features may be prohibited.

A “database” here means a container and/or system for storing and managing electronic data. The database is preferably a document-external database that stores the image reference data and optionally also further reference data for a large number of documents. A database can therefore be designed, for example, as a directory or directory tree. However, a database is preferably a database system that is designed to store large amounts of data efficiently, consistently and permanently To provide subsets in different, needs-based representation forms for users and application programs. According to embodiments, a database system consists of two parts: the management software, called database management system (DBMS), and the amount of data to be managed, the database (DB) in the narrower sense, sometimes also called "database". The management software internally organizes the structured storage of data and controls all reading and writing access to the database. A database system offers a database language to query and manage data. Examples of databases are a characteristics database (channels, carriers (support), characteristics), a form database (form, data groups) and a manufacturing database (manufacturing tolerances, process limits).

An “optical reading device” is a device for optically detecting a document, in particular for optically detecting a security feature of such a document.

A "data reader" is a device for reading data from an electronic memory. A data reader can be accommodated with an optical reader in a reader, for example in the form of a terminal.

A “channel for the optical detection of a security feature” is defined by the specific optical properties of a security feature. Examples of channels in this sense are frequency channels, tilt angles, excitation wavelengths, color impressions and their combinations. Typically (e.g. according to the "ICAO - Best Practice Guidelines for Optical Machine Authentication", version 1.2, February 2018) images are recorded in Vis, UV and IR. Extensions, particularly in the area of holographic representations, are conceivable. This results in, for example, 3 channels VisR, VisG, VisB, i.e. red, green and blue. The UV area can also be divided into sub-areas. For example, the UV range is divided into three sub-ranges analogous to the visible channels VisR, VisG, VisB, which are referred to as UVR, UVG, UVB. The UV sub-range with the largest wavelengths is referred to as the "red" UV range UVR, the middle UV sub-range with medium wavelengths as the "green" UV range UVG and the UV sub-range with the smallest wavelengths as the "blue" UV range. UVB range. There is also an IR channel and a holo channel. Since both static and personalized features can occur in each channel, this results in a total of 16 channels in this form, for example.

The “separation of channels” means the detection of the optical security features by an optical reading device, separated according to channels. For example, different optical sensors can separately record and process signals from different channels or process them separately. The separation of channels is made more difficult by, among other things, so-called crosstalk. A feature regularly occupies a certain number of channels. For example, a yellow UV color can occupy the UVG and UVR channels; a lasered text, for example, can occupy all channels. The requirement for separability now means that features within the individual channels do not overlap or adjoin one another too closely. An occasional exception are texts and codes that are decoded directly. These can also be calculated out of the corresponding channels with prior knowledge of a form, a decoder and/or a characteristic. A formal description of the separability of two features M _i and M _j with the supports supp(M ^Channel _i ) and supp(M ^Channel _j ) then leads to a condition of the form: supp(M ^Channel _i ) ∩ supp(M ^Channel _j ) = 0̸,
where supp(M ^Channel _i ) = {x ^Channel _i , , y ^Channel _j | M ^Channel _i > 0} and x ^Channel _i and y ^Channel _i are the coordinates of image points in a two-dimensional document plane or detection plane.

"Crosstalk" is a term from telephony and originally describes an effect that allows you to quietly hear another conversation on the telephone - hence the name. Today the term is generally used in communications engineering to refer to the undesired mutual influence of actually independent signal channels.

The “instantiation of selected types of optical security features” is understood to mean the inclusion of representatives of such types of optical security features in a document template when designing this document template.

“Placement and scaling” is understood to mean the local placement and choice of a specific dimensioning of the dimensions of an optical security feature in the layout of a document template when instantiating it.

A “document carrier layer of a valuable or security document” is a layer in, on or on the body of the valuable or security document, which carries the information of the document, in particular its optical security features.

An "electronic representation of a document support layer" is the layout design of the document support layer of a document stored in a storage device of a document template design system.

A "draft layout" is a data set that stores the instantiated visual security features of a document and their placement and scaling.

“Common Channels” are channels that are associated with channels in a database in which different types of optical security features are assigned to more than just one of those types of optical security features are assigned.

A "submission of a correction to the layout draft" is the new entry of a corrected or the correction of an existing layout draft in need of correction by the designer (the "Designer") of the layout draft.

The "optical resolution of an optical reading device" here is the minimum distance between two structures, in particular security features in a document layout, which just allows the spatial resolution (separation) of these two structures in an image recorded by this optical reading device. The resolution is quantified, for example, by specifying an angular distance or an angular resolution or by specifying a distance between structures that can just be separated.

“Manufacturing tolerances” here are unwanted deviations of the actual values of layout parameters such as positions, sizes or optical features from the target values of these layout parameters.

When checking documents or document templates, an "examination error rate" (also error rate, error quotient, error density, error rate or error frequency) is the relative proportion of incorrect elements in relation to the total, i.e. the relative frequency with which an error occurs. A distinction is often made in particular between false positive and false negative test results. For example, the types of optical security features in the database are each assigned a verification error rate when checking for validity by the optical reading device.

