RU22715U1 - LABELING AND IDENTIFICATION SYSTEM WITH LABELING (OPTIONS) - Google Patents

Abstract

1. A system for marking and conducting identification of an object, comprising a means of generating data with an electronic digital signature (EDS) and an identification device, said means of generating data with an EDS made with the possibility of applying generated data from the EDS to the object and / or recording the generated data with EDS in the corresponding memory device designed to supply the object and / or record the generated data from the digital signature on the appropriate storage medium designed to supply the object, and the specified devices identification was performed with the possibility of identifying the specified object by verifying the authenticity of the specified EDS and / or by checking the availability of the corresponding entry in the list of all data submitted for verification with EDS. 2. The system according to claim 1, characterized in that the means of generating data with an electronic digital signature comprises an electronic digital signature generator, the first input-output of which is connected to the corresponding input-output of the memory block with the data of the cryptographic algorithm, the other input-output is connected to the corresponding input-output of the memory block digital data with EDS, the third input-output is connected to the input data input unit, in addition, the means for generating digital data with EDS contains means for generating and storing secret and corresponding public keys, connected e through the information and control buses with the EDS driver and the controller, which through these buses is connected to all blocks of the data generation tool with EDS and is configured to control their operation, a database designed to store data with EDS associated with the specified information and

Description

The system of marking and ilengification of an object with marking (options). Oolasg gehiyiki

The system for marking goods or ichlelia, or co-organization (options) refers to relsgvami. intended to make it possible to control the quality and / or the integrity of the OS and OR or the turnover and the city of govar or i5lslya. or to | groups. as well as irolaznachenyasl for the design of 1 effective measures of hieroglyphy of unauthorized access to the government: i a search for unsuccessful manufacture of govar or seafood. or konetrhkni. and which 6.iTi, as a matter of fact, felt for the tags from the corresponding tags, this is the tag. stamps, toloids, billegs. labels, tags, and signs that indicate that they must be legally legal from the said govar or art. or construction. The declared system of 1X systems renders it impossible to nollekn or replacements or other unauthorized actions to extinguish the goods or products. or design labeled as described in the systems and its use by means of reference for the implementation of declared markings.

Leading level of technology

There are various known conventions for marking goods, products and products, and systems for their implementation and. in addition, UHipOKOs are known and are used in Iraq for production of iHi (|) pOBofi G1OL1I1SI for electrical installations for their confirmation nollin1tg

A known means of producing a digital signature for the source digital data, which is an electronic document (see A.L. Chmora. "Modern Applied Cryptography. Moscow 2001." 1 elios ARV, pp. 105-112). For the manufacture of a digital signature, the signatory selects a secret function and its corresponding verification function. Then, some of the initial data is a data of an electronic document is processed using the specified secret function, while receiving an electronic digital signature (EDS). Verification of the received digital signature is carried out using a tracking function (cryptographic algorithm), which, for example, can be well-known. The digital signature obtained in this way possesses all the properties of a conventional handwritten signature and, in addition, has several advantages in that its authenticity is easily verified and its falsification is very difficult and impractical.

A system is known for controlling the production and circulation of goods subject to excise duty using excise stamps manufactured by a method that allows for the control of: n, the turnover of these excisable goods. In the manufacture of excise stamps according to the specified method, various distinctive signs are applied on an appropriate paper carrier, for example, watermarks, signs visible in the ultraviolet radiation spectrum, magnetic signs, license plates with the corresponding storage of the indicated license plate in the corresponding database. At the same time, in the specified system for monitoring, in addition to checking the availability of the indicated ziaks on the excise stamp, they check the license plate displayed on the stamp with the corresponding entry in the corresponding database, access to Koi opoii is possible only for authorized persons.

is the assumption of the laboriousness of falsification of these brands and

the ability to verify the brand’s authenticity by searching for the indicated brand number in the list of issued excise duty stamps. However, the intensive development of printing technologies and lower costs for the production of falsified excise stamps increases the possibility of falsification of various validated signs, and in addition there is a high probability of unauthorized copying of information from the relevant databases by unscrupulous authorized persons.

A known system for identifying goods, in particular trademarks of alcoholic beverages, tobacco products, video products, etc., in which digital information is applied to a trademark. This information includes the type of object, manufacturer's name, date of manufacture, unique identification number of the goods with electronic digital signature. The specified information is converted into a bar code, which is supplied with the product or label on the product. Information is also stored in a database for comparison during identification.

When checking (identifying) goods, barcode data is converted; .l in digital form., allocate an electronic digital signature (EDS), which is identified. If the identification of the forgiveness is successful, the object is considered authentic. The specified method and system is selected as a prototype. (see WO 00/30043 A1, G07D 7/00, 05/25/2000)

A device for identification and a method for identifying plastic cards equipped with a memory device such as a chip (microchip) are known. On a plastic basis of the card, a magnetic medium is applied with the possibility of storing on a digital electronic signature, which, when identified, is processed by a cryptographic algorithm with a secret key. : if a card user wants to use it as a means of payment, digital signatures are processed graphically using a key algorithm, with cnciiii oii identification they allow access to financial transactions. (EP 583 709 A1, G06K 19/10, 02/23/1994)

Thus, it is known to use EDS as

Means of identification of various objects, including goods. The use of EDS gives a practically 100% guarantee of the authenticity of goods with markings containing EDS. At the same time, the sole factor in ensuring the protection of producers and consumers of products is the impossibility of falsifying control. For example, you can fake a label) with a barcode. The verification of the authenticity of such a label with a barcode including an electronic digital signature is carried out using expensive devices inaccessible to a wide consumer, i.e. Identification of labeling and authenticity of goods is currently a process practically inaccessible to consumers.

The technical result of the systems is to ensure the practical impossibility of counterfeiting goods, products and structures by providing them with identification means (EDS, identification codes or numbers encrypted with ID1-4) that are difficult to forge, as well as the organization of a special identification system with simple% n1 identification devices. with the help of which the buyer (user) can directly verify the digital data supplied with the goods, products and designs or the corresponding labels. This data can be transmitted over the communication network in order to remotely verify the authenticity of the means of identification. The remote means of identification includes means for verifying digital signatures, verifying encrypted data by decrypting them, or an identification code or number, a database with information about the labeling, the price of the goods, product or design, or information about the goods submitted for verification by their labeling. Providing the possibility of communication with such a duplicate means of identification allows any person interested in the authenticity of the goods to carry out a simple and reliable verification of information identifying the goods.

4

In addition, the technical result of the claimed systems

is the ability to control the quality and / or production, and / or circulation of goods or products, or structures, while ensuring practical impossibility, and in the case of choosing a sufficient length of the secret key (for options using digital signature and cryptographic encryption / decryption algorithms) and the theoretical impossibility of fakes, falsifications or other unauthorized actions in relation to goods or products, or designs. In addition, the use of the possibility of verifying the authenticity of the corresponding signature by transmitting the relevant data over the public network to the identification tool that verifies the authenticity of the digital signature provides the opportunity for any interested person to independently carry out appropriate control without any restrictions.

The technical result of the claimed systems and devices implementing these systems is the practical impossibility of fakes, falsifications or other unauthorized actions11 regarding goods or products or structures and the provision of appropriate control over the quality and / or production and / or handling of goods or products or structures. To control by verifying the specified digital signature using the corresponding publicly available public key of the signature, or by verifying the data by decrypting it, or by verifying the authenticity of the identification code or number.

Disclosure of the technical nature of the claimed group of systems.

5..,,,.

