RU24025U1 - MARKING AND IDENTIFICATION SYSTEM OF THE OBJECT WITH THE SPECIFIED LABELING (OPTIONS) - Google Patents

Abstract

1. A system for marking and identifying an object, comprising means for generating data with electronic digital signature (EDS) and an identification device, characterized in that said means for generating digital data with EDS is configured to apply generated data from the digital signature to the object and / or record generated data with an electronic digital signature in the appropriate memory device, designed to supply the object, and / or record the generated data with electronic digital signature on the appropriate storage medium designed to supply the object, the specified identification device is configured to identify the specified object by verifying the authenticity of the specified EDS, by processing the specified data with the EDS, the corresponding EDS key according to the corresponding cryptographic algorithm, and / or by checking the availability of the corresponding entry in the list of all data submitted for verification with the EDS, and / or by comparing the presented data with an electronic digital signature for compliance with a given sign or signs of an object. 2. The system according to claim 1, characterized in that the means for generating digital data with an electronic digital signature contains an electronic digital signature generator, the first input-output of which is connected to the corresponding input-output of the memory block with the data of the cryptographic algorithm, the other input-output is connected to the corresponding input-output of the memory block the generated digital data with an electronic digital signature, the third input-output is connected to the input data input unit, in addition, the digital data generating means with an electronic digital signature contains means for generating and storing secret and corresponding public keys, connected via information and control buses from

Description

The system of marking and conducting ideification of the object with the specified

labeling (options). Technical field

The system for marking an object, for example, a product or product, or a design, or a vehicle or elements included in their composition, or a security form (options) refers to means designed to ensure quality and / or authenticity and / or movement and / or or by the circulation of an object, including goods or products, or structures, as well as intended to implement effective measures to counter unauthorized reproduction or trafficking, illegal

the manufacture of goods or products, or structures, or securities and which can be used to produce appropriate tags, labels, stamps, coupons, tickets, tags, tags and other signs indicating the ownership of the legal manufacture and / or turnover of the goods or products indicated, or designs, or securities. The group of systems ensures the practical impossibility of counterfeiting or replacing or other unauthorized actions in relation to the specified goods or products, or designs, or securities marked in the framework of the proposed system and using funds to implement the claimed system.

State of the art

Various systems for marking goods, products and structures are known and, in addition, methods for producing a digital signature for electronic documents are known and widely applied in practice to confirm their authenticity.

A well-known system for producing digital podnis for source digital data is an electronic document (see A. L. Chmora, “Modern Applied Cryptography, Moscow 2001,“ Helios ARV, pp. 105-112). To make a digital signature, the signatory selects some secret function and its corresponding verification function. Then, some initial data representing the data of an electronic document is processed using the specified secret function, and an electronic digital signature (EDS) is obtained. Verification of the received digital signature is carried out using the verification function (cryptographic algorithm), which, for example, can be well-known. The digital signature obtained in this way has all the properties of an ordinary handwritten signature and, in addition, has a number of advantages in that its authenticity is easily verified and its falsification is very difficult and almost impossible.

A known system for controlling the production and circulation of goods subject to excise duty using excise stamps manufactured by a method that allows you to control the turnover of these excisable goods. In the manufacture of excise stamps according to the specified method, various distinctive signs are appropriately applied on an appropriate paper medium, for example, watermarks, signs visible in the ultraviolet radiation spectrum, magnetic strips, license plates with the corresponding storage of the indicated license plate in the corresponding database. Moreover, in addition to checking the presence of the indicated marks on the excise stamp, in the indicated system, the license plate displayed on the stamp is checked with the corresponding record in the appropriate database, access to which is possible only for authorized persons.

checking the authenticity of the mark by searching for the specified number

stamps in the list of excise stamps issued. However, the intensive development of printing technologies and lower costs for the production of falsified excise stamps increase the possibility of falsification of various visually checked signs, and in addition there is a high probability of unauthorized copying of information from the corresponding databases by unscrupulous authorized persons.

A known system for identifying goods, in particular, trademarks of alcoholic natsits, tobacco products, video products, etc., in which digital information is applied to a trademark. This information includes the type of object, manufacturer's name, date of manufacture, unique identification number of the goods with electronic digital signature. The specified information is converted into a bar code, which is supplied with the product or label on the product. Information is also stored in a database for comparison during identification.