An “overall verification error rate” for a layout design and/or a resulting layout is calculated from the individual verification error rates of the types of security features instantiated in the layout (design) according to the rules of probability calculation. A layout is created and displayed in test channels. Based on known performance experiences (ROC curve or similar), an expected value is created for field tests. Manufacturing-specific know-how can also be evaluated when arranging features (e.g. color coverage). Biometric characteristics in particular can be particularly weighted.

A "ROC curve" (ROC: English for receiver operating characteristic or German operating characteristic of an observer), also called limit value optimization curve or isosensitivity curve, is a method for evaluating and optimizing analysis strategies. The ROC curve visually represents the dependence of efficiency with error rate for different parameter values. It is an application of signal detection theory.

The ROC curve can be used to get the best possible value of a parameter find, for example in a dichotomous (semi-)quantitative characteristic or two-class classification problem. For each possible parameter value (e.g. transmission speed, frequency, ...) the resulting relative frequency distributions are determined in the form of sensitivity (true positive rate) and false positive rate. In a diagram or in a digitally stored table, the sensitivity (true positive rate) is preferably entered as an ordinate ("y-axis") and the false positive rate as an abscissa ("x-axis"). The parameter value itself does not appear, but can be used as a label or digital label for the points. The result is typically a relationship that corresponds to a curved, ascending curve. An ROC curve close to the diagonal indicates a random process: Values close to the diagonal mean an equal hit rate and false positive rate, which corresponds to the expected hit frequency of a random process. The ideal ROC curve initially rises (almost) vertically (the hit rate is close to 100%, while the error rate initially remains close to 0%), only then does the false positive rate increase. An ROC curve that remains well below the diagonal indicates that the values have been misinterpreted. The theoretical optimum (in the sense of a compromise between hit and error rate) of the tested value is then determined visually or computer-aided from the contact point of a diagonally rising tangent with the ROC curve.

If you draw the test values (for example depending on the false positive rate) in the same diagram, the limit value can be found as the perpendicular of the contact point of the tangent to the test value curve. Alternatively, the points of the curve can be labeled with the test value. Mathematically, you look for the test value with the highest Youden index. This is calculated from sensitivity+specificity-1.

A “merit function” or performance function refers to a function that measures an agreement between data and a fitting model for a specific selection of parameters. For example, by general convention, the performance function is small when agreement is high. For example, in the course of a regression, parameters can be adjusted based on the value of the merit function until a smallest value is obtained, thereby producing an optimal adjustment of the corresponding parameters that results in the smallest value of the merit function. In other words, the corresponding parameters can be optimized by minimizing the merit function. The result of the corresponding optimization are optimal or optimized parameter values.

To determine the influences of parameters of the instantiated security features of the layout design and/or of parameters of the optical reading device on the separability of the instantiated security features by the optical reading device, a Bayesian network or model is used, for example. A Bayesian network refers to a directed acyclic graph in which the nodes are random variables and the edges describe conditional dependencies between the variables. Each node of the network is given a conditional probability distribution of the random variable it represents, which assigns random variables to the parent nodes. A Bayesian network is used to represent the joint probability distribution of all variables involved as compactly as possible using known conditional independencies. The conditional (in)dependence of subsets of the variables is combined with a priori knowledge. If the value of some of the variables is known, i.e. if evidence is available, the conditional probability distribution of random variables with the given variables can be calculated with the help of various algorithms and thus inference can be carried out. For example, a Monte Carlo algorithm can be used for approximate inference.

A "frequency channel" is an optical channel defined by one frequency, by multiple frequencies, or by a spectrum of optical frequencies in or outside the visible range of electromagnetic radiation.

“Tilt angles” are important in connection with the tilting effect, which can be a possible security feature of valuable or security documents, in particular banknotes. On the one hand, this means that the relevant part of the banknote looks different from different angles (different colors or motifs); on the other hand, different images can be cast on the left and right eyes to create a 3D effect. The tilting effect can be created by embossing or lenticular images; an important example is the so-called kinegram. A kinegram or kinegram is a technology for protecting against counterfeiting of banknotes, metal bars, passports, visas and identity cards using the tilting effect. From a safety perspective, it is referred to as an “OVD” (Optically Variable Device). Unlike the hologram, which has three-dimensional elements, the usually shiny silver kinegrams represent a two-dimensional sequence of movements. The name is derived from the term kinematics because depending on the angle at which the kinegram is viewed, a clearly defined, film-like sequence takes place.

An "excitation wavelength" channel is defined by the wavelengths of the discrete or continuous spectrum of a light source used to illuminate a document in the optical reader. These excitation wavelengths do not have to be identical to the spectra emitted by the illuminated document. This is not the case, for example, with fluorescence, phosphorescence and/or up-conversion colors.

A channel defined by "color impressions" is defined by the optical color impressions of an observer. The optical impression of an observer results from the product of the reflection or remission, the illuminance and the spectral Sensitivity.

An “optical sensor” refers here to a sensor that is designed to capture one or more images of a physical object, e.g. a document or part of a document. The images can in particular be digital images. The optical sensor can be, for example, a camera or a video camera. The optical sensor can, for example, be designed to selectively detect light of a specific wavelength range, e.g. infrared light (IR light) or light in the wavelength range visible to the human eye (white light, daylight). The captured images are preferably digital images that are stored electronically and/or sent to a system that further processes the image.