The technical result is achieved by that. that in the system of identification, I am identifying an object, in particular, a product or product, or construction. comprising a device and memory and / or storage medium. intended} 1st for the supply of goods or products, or designs, means of formation

data from the digital signature and the identification device, the indicated means of generating data from the digital signature is configured to record the generated data from the digital signature to the corresponding memory device and / or to record the generated data from the digital signature on the corresponding storage medium, which may be at least partially hidden before identification, and / or application of the generated data with EC11 to the product or product, or to the structure, which may be, at least partially, hidden until identification, and the specified device The identification is made with the possibility of identifying the specified product or product, or design by verifying the authenticity of the specified electronic signature, G1, by processing the specified data with an electronic digital signature, the corresponding electronic digital signature key according to the corresponding cryptographic algorithm, and / or checking the availability of the corresponding entry in the list of all data submitted for verification with EDS.

As well as a means of generating digital data with an electronic digital signature, there is an electronic digital signature generator, the first input-output of which is connected to the corresponding input-output of the memory block with the data of the cryptographic algorithm, the other input-output is connected to the corresponding input-output of the memory block of the generated digital data with electronic digital signature , the third input-output is connected with the input data input unit, in addition, the digital data generation tool with digital signature contains the means of generating and storing secret 1p 1x and their corresponding public keys, connected through information data and control bus with a digital signature generator and with a controller, by means of these buses it is connected to all blocks of the data generation tool with digital signature and is configured to control their operation, databases}, designed to store data with digital signature associated with the specified information and control by the tires. the contacts of the memory bus connector of the generated data with EDS are designed to connect to the specified memory device to provide the specified record, and are associated with the indicated buses, means for not printing a graphic image of the data with EDS connected via corresponding buses to the memory unit of the generated data with EDS intended for reading

from it data from the digital signature and writing to the specified memory device and / or to the specified storage medium.

In addition, the identification device includes a block for digital signature verification. associated inputs and outputs associated with the corresponding inputs and outputs of the memory unit with the data of the cryptographic algorithm, means of storing open EDS keys. block input-to the data path with digital signature. nepBi iii whose input is connected to the connector pins of the specified I / O block, associated respectively with the indicated buses, a list data verification unit and an indication tool designed to inform the digital signature about the result of the EDS check, the listed blocks are connected to the controller via the information and control bus with the corresponding inputs and outputs for control, and / or a transceiver designed to receive data transmitted through a communication network with an electronic digital signature and to send a message containing a response but carried out th product identification, one input connected to the corresponding output of the input-output unit, one output connected to the corresponding input of the warning device, and the corresponding inputs and outputs of the transmitter are connected respectively to the control and information buses, data designed to store the list presented to the data verification with the digital signature associated with the corresponding inputs and outputs with information and control buses.

In addition, the memory device is configured to read data from the digital signature from it and transmit it to the identification device by reading them from the memory device through the corresponding pins of the identification device connector.

In addition, the specified storage medium is configured to record and save a graphic image of digital data with an electronic digital signature and or these data printed on the product or product, or design is made in the form of a graphic image of digital data with electronic digital signature.

7 Also, the storage medium and / or data indicated on

the product or product, or design, is made with the possibility of a visa. full reading of digital data from them with EDS. recorded in the form of a graphic image, for the subsequent transmission of read data but the communication network for identification to the device is identifiable.

And in addition, the specified identification device is configured to connect to a communication network for receiving digital data from EC11 and for sending messages containing the result of identification of a product or product or design.

In addition, the communication network is a public telephone network.

As well as the identification device in the telephone network, there is a fixed telephone number.

And in addition, the communication network is the Internet.

In addition, the communication network is a telecommunications network.

And also the device of a memory is a microchip.

In addition, the memory device consists of a memory block and IHIM-connected contacts of the memory block connector, designed to enable the input or output of these digital data from the digital signature when reading data from the memory block by the identification device.

In addition, the information carrier is a label or tags or an excise stamp or an imprint on the same or a label or imprint on the product.

In addition, the specified graphic image of digital data with digital signature. written on the information carrier and either on the product or on the product, or on the construction, completed. at least partially, covertly applied to said image of a masking device and / or marking

8

the specified image in places accessible after opening the package

product or product, or design.

And in addition, the memory device and / or storage medium can be placed on the packaging of the product or product, or design, and / or placed directly on the product or product, or design, and / or exchanged separately from the product or product, or design on the appropriate label or tag or card or label.

In addition, at the indicated location of the indicated memory device and / or information carrier, a graphic image of the data of the corresponding EDS public key for digital data from EDS11 recorded in the indicated memory device and / or on the information medium is placed with them.

And also a graphic image of the identifier data of the corresponding public key of the digital signature is placed.

And in addition, the technical result is achieved by the fact that in the system of identification of the object, in particular, the goods or products. I.JHI design containing intended to supply the specified dialect or product, or design information carrier, means

data encryption / decryption, specified tool

data encryption / decryption is configured to generate H1a corresponding data, at least partially encrypted, and to apply to the product or product, or on the design of the specified generated data, which may be at least partially hidden until identification, and / or records on the corresponding information carrier, the indicated generated data, which could be. at least partially hidden until identification, and the specified encryption / decryption tool is configured to identify: l the specified product or product, or design by checking, the cohort is carried out by decrypting the encrypted data, and / or by checking the availability of the corresponding entry in the list of all submitted for verification data. In addition, data encryption / decryption tool

contains a data encoder / decoder, the first input-output of which is connected to the corresponding input-output of the cryptographic algorithm data memory block, the other input-output is connected to the corresponding input-output of the memory block designated for storing the generated data data, the third input-output is connected to the block input data input, a means of generating and storing secret decryption encryption keys associated with information and control spikes from the JM encoder / decoder and the controller, which The queue, through the indicated buses, is connected to all blocks of the means of generating and encrypting / decrypting the data and is configured to be etched by their work, the database is connected with the indicated buses and intended for storing all the generated data and corresponding source data, the printing tool graphic image data is encrypted, corresponding inputs and outputs are connected with the indicated memory unit and with buses, a receiver-receiver intended for receiving and transmitting data transmitted via communication of foreign data and for sending a message containing a response on the identification of the goods, its first input is connected to the corresponding input-output of the BIK unit, aviuda, the second input-output is connected to the corresponding input-output of the warning device, the corresponding inputs and outputs the transceiver is connected with the information and control, respectively. databases intended for storage of documents submitted for verification of encryption} 1 data. connected with the corresponding inputs and outputs of the information and control buses, respectively, the check block on the bottom of the encrypted data presented for verification, connected by the corresponding inputs and outputs with the information and control buses 11 as appropriate, and like all other blocks, it is possible to operate under control the controller.

10

the data indicated on the product or product, or design is made in the form of a graphic image of encrypted data.

In addition, the storage medium and / or the indicated data deposited on the product or product, or design, is enhanced with the ability to visually read from them the encrypted data recorded in the form of a graphic image for subsequent transmission of the read data over the communication network for identification to the encryption / decryption tool .

In addition, the specified means shyfrovapiya / deciphering daniihi.x

Jav.1 is cnipoiicme () M ideptification

In addition, ycnipoucinao indicated the idea of authentication is made with the possibility of connecting to a communication network to receive encrypted data and to send messages containing the result of identification of the goods and the product or design.

And besides, the communication network is a public telephone network.

As well as Ycmpoiicmey and Ostlpfiktst in the telephone communication network there corresponds a certain telephone number.

And also the communication network is the Internet.

And also the communication network is a telecommunication network.

And also the information carrier is a label or tags or an excise stamp or an imprint on the package or a label or imprint on the product.

As well as the specified graphic .stn iau nforaluuhlx) tiiiiit, i. recorded on the information carrier and / or on the product or on the product, or on the design, is executed. at least partially, covertly by applying a masking device to the specified image and / or by placing the specified image in places accessible after opening the packaging of the goods and the item of the product, or design.

And in addition, the storage medium can be placed on the packaging of the product or product, or design, and / or placed directly on the product or product, or design, and / or placed separately from the product or product, or design on the appropriate label or tag

or card or label.

And also at the indicated location of the specified information carrier, a graphic image of the data of the corresponding identifier for the encrypted data is placed with them. zagisisa N1yh on a nosigsla of information and / or on a product or product, or design.

And in addition, the technical result is achieved by the fact that in the system for identifying an object, in particular, a product or product, or a structure containing intended for supplying the specified product or product, or design, a memory device and / or storage medium, a means of generating identification code data or numbers and ideification device, the indicated means of generating identification code or number data is performed with the possibility of underestimation and the corresponding memory device. the generated data of the identification code or number and / or the application on the product or product, or on the design of the generated data of the identification code or number, which may be at least partially hidden until the identification, and / or recording on the appropriate medium information generated by data identification code or numbers, which could be, but at least partially hidden until the identification. and the specified identification device is made with the possibility of identifying the specified product or product, or design and verification of the presence of the corresponding information in the list of generated and underestimated identification codes or numbers, and either ycTpoiic identification has been performed with the possibility of identification by checking the presence of the corresponding crap in the list of all pre-existing verification of identification codes or numbers.

12 and furthermore, the identification device comprises

transceiver corresponding input / output associated with

the corresponding input-output of the input-output block, another input-output connected to the corresponding input of the warning device, the information and control inputs and outputs of the receiver are connected respectively via the information and adjustment buses to the controller, identification ycTpoiiciBo contains means for checking the identification code i: numbers corresponding to the inputs - outputs associated with the information and control buses and with the corresponding input-output of the database intended for storing the list of identifier data codes or numbers presented for verification and / or intended to store a list of data of identification codes or numbers generated and recorded in the indicated memory devices and / or on the indicated storage media, also connected by the corresponding inputs and outputs with the information and control buses, the controller is designed to control the block N1 contained in the identification device.

And also the identification code or number is a serial number and / or a randomly selected number.

As well as the means for generating the identification code or number data, it comprises an identification code or number generator for generating data representing the identification code or number, the corresponding Koropoio inputs and outputs are connected respectively to the information and control buses. databases, designed to store data issued by identification codes or numbers, the corresponding inputs and outputs of which are also connected respectively to the information and control buses, a memory unit designed to store the generated identification code or number, a means of printing a graphic image of the data shown); and.; and

13 numbers, connector contacts, data forming tools

ID codes, go numbers, all the indicated boks, including the indicated contacts, are connected to the information and control buses, to which the inputs and outputs of the counter-drive made with the possibility of adjusting the above-listed blocks are also guided.

Also, the memory device is tuned out with the possibility of reading out an identification code, go the number and transferring it to the identification system with a nut to read them from the memory device through the corresponding contacts of the identification device connector.

And also the indicated information carrier is configured to record and save a graphic image of the identification code jin numbers and / or go to the specified data on the goods or go to the product. or design as a graphical representation of an identification code or number.

In addition, the user of information and / or the shown data printed on the product or product, or design, are also available with the option of visually} reading from them the identification code or number recorded in the form of a graphic image for the next transmission of the read data on the communication network for identification to the identification device.

And besides Toio, the indicated identification device is integrated with the possibility of connecting to a communication network to receive an identification code or number and to send messages containing the result of identification of the goods or product or design.

Also, the communication network is a public switched telephone network P1ya.

14 And also the communication network is

telecommunication network.

In addition, the memory device is a microchip. And the system also includes a reader configured to read the data recorded in the memory device and transmit them over the communication network to the specified identification device, through a series-connected converter of read signals and a transceiver.

In addition, the memory device consists of a memory block and associated with it a contact of the memory block connector, designed to enable the input or output of the indicated identification code or number when reading data from the memory block by the identification device.

And also the information carrier is a label or a tag or an excise stamp or an imprint on the package or a label or imprint on the product.

In addition, the specified graphic image of the identification code or number recorded on the information carrier and / or on the product or on the product; or on a structure, at least partially, covertly applying a masking device to said image and / or p) by placing said image in places accessible after opening the packaging of the product or product or structure has been performed.

As well as a memory device and / or storage medium are placed on the packaging of the product or product, or design, and / or are placed directly on the product or product, or design, and / or are placed separately from the product or product, or design on an appropriate label or tag, or card or label.

And in addition, the memory device and / or the storage medium are placed on the packaging of the product or product or structure and / or placed on the product and product and design and / or placed separately from the product or product and :: and design on the appropriate label or tag or card or label.

fifteen

and in addition, the technical result is achieved by the fact that in the device for identifying the object, in particular, the goods go eddy. go to the design containing the EDS verification batch or the decryption bdsd, the corresponding inputs and outputs are connected to the corresponding inputs of the memory board with the cryptographic algorithm data and with the means for storing the corresponding keys, the data input-output board with the E1DG1 is equipped with a connector jack, which is the information input of the device’s identification the corresponding input-output of the input / output data input side with the digital signature is associated with the digital signature check side. and / go to a transceiver designed to receive data transmitted through a communication network with digital signature or go to encrypted data and to send a message containing rejected information on the identification of goods. the corresponding input-output of the transceiver is connected to the corresponding input-output of the EDS check box or the decryption box, and / or the database is designed to store the list of data presented for verification with the digital signature or the encrypted data, the KOTopoii input-output is connected to the corresponding 1 check-box input-outputs EDS go to the list of decryption and check lists for the list.

The invention is illustrated by drawings. Pa fig. 1 shows a functional diagram of a system for identifying an object, in particular, a product or product, go design, FIG. 2 is a functional diagram of a system for identifying an object, in particular, a product or a product. go design, in FIG. 3 presents a functional diagram of a system for identifying an object, in particular, a product’s product, or go to the construction.

A system for identifying an object (Fig. 1, 2, 3). contain i goods and; n1 articles. or design shown in the figures at 1. hereinafter referred to as goods 1. Pa the indicated goods 1 must be marked

16

And, for example, in the form of a graphic image, digital data or

identification code or number. The product 1 may be equipped with a memory device 2. for example, which is a microchip designed to store, for example, digital data containing digital signature or other data. The specified device 2 consists of a memory unit 21 and a connected connector 22 of the contact, designed to enable the input or output of these data when reading information from the memory unit 21 using a reader. In addition, when implementing the claimed variants of the systems, the product 1 can be equipped with a storage medium 7, which is, for example, a label, tag .. brand, sticker, stamp, etc., and is intended to store, for example, data containing digital signature or encrypted data, or other data, for example, in the form of an inscription (i.e. images of these digital data). An option is also provided (Fig. 1. 2. 3). in which the product 1 contains both the marking on the product 1 and the memory device 2 and the storage medium 7 or any combination of these marking means. A case is possible, as was indicated above, when data from the digital signature or encrypted data, or. as will be indicated below, the identification code or number is applied directly to the product or product, or design. The system according to the first embodiment includes, respectively, means 4 for generating EDS (FIG. 1) or according to the second variant of the method, means 14 for generating and encrypting / decrypting data (FIG. 3). designed to convert the source data about the product or product, or design into the corresponding data into digital data with an electronic digital signature (EDS) or to encrypt the specified source data by converting it with the corresponding secret key (hereinafter in the description for the encryption option, for example, provided. as an example, a block encryption algorithm that uses the corresponding secret encryption key to encrypt / decrypt the source data. goritma indicated and used terms, such as AL Chmora, Moscow, "Helios ARV. 2001. p. 2046.) for the article 1 Said means 4 forming EDS. sostsmp from the shaper 44 EDS, the first input-output

the corresponding input-output of the cryptographic algorithm data block 46, the other input-output is connected to the corresponding input-output of the memory block 42, formed by digital data, with an electronic digital signature. the third input-output / d is connected with the block 44 input source da1NH51X. in addition to means 4, it contains i means 45 for generating and storing secret and corresponding open keys, connected via information 47 and} liking 48 buses, with a digital signature shaper 44 and with a controller 43. which, in turn, is connected with all buses 47 and 48 to all blocks of funds 4 and manages their work, the database 49. is connected to the indicated buses 47 and 48. it is intended for snoring all generated data with electronic digital signatures, including data on a product or product, or on a design, batch, production site, production Itelte and tlt .. Coptact 41 connectors (tool port 4). - associated with the appropriate shinamp 47 and 48 means 4. means of fire -. 1 1 graphic image of data with digital signature. corresponding inputs and outputs associated with the indicated memory unit 42 and with the buses 47 and 48, respectively.