A “facial image” here is understood to mean an image, in particular a digital image, which depicts the face of a person.

A "digital image" is a data set in which image content is represented and stored. In particular, the digital image can be a data record in which the content of an image is represented by integers. In particular, the digital image can be a raster graphic.

A “system” here is understood to mean an entirety of one or more system elements that is capable of processing data. For example, a system can include a computer or a distributed computer system, which is designed, for example, as a cloud computer system. It is also possible that individual components of the system or the entire system are implemented in dedicated hardware. For example, the testing system can be completely integrated into a terminal, which, in addition to one or more cameras, also contains one or more lighting systems and a copy of the database with the reference data. However, it is also possible for individual components, such as the database, to be provided by a component external to the terminal, for example via a database server connected to the terminal via a network connection.

Short description of the characters

• Figur 1 ein schematisches Diagramm eines exemplarischen Layoutentwurfs eines Dokuments oder einer Dokumentvorlage,
• Figur 2 ein schematisches Diagramm einer exemplarischen Zuordnung von Kanälen zu Merkmalen;
• Figur 3 ein Flussdiagramm eines exemplarischen Verfahrens,
• Figur 4 ein schematisches Diagramm eines exemplarischen Dokuments mit einem integrierten elektronischen Schaltkreis,
• Figur 5 ein schematisches Diagramm eines exemplarischen Entwurfssystems zum Erzeugen von elektronischen Dokumentenvorlagen und
• Figur 6 ein schematisches Diagramm eines exemplarischen Fertigungssystems zum Herstellen eines Dokuments unter Verwendung einer elektronischen Dokumentenvorlagen.

Embodiments of the invention are described below with reference to the figures. Show it:

• Figure 1 a schematic diagram of an exemplary layout design of a document or document template,
• Figure 2 a schematic diagram of an exemplary assignment of channels to features;
• Figure 3 a flowchart of an exemplary procedure,
• Figure 4 a schematic diagram of an exemplary document with an integrated electronic circuit,
• Figure 5 a schematic diagram of an exemplary design system for generating electronic document templates and
• Figure 6 a schematic diagram of an exemplary manufacturing system for producing a document using an electronic document template.

Like in the Figure 1 Shown by way of example and schematically, an exemplary layout draft 100 of a document 101 or an electronic document template has a plurality of layout elements. For example, the layout design 100 includes a plurality of types of optical security features 104 to 108 that are instantiated in the layout design 100. The security features can be placed on the same level or layer of the document and optionally scaled or, in the case of a multi-layer document, on different layers arranged one above the other. An optical reading device, for example, captures the top of a corresponding document. The security features are distributed, for example, in a detection plane of a document carrier layer, which is spanned by two axes 102, 103 of an x, y coordinate system. One or more security features can, for example, be arranged in an overlapping manner, such as the exemplary security features 105 and 107 or 106 and 108 in the Figure 1 . The optical security features can include, for example, textual features (text fields) 104 or other types of optical security features. For example, security features may be arranged adjacent to one another, such as exemplary security features 107 and 108, so that they touch each other. Security features can also have completely disjoint carriers, such as security features 106 and 105 or 107 and 106 in Figure 1 .

If overlapping optical security features, such as security features 106 and 108, occupy the same channel, there is a risk that an optical reading device, which attempts to validate or verify a document with the correspondingly instantiated security features, will not be able to tell the security features apart or . able to separate from each other. For example, the optical reading device comes to the conclusion that one or both security features are incomplete and therefore invalid. The same problem can occur, for example, with security features arranged adjacent to one another, such as such as security features 107 and 108. If the resolution of the optical reading device is not sufficient to resolve the boundary or a small distance between the corresponding security features, the optical reading device is also unable to distinguish or separate these security features from one another. In this case too, the optical reading device could come to the conclusion that one or both security features are incomplete and therefore invalid.

Like in the Figure 2 As an example and shown schematically, the optical security features M ₁ and M ₂ occupy different channels. The optical security feature M ₁ is assigned, for example, to the channels with channel numbers 6 and 11, while the optical security feature M ₂ is assigned, for example, to the channel with channel number 5. The optical security features M ₁ and M ₂ are, for example, security features that have completely disjoint carriers, that is, they occupy completely overlapping and non-contact (disjoint) areas of the layout design. The channel numbers are plotted on the vertical axis 201. The horizontal x and y axes 203 and 202 span the detection plane.

Like in the Figure 3 Shown by way of example and in a schematic manner, the exemplary method for generating an electronic document template for a value or security document has the following steps:
In step 301, a database DB is made available. The database assigns one or more channels to different types of optical security features for optical detection with an optical reading device. The corresponding optical reading device is designed, for example, to separate the channels. In step 302, one of a plurality of types of optical security features is selected from the database. In the course of their instantiation, the selected optical security features are placed on an electronic representation of a document carrier layer of the document to be designed, for example a value or security document, to generate a layout draft and, if necessary, scaled.