The means for generating and encrypting / decrypting the data indicated for the second embodiment (FIG. 3) consists of 144 encoders, a data decoder, whose input-output is connected to the corresponding input-output of the cryptographic algorithm data block 146. the input-output is connected to the corresponding input-output of the memory block 142 for storing encrypted encrypted data, the third input-output is connected to the input data input unit 1441. in addition, the means 14 contains a branch 145 of the formation and storage of secret keys of encryption / decryption, connected through the information 14 to control the euro 148 with the encryptor g / dep1 diffractor 144 and with the controller 143, which in turn is connected via the specified pin 147 n 148 with all blocks of the means 14 and controls their work. databases 149. associated with the specified buses 147 and 148. it is intended to store all forms of encrypted data and the corresponding X source

18 data, including data on the product or product, or design, charter,

date of manufacture, manufacturer, etc., printing means 1411 graphic images of encrypted data, the corresponding inputs and outputs associated with the specified memory unit 142 and with the buses 147 and 148, respectively. Transceiver 131. designed for receiving and transmitting encrypted data transmitted over a public communications network and for sending messages. containing the answer for conducting 1 identification of the goods, with its first input-output connected to the corresponding input-output of the input-output block 1511, the second input-output connected to the corresponding input-output of the notification means 1512, the corresponding input-output of the transceiver 151 are connected respectively to the control 148 and information 147 to means 14. Database 1501, intended for storing a list of encrypted data submitted for verification, connected by corresponding inputs and outputs with information 147 and control with 148 buses, respectively, the verification unit 157 according to the list of encrypted data submitted for verification is connected with the corresponding inputs and outputs with information 147 and 148 buses, respectively, as well as all of these blocks, which are controlled by the controller 143.

Also, the system for the first embodiment of the method (Fig. 1) contains a device 5 for identifying the goods by their marking, consisting of a block 52 for verifying the digital signature, corresponding inputs and outputs associated with the corresponding inputs and outputs of the memory unit 55 from the data of the cryptographic algorithm, storage means 56 corresponding to the EDS key, in addition, the listed blocks are connected via the information 58 and the control 59 to the controller 53 through the corresponding inputs-outputs p and operate under its control. The device 5 also contains a data input / output block 54 containing EDS, the first input-output of which is connected to the terminal 541 of the input block (device port 5), the corresponding inputs and outputs of the units included in the device 5. шк

19 are connected with said tires 58 and 59, an indication unit 502 connected

via buses 58 and 59 with the controller 53 and designed to inform about the result of the verification of the signature. In addition, according to several possible scenarios, according to the first embodiment of the system (in the drawing, the blocks and communications are indicated by dashed lines), the identification device 5 may include a transceiver 51 for receiving and transmitting data containing electronic digital signature transmitted over a public communication network and for sending a message containing a response on the identification of goods, its first input-output associated with the corresponding input-output of the input-output block 511, the second input-output associated with the corresponding input one-way means 512 alerts, as well as the database 501, designed to store a list of data submitted for verification with digital signature, associated with the corresponding inputs and outputs with information 58 and 59 control buses, respectively, block 57 against the list of data submitted for verification with digital signature, connected by corresponding inputs and outputs with information 58 and control 59 buses, respectively, as well as all of these blocks, running under the control of controller 53.

And in addition, the system according to the first embodiment may also provide for the possibility of a combined digital signature verification by means of devices 5 for checking both the electronic digital signature recorded in the memory device 2 and for npoBey of the graphic image of the electronic digital signature recorded on the information carrier 7 or applied to the goods or product , or design. Identification devices 5 are made in the same way as described above, but the goods 1, as described above, are equipped with a memory device 2 and a storage medium 7 or markings on the product itself. And as mentioned above in the second embodiment, the system provides the ability to verify encrypted data, while a graphical image of the encrypted data is applied to the product or product, or design and / or to the information carrier 7.

 (7 20

In addition, in the second and third scenarios, according to the first scenario, the implementation has control 48 and information 47 buses of the digital signature generation tool 4 connected via communication channels 100 and 101 with the identification device 5, respectively, to ensure data transfer for verification to the means 57 upon request from the database 49 remedies 4.

The system according to the third embodiment (FIG. 2) may comprise means 6 for generating an identification code or number, which includes an identifier code or number generator 65 for generating data representing an identification code or number, which can be made in the form of for example, a random number generator, the corresponding inputs and outputs of which are connected respectively with the information 67 and control 68 buses, a database 69, designed to store data issued identically munication codes or numbers corresponding to the inputs and outputs of which are also connected respectively with the information 67 and control 68 buses, block 62 of memory for storing generated shaper 65 identification code or number, and means 611 print the graphic image data of said code or number. The means 6 may include a contact connector 61, which may be a means port 6, both means 611 and 61 are connected to the information 67 and control buses 68 of the means 6. In addition, all of these units and means operate under the control of a controller 63, the corresponding inputs and outputs of which are connected with the controller, respectively, through the information 67 and control 68 bus. The system may also (FIG. 2) comprise a product identification device 3 by its marking, which, similarly to the system according to the first embodiment of the method, includes a transceiver 31, the corresponding input-output of which is connected to the input-output of the input-output unit 311, the corresponding input is the output of which is connected to the input-output of the notification unit 312, the controller 33, connected by the corresponding inputs and outputs with the information 38 and the control bus 39, in addition, the identification device 3 contains means 37 for checking the markings with the corresponding

21

inputs and outputs associated with information 38 and control 39

buses and with the corresponding input-output of the database 35, designed to store a list of data identification codes or numbers submitted for verification, also associated with the corresponding inputs and outputs from the information 38 and control bus 39 and associated with the controller 33. Blocks included in the composition of the device 3 operate under the control of the controller 33. The authentication unit 371 is designed to verify the authenticity of the presented identification code or number by searching for the corresponding entry in the list of the database 69 means 6, which stores data on the identification codes or numbers generated or recorded on the device 2 and / or on the medium 7 or applied to the goods 11. In this case, the block 371 is connected via the information 38 and the control bus 39 to the controller 33, through which communication is provided block 371 is connected through communication channels 102 and 103 with a database 69 of the indicated means 6 to ensure transmission to it under the control of controllers 33 and 63 of data from the specified database 69.

In addition, the system according to the third embodiment may include (Fig. 2) a reader 8 associated with a means for converting 18 read signals into messages associated with the transceiver 28 and intended for receiving and transmitting messages over the communication network. The reader 8 is designed to read data recorded in the device 2. The transceiver 28 is connected to the display unit 29.

As mentioned above, various options and implementation scenarios of the claimed systems options are presented in FIG. 1, 2 and 3.