The layout draft created in this way with the instantiated optical security features is checked in step 303. In the course of the test, spatially overlapping or adjacent security features are checked to see whether they occupy a common channel. If the result is negative and the check shows that potentially problematic overlapping or adjacent security features are present, the design is corrected in step 304. For example, a signal is issued or sent which identifies possible problematic combinations of security features. In response to the corresponding signal, for example, a correction to the layout design is entered or received. For example, the signal is displayed on a display device of a user interface in the form of a conflict indication, which identifies the possible problematic combinations of security features. For example, correction commands are received via an input device in the user interface. Correcting problematic combinations of security features can, for example, include spacing the corresponding security features on the document carrier layer from one another. The distance is selected, for example, such that the corresponding security features can be separated from the corresponding reading device, taking into account manufacturing tolerances and/or resolution capacity of the optical reading device, even though they occupy the same channel. A corresponding complaint can be made, for example, by adjusting the placement of the security features and/or by rescaling the security features, in the course of which they are reduced in size. Furthermore, the correction may include replacing one or more of the security features with security features of a different type, which occupies a different channel. Finally, a correction may include omitting or removing one of the instantiated security features from the layout design.

For example, the conflict notice may include one or more automatically generated correction suggestions. The correction suggestions can, for example, be created and output in a hierarchical order. To the extent possible, a first suggestion can, for example, suggest a change in the placement of instantiated security features, a second suggestion can, for example, suggest a change in the scaling of instantiated security features, a third suggestion can, for example, suggest replacement suggestions for replacing instantiated security features with security features of a different type, which is a different one Channel occupied, include, a fourth suggestion can, for example, suggest removing one or more of the instantiated security features. For example, the input received in response to the conflict notice identifies one of the correction suggestions to be implemented to correct the layout design. Upon receipt of the appropriate input, the layout draft is corrected according to the input.

According to embodiments, the checking and correction steps 303, 304 can, for example, also be integrated into the selection step 302, ie carried out while the layout draft is being created. For example, a corresponding check is carried out in the course of instantiating each of the security features. If an optical security feature is selected and arranged on the electronic representation of the document carrier layer, it is checked, for example, whether this optical security feature overlaps another optical security feature or is adjacent to another optical security feature which occupies the same channel as the selected security feature. If this is the case, a signal with a Conflict notices issued. For example, the potentially conflicting security features are highlighted visually, for example in color, in a visual representation of the electronic representation of the document carrier layer on the output device of the user interface. For example, one or more correction suggestions to resolve the conflict are also displayed. This could have the advantage that the layout draft can be corrected gradually as it is created. This can ensure that the completed layout draft is conflict-free and can be saved as a document template in step 305 without further corrections.

For example, after each correction to the layout design in step 304, the check in step 303 is repeated to check whether the correction resolves any conflicts regarding overlapping or adjacent security features of the same channel. This can allow correction of the layout design to be done iteratively.

If the check in step 303 is positive, i.e. there are no overlapping or adjacent security features of the same channel, the layout draft is saved as an electronic document template in step 305. The saved layout draft can be an unchanged layout draft if the check in step 303 was positive, i.e. no conflicts occurred, or a layout draft that has been corrected one or more times if conflicts were found and corrected in previous checking steps.

Like in the Figure 4 Shown by way of example and schematically, an embodiment of a document 101, such as a valuable or security document, has an integrated electronic circuit 402. The integrated electronic circuit 402 includes, for example, an electronic memory 403 for storing sensitive data and a processor 404, which is configured to execute a cryptographic protocol 407. The cryptographic protocol 407 is implemented, for example, in the form of executable program instructions. Furthermore, the document 101 comprises a communication interface 405 for communication with a terminal 411 or with a communication interface 415 of a terminal 411 configured as a data reader or comprising a data reader. Finally, the document 101 comprises a plurality of optical security features 408, which, for example using one according to the method of Figure 3 generated electronic document template in which document 101 was instantiated. The plurality of optical security features 408 includes, for example, different types of optical security features that occupy different channels or can be detected via different channels.

The exemplary terminal 411 includes, for example, an electronic one Circuit 412 with an electronic memory 413 for storing data and a processor 414 which is configured to execute a cryptographic protocol 417. The cryptographic protocol 417 is implemented, for example, in the form of executable program instructions. Furthermore, the terminal 411 includes, for example, a communication interface 415 for communication with the document 101 or with the communication interface 405 of the document 101. Finally, the terminal 411 includes an optical reading device 416 or optical sensor for detecting optical security features 408 of the document 101. The optical reading device 416 is configured to capture optical security features using different channels. For example, the optical reading device 416 includes a plurality of different optical sensors, which are configured to detect optical security features via different channels. For example, the optical reader 416 includes one or more optical sensors, each configured to use a plurality of channels to detect optical security features.

For example, the processor 414 of the terminal 411 is configured to control the optical reader 416 for detecting the plurality of optical security features 408. The recorded security features 408 are checked for validity by the terminal 411. For example, the recorded optical data of the security features 408 are compared with reference data which is stored in the memory 413 of the terminal. If the recorded optical data matches the stored reference data sufficiently, the security features 408 and thus the document 101 are classified as valid and authentic. For example, one or more of the security features 408 include data that is extracted by the terminal 411 from the data captured by the optical reading device 416. Using the extracted data, the processor 414 derives, for example, a cryptographic key in the course of executing the cryptographic protocol 417, which unlocks the document 101 and allows the terminal 411 to access the data requiring protection in the electronic memory 403 of the document 411. Using the derived key, the terminal 411 can prove that the document 101 is actually available for visual inspection. This means that secret reading attempts can be prevented, for example without the owner willingly presenting document 101 for this purpose.

For example, the terminal must also provide an authorization certificate that defines access rights of the terminal 411. For example, the authorization certificate specifies data categories for which the terminal 411 has read rights. For example, the terminal 411 sends the authorization certificate to the communication interface 405 of the document 101 via the communication interface 415 as part of an authentication Document 101. Furthermore, the terminal 411, for example using a challenge-response method, has possession of a private cryptographic key after which the associated public cryptographic key is assigned to the reading rights defined in the authorization certificate. If the terminal 411 can present its reading authorization and/or the key derived from the security features 408, it receives, for example, read access to the data requiring protection in the memory 403 of the document 101 and can read them out via the communication interfaces 405, 415. On the part of the document 101, the data presented by the terminal 411 is checked to prove the access or reading authorization, for example by the processor 404 using the cryptographic protocol 407.

Like in the Figure 5 Shown by way of example and schematically, an embodiment of an electronic design system 500 for generating electronic document templates has, for example, a processor 502 which is configured to execute program instructions 504 of a computer program for generating an electronic document template for a value or security document. Furthermore, the electronic design system 500 includes, for example, a storage device 503 and a communication interface 504. Furthermore, the electronic design system 500 includes, for example, an output device 505, such as a display, and input devices 506, such as a mouse and/or keyboard. Furthermore, the electronic design system 500 has, for example, access to a database 507. The database 507 can, for example, be included in the storage device 503 of the electronic design system 500 or it can be a remote database to which the electronic design system 500 can access via the communication interface 503 and, for example a network, such as an intranet or the Internet, accesses. For example, various types of optical security features T1, T2, T3, ..., TN are stored in the database 507. For example, one or more channels K1, K2, K3 are assigned to the different types of optical security features T1, T2, T3, ..., TN for the optical detection of the security feature in question with an optical reading device. For example, the different types of optical security features T1, T2, T3, ..., TN can be assigned different channels for optical detection for different types of optical reading devices. For example, the database 507 can also include information about the manufacturing tolerance of the optical security features T1, T2, T3, ..., TN and/or the resolution capacity of the optical reading device(s). Finally, the database 507 may include information on testing error rates for the various types of optical security features T1, T2, T3, ..., TN, such as false acceptance rates and/or false rejection rates. For example, the verification error rates of the various types of optical security features T1, T2, T3, ..., TN are each assigned to a specific type of optical reading device or only apply to that corresponding type. Corresponding information can also be stored in various databases, for example. For example, in addition to the database 507, which is, for example, a feature database, the electronic design system 500 can have access to a separate form database, which provides form specifications for documents to be produced, such as specifications for the content arrangement and structuring of the document's data and for data groups which the corresponding document should contain. Furthermore, the electronic design system 500 can, for example, have access to a separate manufacturing database, which includes, for example, information on manufacturing tolerances and/or process limits.

The electronic design system 500 is configured to allow a user to select a plurality of types of the optical security features T1, T2, T3, ..., TN from the database 507 and to instantiate the selected types by placing and scaling security features of the selected types on an electronic representation of a document carrier layer of a valuable or security document to generate a layout draft. For this purpose, the user can make inputs via the input devices 506, the result of which, for example in the form of the layout draft, is displayed to the user using the output device 505. The electronic design system 500 is further configured to perform a layout design review. For example, for spatially overlapping or adjacent types of security features, it is checked whether they occupy a common channel. If this is the case, a signal is output, for example via the output device 505, and an input of a correction of the layout draft is received in response to the signal via the input devices 506. The resulting corrected layout draft is used, for example, as an electronic document template for producing a corresponding one Document, i.e. value or security document, stored in the storage device 503.

Like in the Figure 6 Shown by way of example and schematically, an embodiment of a manufacturing system 600 for valuable or security documents 101 has an electronic design system 500, such as Figure 5 , on. Furthermore, the manufacturing system 600 has, for example, a printing system 602 for value or security printing. The electronic drafting system 500 provides the printing system 602 with the electronic artwork. Furthermore, material sheets 601 for producing the document 101 are provided. The printing system 602 prints the material sheets 601 according to the specifications of the electronic print template. In the case of a multi-layer document, these material sheets 601 are joined together, for example, to form a material sheet booklet, from which the document 101 or the document body of the document 101 is produced, for example by means of lamination. If the document 101 is a personalized document belonging to an individual owner is assigned, the manufacturing system 600, for example, further includes a personalization system 604 for personalizing document blanks 605 for producing personalized documents 101, such as valuable or security documents. For example, in the course of personalization, the owner's personal data is printed on the document blanks 605 or one of the material sheets 603. In this case, the personalization system 604 can be integrated into the printing system 602, for example. Additionally or alternatively, personal or personal data of the owner can be introduced into an electronic memory of the document blank 605 by the personalization system 604.