The claimed system operates as follows. In order to ensure proper control, for example, of the quality and authenticity (legality) of the goods, within the framework of the declared system, the relevant interested source, for example, the manufacturer of the goods or the trading organization, announces in public sources information about the possibility of verifying the authenticity of the goods sold through actions and means, described in this application. So, to the attention of anyone interested

V7 // J c / 7

the buyer is informed about the possibility of verifying the authenticity of the goods by checking the data corresponding to this product with digital signature or by checking encrypted data or by checking the identification code or number. In particular, according to the first scenario, for the first variant (Fig. 1) of the system implementation, the buyer is informed about the possibility of carrying out the said verification by means of devices 5 for identifying the goods by their marking, which, for example, can be previously distributed among the relevant trading organizations. At the same time, for example, in the production of the indicated product, it is preliminarily provided with a corresponding memory device 2, which, for example, can be made in the form of a microchip and into which, for example, when transferred to the corresponding trading organization, the corresponding digital data is processed, processed with the EDS secret key, those. Signed EDS data is entered. Moreover, these data may contain various information, for example, about the manufacturer, about the trading organization, about the production date, expiration date, etc., i.e. the data is an electronic version of the product label. The production of data containing EDS is carried out by means of EDS generation tool 4, while using the input unit 441, the corresponding source data defining and identifying the product is introduced into the EDS 44 generator, at the same time, the corresponding EDS secret key is selected from the means for generating and storing the keys and it is also fed to the shaper 44, where according to the data of the corresponding cryptographic algorithm stored in the memory block 46, the source data are converted accordingly into digital signature for the specified Product (Procedure of forming electronic signature by converting raw data is described in detail in RU 2157001 C1, G07 F19 / 00, 27.09.2000, JSC "Alkorsoft et al.). Then, the generated data with an electronic digital signature can be sent to the database 49 and also sent to the memory means 42, through which the contact of the connector 41 (port of the tool 4) through the corresponding contact 22 of the connector (port of the device 2 memory) record these data with digital signature in block 21 memory.

 )

devices 2. Similarly, according to the second and third scenarios of the first embodiment, the means 4 generate the corresponding data from the digital signature for the corresponding product, while in the first scenario, the third scenario records these data in the memory device 2 and, in addition, the specified the data from the memory unit 42 is sent to the means 411 for printing a graphic image of the data, by means of which the indicated image is applied to the information medium 7 or, as indicated above, the data image is applied x with the digital signature directly on the product or on the product, or the design. According to the second embodiment of the system (Fig. 3), encrypted data for the product or product, or structure is generated in the means 14 for generating and encrypting / decrypting. In this case, by means of the input unit 1441, the corresponding initial data defining and identifying the product is introduced into the encryptor / decryptor 44, at the same time, the corresponding secret encryption key is selected from the means for generating and storing the keys 145 and is also fed to the encryptor / decryptor 144, where the data of the corresponding cryptographic algorithm stored in the memory unit 146, respectively, encrypt the source data for the specified product (the encryption procedure of the source data, for example, using the algorithm block encryption, detailed in Petrov AA, "Computer security, cryptographic methods of protection, Moscow, DMK, 2000 str.3453). The said encrypted data from the memory unit 142 is sent to the graphic image printing means 1411, by means of which the indicated image is applied to the information carrier 7 or, as indicated above, the image of the encrypted data is applied directly to the product or product, or to the structure. The method of printing an image in this application is not considered in detail, but is set out schematically, with this being understood various options for printing or printing using a stamp, etc. In addition, in particular cases of implementation, according to the second and third scenarios of the first option, for the second and third options for the implementation of the system, when, as was indicated, the image of data from the digital signature

2 sec / / G US 24

put on the information carrier 7 and / or directly on the product or product, or design, the indicated image of data from the digital signature or encrypted data, or the identification code can be hidden to avoid copying this data. Moreover, the concealment, in whole or in part, of the data image can be carried out by various known methods, for example, by placing the specified image or its part in places that cannot be accessed without violating the integrity of the product or its packaging, for example, under the cover of a bottle, container, etc. ., or by applying a masking layer on the indicated image, the integrity of which is easily verifiable, and reading the data contained in the indicated image is impossible without violating the integrity of such a masking device . The methods of applying such masking devices are widely used in practice and are known, for example, by means of such a masking layer they cover the identifier of a prepaid card, for example, by telephone, in order to avoid possible abuse by third parties who have access to the card before its sale. In addition, other methods of hiding these data can be used, including providing for the separate location of the goods and the information carrier 7 when they can be in different places. These methods of concealment and means for their implementation for simplicity are not shown in the diagrams.

So, the data generated with the digital signature for the corresponding product according to the first variant of the method are recorded in the corresponding memory device 2 and / or on the information carrier 7 and / or applied to the product or product, or on the construction or encrypted data of the second variant of the method are recorded on the carrier 7 information and / or applied to the product or product, or to the structure, for example, during its manufacture or during its implementation through the distribution network. Further, everywhere in the description, for simplicity, a description is given of the implementation for the case of recording data on the information carrier 7 and / or when applied to the product or product, or to the structure only with reference to the carrier 7.

Further interested in selling authentication

a person, for example, a buyer who wants to carry out the appropriate identification of the goods in the framework of the announced system according to the first scenario of the first option (Fig. 1) by means of the product identification device 5 by its marking, which, as indicated, is previously distributed among trading organizations, can conduct such a check. In this case, to verify the digital signature, the connector 541 of the input-output unit 54 is brought to the corresponding connector of the contact 22 of the memory unit 21. The input-output unit 54 is a means of reading with the possibility of input-output of information to the device 5. A signal is sent for reading data through the controller 53 from the block 21 of the memory of the device 2 data with digital signature and data input through the first block 54 of the input-output block 52 to check the digital signature. In this case, for example, after reading the necessary data from the device 2, a signal can be sent to eliminate the specified data in order to prevent the possible copying of the memory device 2 with the recorded data. The read data through the input-output block 54 and through the information bus 58 enters the EDS block 52, in which, using the corresponding EDS key, the data of which is stored in the means 56 for storing the corresponding EDS keys and according to a cryptographic algorithm, the data of which is stored in the memory block 55. .they make the appropriate calculations in order to determine the authenticity of the digital signature (for example, for a description of the authentication see CJSC Alcorsoft et al. RU, 2157001, C1, G07, F19 / 00, 09/27/2000). It should be noted that within the framework of the selected cryptographic system, a periodic change of secret and corresponding public keys is provided, it can be possible to enter the corresponding EDS public key or its identifier using the corresponding block (not indicated in the drawing), while the corresponding EDS public key data or their data identifiers can be displayed in the form of a graphic image on the label of the checked product or in another accessible place (the identifier is open EDS key can be, for example, an ordinal number in the list of EDS public keys whose data is stored in the specified

means 56 storing the corresponding keys of the digital signature). As indicated

above, there are many examples of the implementation of electronic digital elevation schemes and methods for verifying its authenticity (see A.L. Chmora, “Modern Applied Cryptography, Moscow 2001,“ Helios ARV, p. 105-I2.) Thus, by the result the authenticity of the digital signature carried out by processing the input data from the digital signature through the input-output block 54 using the cryptographic algorithm of the block 55 and the public keys of the digital signature of the block 56, determine the validity of the entered data, i.e. EDS authenticity. After the check, the controller 53 sends a corresponding command to the display unit 502, by means of which the result of the check is signaled.

According to the second scenario of the first embodiment and the second embodiment (Fig. 1), digital signature authentication or encrypted data verification (identification) is carried out as follows. The interested person reads a graphic inscription of the specified data from the digital signature or the specified encrypted data. In the event that the indicated inscription is hidden, the masking device is removed prior to reading or otherwise made accessible by the image with the graphic inscription of data from the digital signature, for example, they open the packaging of the goods or open the envelope sealed accordingly, etc. They read the data, the graphic display of which can be represented in the form of alphanumeric characters representing data from digital signature or encrypted source data. In this case, after reading the data, you can contact the identification device 5 or with the means 14 for generating and encrypting / decrypting the data, for example, by telephone through a communication network and transmit a message containing data from the digital signature or encrypted data. In this case, various options for receiving and transmitting messages in a telephone conversation with the identification device 5 or with means 14 for generating and encrypting / decrypting data (not shown in the drawing), for example, in tone mode or in voice message transmission mode, depending on of the embodiment of the transceiver 51 according to the first embodiment of the method or 151 to the second embodiment of the method (respectively, also hereinafter

according to the text) and the second I / O block 511 or 1511 for cases of working in automatic mode or by communicating with a telephone operator. Moreover, to operate the system in automatic mode, an “expansion card for computer telephony systems with a serving server can be applied. The specified fee may be, for example, manufactured by Dialogic (see T. Ivanova, “Subscriber Terminals and Computer Telephony, Moscow, Eco-Trends, 1999, p. 132). In this case, the implementation of the computer telephony card and the serving server are a transceiver 51 or 151, a second input / output unit 511 or 1511, and a voice announcement driver 512 or 1512. Otherwise, it is planned to create an equipped workstation for a telephone operator (telephone operator), comprising a terminal configured to connect to a telephone network and to connect to an identification device 5 or to a means 14 for generating and encrypting / decrypting data (for example, a telephone set and a personal computer) ), with ETS, the transceiver 51 or 151 and, respectively, the input / output unit 511 or 1511 and the voice announcement driver 512 or 1512 can be a telephone terminal (telephone) in the middle Twomey which communicates with the telephone subscriber apparatus 5 and the identification means 14 or forming and encryption / decryption of data is made on the basis of the personal computer 53 or controller 143, which operates according to the program described below. In the input unit 511 or 1511, data from the digital signature or encrypted data received in the message via the communication network is converted into digital signals and, through the controller 53 or 143, is input into the digital signature checking unit 52 or into the encoder / decoder 144. After that, the goods are identified by verifying the authenticity of the digital signature as described for the first variant of the method or by decrypting the data for the second variant of the method. The data decryption procedure may, for example, be carried out as follows. When encrypted data is entered into the encryptor / decryptor 144 from the encryption key storage means 145, the corresponding data is sent to block 144

28

the secret key on which encryption was performed. Moreover, in the case when in the considered. the identification system provides for the identification of a large assortment of goods, the selection of the corresponding secret key can, for example, be carried out in accordance with an identifier that can be placed with encrypted data, for example, can be placed in an inscription containing encrypted data. Moreover, information can be encoded in the specified identifier, determining the manufacturer and / or the name of the product, and / or the serial number and / or production date, or another product number, etc., that is, the information in the specified identifier is the source data, and can be saved as a corresponding record in the database 149 in the list of all generated and recorded data, and accordingly, this identifier can serve as a standard with which the value of the decrypted data is compared. Thus, when the encrypted data and the corresponding encryption key are entered into the block 144, by means of the corresponding cryptographic algorithm, the data of which is stored in the memory block 146, the data is decrypted. The obtained decrypted data is checked, as indicated above, by searching through block 157 in the database M9 of the corresponding record. Upon detection of such a record, a judgment is made on the authenticity of the data presented for decryption. In addition, as provided for in some cases of the implementation of the first version of the system, (the procedure is described below), the specified decrypted data is checked in the database 1501 according to the list of all data presented for verification, which is also carried out using block 157. At the same time, this check designed to exclude possible unauthorized copying. According to decrypted data, for example, as described above, they judge the authenticity of the labeling or product. In addition, the system can be checked using the identification device 5, in which data from the digital signature is entered manually. In another case, within the framework of the implemented product identification system, the need to transmit the specified data via the communication network to the identification device 5 is announced,

//2G./b 29

for example, by transmitting them as indicated above by telephone or by transmitting over the Internet. Receiving data by telephone can occur both automatically and by transmitting it in the form of a voice message to a telephone operator (channel 51 of the transceiver) through blocks 511 and 51. Further, in terms of signature authentication, device 5 operates as described above, while also in special cases of implementation, a periodic change of secret and corresponding keys can be provided, their public keys, EDS public key data or their identifiers can be published in a separate inscription, for example, on these a grid or can be added to a label that displays data from digital signature or encrypted data. In this case, the key storage means 56 is configured to change secret and corresponding public keys. In the device 5, it is possible to check for the presence of relevant records in the database 501, intended to store the list presented for checking data from the digital signature, while recording the corresponding record in this list is carried out with a positive check of the submitted data from the digital signature and transferring the verification data from block 52 checks to the database 501. For any presentation of data for verification, the block 57 through the controller 53 sequentially compares the newly entered data with the list data in the database 501. According to the result inspection concluded that the goods are genuine or that the presentation by the data from the digital signature indicates that a product, such as forged. In this mode, the data from the digital signature also come through block 511 to the check block 57 of the list data. In this block, a sequential comparison of the received data with the data from the database 501 is performed, i.e. submitted for verification and tested positively. If the data received in the device 5 coincided with one of the data in the database 501, form the corresponding response, which can be transmitted back over the communication network to the calling caller through the transceiver 51. In addition, the device 5 may check for the corresponding record in the base 49 of the means 4, intended for storing a list of all generated data,

thirty

access to which is possible through the corresponding communication channels 100 and 101. At the same time, verification is also carried out in block 57, but the fact of the availability of the corresponding data from the digital signature recorded in the database 49 at the stage of generating the corresponding data from the digital signature and entering into the device 2 and / or carrier 7 and / or for the goods 1. The specified check on the list in the database 49 is also carried out in block 57 by sequentially comparing the data received from the transceiver 51 and the data from the database 49 sequentially read under the control of the controller 53.

According to the third scenario, as mentioned above, the goods 1 are supplied simultaneously with a memory device 2 and a storage medium 7. And accordingly, the identification of the product by its labeling according to this scenario is carried out similarly to the first and second scenarios of the first version of the system at the same time.

According to the third embodiment (Fig. 2) in the system, as it was a decree; but above, for identification of goods, an identification code or number is used, which is generated in the means 6 for generating an identification code or number, for example by means of a random number generator 65, and which are stored in a database 69. In this case, as in the first embodiment, the generated code is recorded in the memory device 2 and / or applied to the information carrier 7 in the form of a graphic image, which, in particular cases of implementation, can be hidden until identification or applied directly to the goods. In this case, the indicated memory devices 2 and / or information carriers 7 are supplied with the goods 1. The memory device 2 and the information carrier 7 are configured to read the recorded data from them for transmission over a communication network, and if the identification code or numbers are recorded in the device 2 be read by means of a reader 8, data directly applied to the goods can be read by this device. The device 8 is connected to the Converter 18, designed to convert the read signals into messages, connected to the transceiver 28, designed to transmit messages over the communication network. The transceiver 28 is made with

312 - // 2s- y; the ability to connect to a network, such as the Internet through

a modem (not shown in the drawing), for transmitting read data, or the transceiver 28 can be connected to an indication means 29, for example, in the form of a display on which the read data is displayed and which can be transmitted over a network, for example, a telephone communication network, by means of a telephone. In the case of reading the data recorded on the medium 7, which, as indicated above, is written in the form of a graphic inscription, the reading is carried out by visual inspection and then they are also transmitted via the communication network, in this case, instead of means 8, 18 and 28, a telephone is used.