1. 1. Verfahren zur Erzeugung einer elektronischen Dokumentenvorlage für ein Wert -oder Sicherheitsdokument, aufweisend eine
   • Zurverfügungstellung einer Datenbank, in der verschiedenen Typen von optischen Sicherheitsmerkmalen jeweils ein oder mehrere Kanäle zur optischen Erfassung des betreffenden Sicherheitsmerkmals mit einem optischen Lesegerät zugeordnet sind, wobei das optische Lesegerät zur Trennung der Kanäle ausgebildet ist,
   • Auswahl einer Mehrzahl von Typen der optischen Sicherheitsmerkmale aus der Datenbank und Instanziierung der ausgewählten Typen jeweils durch Platzierung und Skalierung von Sicherheitsmerkmalen der ausgewählten Typen auf einer elektronischen Repräsentation einer Dokumententrägerschicht des Wert- oder Sicherheitsdokuments zur Erzeugung eines Layoutentwurfs,
   • Prüfung des Layoutentwurfs, wobei für räumlich überlappende oder aneinander angrenzende der instanziierten Typen von Sicherheitsmerkmalen geprüft wird, ob diese einen gemeinsamen der Kanäle belegen, und
   • wenn dies der Fall ist, Ausgabe eines Signals und Eingabe einer Korrektur des Layoutentwurfs als Antwort auf das Signal,
   • Speicherung des resultierenden korrigierten Layoutentwurfs als die elektronische Dokumentenvorlage.
2. 2. Verfahren nach Merkmalskombination 1, wobei das optische Lesegerät eine gegebene optische Auflösung aufweist und wobei die Prüfung des Layoutentwurfs so erfolgt, dass sie für räumlich durch das optische Lesegerät nicht auflösbare überlappende oder benachbarte Bereiche des Layoutentwurfs durchgeführt wird.
3. 3. Verfahren nach Merkmalskombination 2, wobei eine Herstellung des Wert- oder Sicherheitsdokuments gemäß der elektronischen Dokumentenvorlage hinsichtlich der räumlichen Anordnung der instanziierten optischen Sicherheitsmerkmale Fertigungstoleranzen unterliegt, wobei diese Fertigungstoleranzen in die Ermittlung der räumlich durch das optische Lesegerät nicht auflösbaren überlappenden oder benachbarten Bereiche eingehen.
4. 4. Verfahren nach einem der vorhergehenden Merkmalskombinationen, wobei den Typen von optischen Sicherheitsmerkmalen in der Datenbank jeweils eine Prüfungsfehlerrate bei Prüfung auf Validität durch das optische Lesegerät zugeordnet ist, wenn das betreffende Sicherheitsmerkmal vereinzelt auftritt, und mit einer Berechnung einer Gesamtprüfungsfehlerrate für den Layoutentwurf und/oder den resultierenden korrigierten Layoutentwurf.
5. 5. Verfahren nach einem der vorhergehenden Merkmalskombinationen, wobei die Kanäle ausgewählt sind aus der Gruppe, die gebildet wird von Frequenzkanälen, Kippwinkeln, Anregungswellenlängen, Farbeindrücken, optischer Auflösung und deren Kombinationen.
6. 6. Verfahren nach einem der vorhergehenden Merkmalskombinationen, wobei die optischen Sicherheitsmerkmale ausgewählt sind aus der Gruppe, die gebildet wird von Guillochen, Mikro-Schrift, metamere Systeme, Aufdrucken mit Fluoreszenz, Phosphoreszenz und/oder Up-Conversion-Farben, Aufdrucken mit Infrarot-Farbe, Barcodes, insbesondere ein- oder zweidimensionale Barcodes, optisch variablen Farben, transparenten oder reflektierenden Hologrammen oder Kinegrammen, Wasserzeichen, insbesondere digitale Wasserzeichen, die eine maschinell auslesbare Information tragen, Passerdruckelementen, insbesondere Durchsichtspasser, Durchsichtsfenster, Melierfasern, Sicherheitsfäden, Mikroperforationen und deren Kombinationen.
7. 7. Verfahren nach einem der vorhergehenden Merkmalskombinationen, aufweisend eine Optimierung der Dokumentenvorlage, vorzugsweise mit Hilfe eines Optimierungsalgorithmus unter Verwendung einer ROC-Kurve oder einer Performance-Kurve unter Berücksichtigung von Fertigungstoleranzen.
8. 8. Verfahren nach Merkmalskombination 7, aufweisend eine Platzierung und Skalierung von Sicherheitsmerkmalen, denen multivariate getrennte Kanäle zugeordnet sind, vorzugsweise unter Kombination der Kanäle Anregungswellenlänge und Farbeindruck, zur Optimierung der Dokumentenvorlage.
9. 9. Verfahren nach einem der vorhergehenden Merkmalskombinationen, ferner aufweisend eine Herstellung des Wert -oder Sicherheitsdokument unter Verwendung der elektronischen Dokumentenvorlage.
10. 10. Elektronische Dokumentenvorlage für ein Wert -oder Sicherheitsdokument, erzeugt mit einem Verfahren nach einem der vorhergehenden Merkmalskombinationen.
11. 11. Wert- oder Sicherheitsdokument, hergestellt unter Verwendung einer Dokumentenvorlage nach Merkmalskombination 10.
12. 12. Wert- oder Sicherheitsdokument nach Merkmalskombination 10, aufweisend einen integrierten elektronischen Schaltkreis und einen elektronischen Speicher zur Speicherung von schutzbedürftigen Daten und Mittel zur Ausführung eines kryptographischen Protokolls, und mit einer Schnittstelle zu einem Daten-Lesegerät, die einen Zugriff des Daten-Lesegeräts auf die schutzbedürftigen Daten nach Ausführung des kryptographischen Protokolls ermöglicht.
13. 13. Wert- oder Sicherheitsdokument nach Merkmalskombination 12, bei dem die Ausführung des kryptographischen Protokolls nur unter Verwendung eines optischen Sicherheitsmerkmals dieses Dokuments möglich ist.
14. 14. Elektronisches Entwurfssystem für Dokumentenvorlagen mit einem Prozessor und einer Speichereinrichtung, in der ein Computerprogramm gespeichert ist, dessen Ausführung durch den Prozessor die Durchführung eines Verfahrens nach einem der Merkmalskombinationen 1 bis 9 bewirkt.
15. 15. Fertigungssystem für Wert- oder Sicherheitsdokumente gemäß einem der Merkmalskombinationen 11 bis 13 mit einem elektronischen Entwurfssystem nach Merkmalskombination 14, aufweisend ein Drucksystem für den Wert- oder Sicherheitsdruck und/oder ein Personalisierungssystem zur Personalisierung von Dokumentenrohlingen zur Herstellung der Wert- oder Sicherheitsdokumente.