So, the person identifying the goods, in accordance with the rules for identification, transfers the read data over the communication network, for example by phone or the Internet, or in another way, for example, using the means 8, 18, 28. Moreover, as described in in the previous embodiment, automatic reception or reception by telephone operator is possible. The data received from the verifier is sent through the input / output unit 311 to the verification means 37, in which the received identification code or number is verified by comparing the received identification code with the codes presented for verification, the lists of which are stored in the database 35 (the lists are formed in the same way as in device 5). The authenticity of the received code is checked and it is determined in another way that it is in the list of all generated codes, the data of which is entered when the indicated identification codes or numbers are written into the memory device 2 and / or on the information medium 7 and stored in the database 69 of the means 6, when generating the identification codes or numbers. Data is accessed through the corresponding communication channels 102 and 103 by means of a transceiver 31 controlled by the controller 33. Control according to the list of data submitted for verification is carried out as well as according to the first embodiment. In this case, the entry of the corresponding entry in the list of codes presented for verification occurs immediately after verification in block 371. As part of the goods identification system under consideration.

g

detection in the data list means that the product is sold and its

re-presented. In this case, the means 37 through the controller transmits to the means of indication 39 that the presented data is not authentic. Based on the results of the checks of the identification code or number received via the communication network, for example, the authenticity (legitimacy) of the corresponding product is judged, and the response is accordingly sent back to the inspector in the form of a corresponding message, for example, using a telephone operator.

In addition, it should be added that in each of the nodes 3, 4, 5, 6 and 14 of the system, the blocks included in them are interconnected via control and information panels, respectively.

The given examples of implementation are one of the possible embodiments of the invention, while there are many other options that allow the implementation of the claimed system.

Claims (55)