Examples may include the following combinations of features:

1. 1. Method for generating an electronic document template for a valuable or security document, comprising a
   • Providing a database in which one or more channels are assigned to different types of optical security features for the optical detection of the security feature in question with an optical reading device, the optical reading device being designed to separate the channels,
   • Selecting a plurality of types of optical security features from the database and instantiating the selected types by placing and scaling security features of the selected types on an electronic representation of a document carrier layer of the value or security document to generate a layout draft,
   • Checking the layout design, whereby spatially overlapping or adjacent types of security features are checked to see whether they occupy a common one of the channels, and
   • if so, issuing a signal and inputting a correction to the layout design in response to the signal,
   • Saving the resulting corrected layout draft as the electronic document template.
2. 2. Method according to combination of features 1, wherein the optical reading device has a given optical resolution and the checking of the layout draft is carried out in such a way that it is carried out for overlapping or adjacent areas of the layout draft that cannot be spatially resolved by the optical reading device.
3. 3. Method according to combination of features 2, wherein production of the value or security document according to the electronic document template is subject to manufacturing tolerances with regard to the spatial arrangement of the instantiated optical security features, these manufacturing tolerances being included in the determination of the overlapping or adjacent areas that cannot be spatially resolved by the optical reading device.
4. 4. Method according to one of the preceding combinations of features, wherein the types of optical security features in the database are each assigned a verification error rate when checking for validity by the optical reading device if the security feature in question occurs sporadically, and with a calculation of an overall verification error rate for the layout design and / or the resulting corrected layout draft.
5. 5. Method according to one of the preceding combinations of features, wherein the channels are selected from the group formed by frequency channels, flip angles, excitation wavelengths, color impressions, optical resolution and combinations thereof.
6. 6. Method according to one of the preceding combinations of features, wherein the optical security features are selected from the group formed by guilloches, micro-writing, metameric systems, printing with fluorescence, phosphorescence and / or up-conversion colors, printing with infrared Color, barcodes, in particular one- or two-dimensional barcodes, optically variable colors, transparent or reflective holograms or kinegrams, watermarks, in particular digital watermarks that carry machine-readable information, register printing elements, in particular see-through registers, see-through windows, mottled fibers, security threads, microperforations and their combinations .
7. 7. Method according to one of the preceding combinations of features, comprising an optimization of the document template, preferably with the aid of an optimization algorithm using an ROC curve or a performance curve taking manufacturing tolerances into account.
8. 8. Method according to combination of features 7, comprising placement and scaling of security features to which multivariate separate channels are assigned, preferably combining the excitation wavelength and color impression channels, to optimize the document template.
9. 9. Method according to one of the preceding combinations of features, further comprising producing the value or security document using the electronic document template.
10. 10. Electronic document template for a value or security document, generated using a method according to one of the preceding combinations of features.
11. 11. Value or security document, produced using a document template according to combination of features 10.
12. 12. Value or security document according to combination of features 10, having an integrated electronic circuit and an electronic memory for storing sensitive data and means for executing a cryptographic protocol, and with an interface to a data reading device that allows the data reading device to access the data requiring protection is enabled after execution of the cryptographic protocol.
13. 13. Value or security document according to feature combination 12, in which the execution of the cryptographic protocol is only possible using an optical security feature of this document.
14. 14. Electronic design system for document templates with a processor and a storage device in which a computer program is stored, the execution of which by the processor causes the implementation of a method according to one of the combinations of features 1 to 9.
15. 15. Manufacturing system for value or security documents according to one of the feature combinations 11 to 13 with an electronic design system according to feature combination 14, having a printing system for value or security printing and / or a personalization system for personalizing document blanks for producing the value or security documents.