1. A system for marking and conducting identification of an object, comprising a means of generating data with an electronic digital signature (EDS) and an identification device, said means of generating data with an EDS made with the possibility of applying generated data from the EDS to the object and / or recording the generated data with EDS in the corresponding memory device designed to supply the object and / or record the generated data from the digital signature on the appropriate storage medium designed to supply the object, and the specified devices the identification is made with the possibility of identifying the specified object by verifying the authenticity of the specified EDS and / or by checking the availability of the corresponding entry in the list of all data submitted for verification with the EDS.  2. The system according to claim 1, characterized in that the means for generating data with an electronic digital signature contains an electronic digital signature generator, the first input-output of which is connected to the corresponding input-output of the memory block with the data of the cryptographic algorithm, the other input-output is connected to the corresponding input-output of the block the memory of the generated digital data with EDS, the third input-output is connected to the input data input unit, in addition, the means for generating digital data with EDS contains means for generating and storing secret and corresponding public keys, connected through a data and control bus with an EDS shaper and a controller, which is connected via these buses to all blocks of a data generation tool with an EDS and configured to control their operation, a database designed to store data with an EDS associated with the specified information and control buses , the contacts of the connector of the memory block of the generated data with digital signature are designed to connect with the specified memory device to provide the specified record and are associated with the indicated buses, respectively the ability to print a graphic image of data with an electronic digital signature, connected via corresponding buses to a memory block of generated data with electronic digital signature, intended for reading data from an electronic digital signature from it and writing to the specified memory device and / or to the specified information carrier.  3. The system according to claim 1, characterized in that the identification device comprises an EDS verification unit, corresponding inputs and outputs associated with corresponding inputs and outputs of a memory unit with cryptographic algorithm data, an EDS public key storage means, an EDS data input-output unit, the first input of which is connected to the connector pins of the specified I / O block, respectively associated with the indicated buses, a list data verification unit and indication means for informing about the result of the digital signature verification, p the listed blocks with corresponding inputs and outputs are connected through the information and control buses to a controller intended for control, and / or a transceiver designed to receive data transmitted through a communication network with an electronic digital signature and to send a message containing a response on the identification of goods, connected with one input the corresponding output of the input-output unit, one output connected to the corresponding input of the warning device, and the corresponding inputs and outputs of the transceiver are connected respectively to control and information buses, a database intended for storing a list of data submitted for verification with digital signature, associated with the corresponding inputs and outputs with information and control buses.  4. The system according to claim 3, characterized in that the memory device is configured to read data from the digital signature from it and transmit it to the identification device by reading them from the memory device through the corresponding pins of the identification device connector.  5. The system according to claim 1, characterized in that the storage medium is configured to record and save a graphic image of digital data with an electronic digital signature and / or these data printed on the object are made in the form of a graphic image of digital data with an electronic digital signature.  6. The system according to claim 5, characterized in that the storage medium and / or the indicated data deposited on the object is configured to visually read digital data from them with EDS recorded as a graphic image for subsequent transmission of the read data over the communication network for identification on the identification device.  7. The system according to PP.5 and 6, characterized in that the graphic image of the data from the digital signature is an inscription of alphabetic and / or digital characters.  8. The system according to claim 1, characterized in that the identification device is configured to connect to a communication network for receiving digital data from EDS and for sending messages containing the result of the identification of the object.  9. The system of claim 8, wherein the communication network is a public telephone network.  10. The system according to claim 9, characterized in that the identification device in the telephone communication network corresponds to a specific telephone number.  11. The system of claim 8, characterized in that the communication network is an Internet network.  12. The system of claim 8, wherein the communication network is a telecommunications network.  13. The system according to claim 1, characterized in that the memory device is a microchip.  14. The system according to item 13, wherein the memory device consists of a memory unit and associated contacts of the connector of the memory unit, designed to enable the input or output of these digital data from the digital signature when reading data from the memory unit by the identification device.  15. The system according to claim 1, characterized in that the storage medium is a label, or a tag, or an excise stamp, or an imprint on the package, or a label, or an imprint on the object, which is the product or product, or structure.  16. The system according to claim 6, characterized in that the graphic image of digital data with an electronic digital signature recorded on a storage medium and / or on a product, or on a product, or on a structure, is made, at least partially, covertly by applying to the specified image of the masking device and / or by placing the specified image in places accessible after opening the package of the object.  17. The system according to claim 1, characterized in that the memory device and / or storage medium are placed on the packaging of the object, which is a product or product, or design, and / or placed directly on the object, and / or placed separately from the object on the corresponding label or tag, or card, or label.  18. The system according to p. 17, characterized in that, at the indicated location of the indicated memory device and / or information carrier, a graphic image of the corresponding public EDS public key for digital data with EDS recorded in the indicated memory device and / or on the medium is placed with them information.  19. The system according to p. 18, characterized in that there is also a graphic image of the identifier data of the corresponding EDS public key.  20. A system for marking and conducting identification of an object, comprising means for encrypting / decrypting data, said means for encrypting / decrypting data is configured to generate the corresponding data, at least partially encrypted, and to apply the indicated generated data to the object and / or record on the appropriate medium information intended to supply the object, the specified generated data, in addition, the specified encryption / decryption means is configured to identify and the object by checking, which is carried out by decrypting the encrypted data, and / or by checking the availability of the corresponding entry in the list of all data submitted for verification.  21. The system according to p. 20, characterized in that the means for generating and encrypting / decrypting the data comprises a data encoder / decoder, the first input-output of which is connected to the corresponding input-output of the cryptographic algorithm data memory block, the other input-output is connected to the corresponding input - by the output of a memory unit for storing the generated encrypted data, the third input-output is connected to the input data input unit, a means of generating and storing secret encryption / decryption keys associated through information and control buses with an encoder / decoder unit and with a controller, which, in turn, is connected to all blocks of the means for generating and encrypting / decrypting data via said buses and is configured to control their operation, a database associated with these buses and intended for storing all generated encrypted data and the corresponding source data, a means of printing a graphic image of the encrypted data, the corresponding inputs and outputs associated with the specified block m of memory and with buses, a transceiver designed to receive and transmit encrypted data transmitted over a communication network and to send a message containing a response on the identification of goods, its first input-output connected to the corresponding input-output of the input-output unit, the second input- output associated with the corresponding input-output means of notification, the corresponding inputs and outputs of the transceiver are connected respectively to the information and control buses, a database intended for storage a list of encrypted data submitted for verification associated with the corresponding inputs and outputs with the information and control buses, respectively, a check block according to the list of encrypted data submitted for verification associated with the corresponding inputs and outputs with the information and control buses, respectively, and like all these blocks, are executed with the ability to work under the control of the controller.  22. The system according to claim 20, characterized in that the storage medium is configured to record and save a graphic image of the encrypted data and / or the data indicated on the product or product, or design is made in the form of a graphic image of the encrypted data.  23. The system according to item 22, wherein the storage medium and / or the data indicated on the product or product, or design, is made with the possibility of visual reading from them encrypted data recorded in the form of a graphic image for subsequent transmission of read data over a communication network for identification with an encryption / decryption tool.  24. The system according to PP.22 and 23, characterized in that the graphic image of the data from the digital signature is an inscription of alphabetic and / or digital characters.  25. The system according to claim 20, characterized in that the said means of encryption / decryption of data is configured to connect to a communication network to receive encrypted data and to send messages containing the result of the identification of the object.  26. The system of claim 25, wherein the communication network is a public telephone network.  27. The system according A.25, characterized in that the said means of encryption / decryption of data is an identification device.  28. The system according to item 27, wherein the identification device in the telephone communication network corresponds to a specific telephone number.  29. The system of claim 26, wherein the communication network is the Internet.  30. The system of claim 26, wherein the communication network is a telecommunications network.  31. The system according to claim 20, characterized in that the storage medium is a label, or a tag, or an excise stamp, or an imprint on the package, or a label, or an imprint on the object, which is the product or product, or structure.  32. The system according to item 22, wherein the specified graphic image of the encrypted data recorded on the storage medium and / or on the product, or on the product, or on the structure, is made, at least partially, covertly by applying a masking on the specified image devices and / or by placing the specified image in places accessible after opening the package of the object.  33. The system according to claim 20, characterized in that the storage medium is placed on the packaging of the object, and / or placed directly on the object, and / or placed separately from the object on the corresponding label or tag, or card, or label, the object being product or product or design.  34. The system according to p. 33, characterized in that at the indicated location of the specified information carrier along with them is a graphical image of the corresponding identifier data for encrypted data recorded on the information carrier and / or on the product, or product, or design.  35. A system for marking and conducting identification of an object, comprising means for generating data of an identification code or number and an identification device, said means for generating data of an identification code or number, is configured to deposit generated data of an identification code or number and / or record generated data of an identification code or numbers in the corresponding memory device, designed to supply the object and / or record the generated identification data to yes or numbers on the corresponding information carrier intended for supplying the object, and the indicated identification device is configured to identify the object by checking the availability of the corresponding entry in the list of generated and recorded identification codes or numbers, and / or the identification device is configured to identify the object by checking the availability corresponding entry in the list of all identification codes or numbers submitted for verification.  36. The system of claim 35, wherein the identification device comprises a transceiver, corresponding input-output connected to the corresponding input-output of the input / output unit, another input-output connected to the corresponding input of the warning device, information and control input-output of the transceiver connected respectively through the information and control buses to the controller, the identification device contains means for checking the identification code or numbers, the corresponding inputs and outputs are connected e with information and control buses and with the corresponding input / output of a database intended for storing a list of data of identification codes or numbers presented for verification and / or intended for storing a list of data of identification codes or numbers generated and recorded in the indicated memory devices and / or to the specified information carrier, also associated with the corresponding inputs and outputs with the information and control buses, the controller is designed to control the blocks contained in the device stve identification.  37. The system of claim 35, wherein the identification code or number is a serial number and / or a randomly selected number.  38. The system according to clause 35, wherein the means of generating data identification code or numbers contains a shaper of identification code or numbers, designed to generate data representing an identification code or number, the corresponding inputs and outputs of which are associated respectively with the information and control buses , a database designed to store data issued by identification codes or numbers, the corresponding inputs and outputs of which are also associated with information and control buses, a memory unit for storing the generated identification code or number, a means of printing a graphic image of the data of the specified code or number, connector pins, means of generating data of the identification code or number, all of these blocks, including these contacts, are associated with information and control buses, which are also connected to the inputs / outputs of the controller, configured to control the above blocks.  39. The system according to clause 36, wherein the memory device is configured to read the identification code or number from it and transmit it to the identification device by reading them from the memory device through the corresponding contacts of the identification device connector.  40. The system of claim 35, wherein said information medium is configured to record and save a graphic image of an identification code or number, and / or said data printed on a product or product, or design, is made in the form of a graphic image of an identification code or numbers.  41. The system according to p. 40, characterized in that the storage medium and / or the data indicated on the product, or product, or design, is made with the possibility of visual reading from them the identification code or numbers recorded in the form of a graphic image, for subsequent transmitting read data over a communication network for identification to an identification device.  42. The system according to clause 35, wherein said identification device is configured to connect to a communication network to receive an identification code or number and to send messages containing the result of the identification of the object.  43. The system according to § 42, wherein the communication network is a public telephone network.  44. The system according to item 43, wherein the identification device in the telephone communication network corresponds to a specific telephone number.  45. The system according to item 43, wherein the communication network is an Internet network.  46. The system according to item 43, wherein the communication network is a telecommunications network.  47. The system according to clause 35, wherein the memory device is a microchip.  48. The system according to clause 36, wherein the system comprises a reader configured to read data recorded in the memory device and transmit them over the communication network to the specified identification device through a series-connected converter of read signals and a transceiver.  49. The system of clause 48, wherein the memory device consists of a memory unit and associated with it a contact of the memory unit connector, designed to enable the input or output of the indicated identification code or number when reading data from the memory unit by the identification device.  50. The system of claim 35, wherein the information carrier is a label, or a tag, or an excise stamp, or an imprint on the package, or a label, or an imprint on an object that is a product, or product, or structure.  51. The system of claim 40, wherein said graphic image of an identification code or number recorded on a storage medium and / or on an object is made at least partially covertly by applying a masking device to said image and / or by placing the specified image in places accessible after opening the packaging of the object, which is a product, or product, or design.  52. The system of claim 35, wherein the memory device and / or storage medium is located on the object’s packaging, and / or placed directly on the object, and / or placed separately from the object on an appropriate label, or tag, or card, or label, and the object is a product or product, or design.  53. The system according to clause 35, wherein the memory device and / or storage medium are placed on the packaging of the object, which is the product, or product, or design, and / or placed on the product or product, or design, and / or placed separately from goods or products, or designs on the appropriate label or tag, or card, or label.  54. The system according to PP.40 and 41, characterized in that the graphic image of the data from the digital signature is an inscription of alphabetic and / or digital characters. 55. An object identification device containing an EDS verification unit or a decryption unit associated with corresponding inputs and outputs of a memory unit with cryptographic algorithm data and with means for storing corresponding keys, an I / O data input / output unit with an EDS is provided with an information terminal connector the input-output of the identification device, the corresponding input-output of the data input-output block with the digital signature is connected to the electronic digital signature verification block, and / or the transceiver is designed to receive data transmitted through the communication network with EDS or encrypted data and to send a message containing a response on the identification of goods, the corresponding input-output of the transceiver is connected to the corresponding input-output of the EDS verification unit or decryption unit, and / or a database intended for storing the list data submitted for verification from the digital signature or encrypted data, the input-output of which is connected to the corresponding inputs and outputs of the digital signature verification block or decryption block and the check block according to the list.