Reference symbol list

100

Layout design

101

document

102

y-axis of a coordinate system in the document plane

103

x-axis of a coordinate system in the document plane

104

Text field, security feature in text form

105 to 108

optical security features

M16,11

optical security feature 1 with channels 6 and 11

M25

optical security feature 2 with channel 5

201

Axis of channel numbers

202

y-axis of a coordinate system in the document plane

203

x-axis of a coordinate system in the document plane

301 to 305

Procedural steps

DB

Database

402

integrated circuit

403

Storage

404

processor

405

Communication interface

407

cryptographic protocol

408

optical security features

411

terminal

412

circuit

413

Storage

414

processor

415

Communication interface

417

cryptographic protocol

416

optical reader

500

electronic design system

501

processor

502

Program instructions

503

Storage facility

504

Communication interface

505

Dispensing device

506

Input device

507

Database

T1 to TN

Types of security features

K1 to KN

channels

600

Manufacturing system 600

601

Material sheet

602

printing system

604

Personalization system

605

Document blank

Claims (13)

Use of an electronic document template for a value or security document for producing the value or security document, the electronic document template for the value or security document being generated using a method comprising a - Provision (301) of a database (DB), in which one or more channels are assigned to different types of optical security features for the optical detection of the security feature in question with an optical reading device, the optical reading device being designed to separate the channels, - Selecting (302) a plurality of types of optical security features from the database and instantiating the selected types by placing and scaling security features of the selected types on an electronic representation of a document carrier layer of the value or security document to generate a layout draft, - Checking (303) the layout design, whereby spatially overlapping or adjacent types of security features are checked to see whether they occupy a common one of the channels, and - if this is the case, outputting a signal and inputting a correction (304) of the layout design in response to the signal, - Saving (305) the resulting corrected layout draft as the electronic document template. Use according to claim 1, wherein when generating the electronic document template, the optical reading device has a given optical resolution and wherein the checking of the layout design is carried out in such a way that it is carried out for overlapping or adjacent areas of the layout design that cannot be spatially resolved by the optical reading device. Use according to claim 2, wherein the production of the value or security document according to the electronic document template is subject to manufacturing tolerances with regard to the spatial arrangement of the instantiated optical security features, these manufacturing tolerances being included in the determination of the overlapping or adjacent areas that cannot be spatially resolved by the optical reading device. Use according to one of the preceding claims, wherein when generating the electronic document template, the types of optical security features in the database are each assigned a verification error rate when checking for validity by the optical reading device if the relevant security feature occurs sporadically, and with a calculation of an overall verification error rate for the layout draft and/or the resulting corrected layout draft. Use according to one of the preceding claims, wherein the channels are selected from the group formed by frequency channels, flip angles, excitation wavelengths, color impressions, optical resolution and combinations thereof. Use according to one of the preceding claims, wherein the optical security features are selected from the group formed by guilloches, micro-writing, metameric systems, printing with fluorescence, phosphorescence and / or up-conversion colors, printing with infrared color, Barcodes, in particular one- or two-dimensional barcodes, optically variable colors, transparent or reflective holograms or kinegrams, watermarks, in particular digital watermarks that carry machine-readable information, register printing elements, in particular see-through registers, see-through windows, mottled fibers, security threads, microperforations and their combinations. Use according to one of the preceding claims, wherein the generation of the electronic document template comprises an optimization of the document template, preferably with the aid of an optimization algorithm using an ROC curve or a performance curve taking manufacturing tolerances into account. Use according to claim 7, wherein generating the electronic document template includes placement and scaling of security features to which multivariate separate channels are assigned, preferably combining the excitation wavelength and color impression channels, to optimize the document template. Use according to one of the preceding claims, wherein the value or security document (401) has an integrated electronic circuit (402) and an electronic memory (403) for storing data requiring protection and means (404) for executing a cryptographic protocol, and with a Interface (405) to a data reader (406), which enables the data reader to access the data requiring protection after execution of the cryptographic protocol. Use according to claim 9, wherein the execution of the cryptographic protocol is only possible using an optical security feature of this document. Combination of an electronic document template for a value or security document and the value or security document which is produced using the document template, the electronic document template for the value or security document being generated using a method comprising a - Provision (301) of a database (DB), in which one or more channels are assigned to different types of optical security features for the optical detection of the security feature in question with an optical reading device, the optical reading device being designed to separate the channels, - Selecting (302) a plurality of types of optical security features from the database and instantiating the selected types by placing and scaling security features of the selected types on an electronic representation of a document carrier layer of the value or security document to generate a layout draft, - Checking (303) the layout design, whereby spatially overlapping or adjacent types of security features are checked to see whether they occupy a common one of the channels, and - if this is the case, outputting a signal and inputting a correction (304) of the layout design in response to the signal, - Saving (305) the resulting corrected layout draft as the electronic document template. Combination according to claim 11, wherein the valuable or security document (401) has an integrated electronic circuit (402) and an electronic memory (403) for storing data requiring protection and means (404) for executing a cryptographic protocol, and with an interface ( 405) to a data reader (406), which enables the data reader to access the data requiring protection after execution of the cryptographic protocol. Combination according to claim 12, wherein the execution of the cryptographic protocol is only possible using an optical security feature of this document.

Images