When checking (identifying) goods, they convert barcode data into digital form, and an electronic digital signature (EDS) is identified, which is identified. If the authentication is successful, the object is considered authentic. The specified method and system is selected as a prototype. (See WO 00/30043 A1, G07D 7/00, 05/25/2000)

A device for identification and a method for identifying plastic cards equipped with a memory device such as a chip (microchip) are known. A magnetic carrier is applied to the plastic base of the card with the possibility of recording an electronic digital signature on it, which, when identified, is processed by a cryptographic algorithm with a secret key. If the card user wants to use it as a means of payment, digital signatures are processed with a cryptographic algorithm with a key; upon successful identification, they allow access to the means of conducting financial transactions. (EP 583 709 A1, G 06K 19/10, 02/23/1994)

 f

almost 100% guarantee of the authenticity of products with labeling,

containing EDS. At the same time, a significant factor in ensuring the protection of producers and consumers of products is the impossibility of falsifying control. For example, you can fake a barcode label. The verification of the authenticity of such a label with a bar code that includes an electronic digital signature is carried out using expensive devices inaccessible to a wide consumer, i.e. identification of labels and authentication of goods is currently a process practically inaccessible to the consumer.

The technical result of the group of systems is to ensure the practical impossibility of counterfeiting goods, products and structures by providing them with identification tools (EDS, identification codes or numbers, encrypted data) that are difficult to fake, as well as organizing a special identification system with simple identification devices, with which directly, the buyer (user) can verify the digital data supplied with goods, products, structures, vehicles or respective label. This data can be transmitted over a communication network in order to remotely authenticate with an authentication tool. The remote means of identification includes means for verifying digital signatures, verifying encrypted data by decrypting them, or an identification code or number, a database with information about the markings applied to the product, product or structure, or with information about the goods submitted for verification by their marking. Providing the ability to communicate with such a remote means of identification allows anyone interested in the authenticity of the goods to carry out a simple and reliable verification of information identifying the goods.

Thus, the claimed group of systems provides protection for both consumers and manufacturers from the market of illegal (illegal) products. turnover, and / or the region of distribution / sale of objects,

including goods or products, or designs, this ensures practical impossibility, and in the case of selecting a sufficient length of the secret key (for options using digital signature and cryptographic encryption / decryption algorithms) and the theoretical impossibility of fakes, falsifications or other unauthorized actions in relation to goods or products, or designs. In addition, the use of the possibility of verifying the authenticity and / or legality of the corresponding marking by transmitting the relevant data via the public network to the identification means that performs the marking check allows any interested person to independently carry out appropriate control without any restrictions.

Also, the technical result of the claimed systems is to ensure the practical impossibility of fakes, falsifications or other

unauthorized actions in relation to goods or products or structures and ensuring appropriate control over the quality and / or production and / or circulation of goods or products or structures. To control by verifying the specified digital signature using the corresponding publicly available public key of the signature, or by verifying the data by decrypting it, or by verifying the authenticity of the identification code or number.

Disclosure of the technical nature of the claimed group of marking systems.

 f /.

5

The technical result is achieved by the fact that in the marking and identification system of the object containing the means for generating data from the digital signature and the identification device, said means of generating digital data with the digital signature is made with the possibility of applying generated data from the digital signature to the object and / or recording the generated data with the digital signature in the corresponding

a memory device for supplying an object and / or recording the generated data with an electronic digital signature on an appropriate storage medium intended for supplying an object, and said identification device is configured to identify the specified object by verifying the authenticity of the electronic digital signature by processing said data with an electronic digital signature corresponding to EDS key according to the corresponding cryptographic algorithm, and / or by checking the availability

the corresponding entry in the list of all data submitted for verification with the digital signature, and / or by comparing the submitted data with the digital signature for compliance with the specified sign or signs of the object.

In addition, the means for generating digital data with an electronic digital signature contains an electronic digital signature generator, the first input-output of which is connected to the corresponding input-output of the memory block with the data of the cryptographic algorithm, the other input-output is connected to the corresponding input-output of the memory block of the generated digital data with electronic digital signature, the third the input-output is connected with the input data input unit, in addition, the digital data generation tool with EDS contains a means for generating and storing secret and corresponding public keys, connected through information control and control buses with a digital signature shaper and with a controller that is connected via these buses to all blocks of the means for generating data with electronic digital signature and is configured to control their work, a database designed to store data on all generated data with electronic digital signature related to the specified information and control buses, the contacts of the memory block connector of the generated data with EDS are designed to connect to the specified memory device to provide the specified record, and are associated with the specified by means of buses, a means of printing a graphic image of data with an electronic digital signature, connected via corresponding buses to a memory unit of generated data with electronic digital signature, intended for reading data from an electronic digital signature from it and writing to said memory device and / or to said information medium.

and in addition, the identification device contains an electronic digital signature verification unit, corresponding inputs and outputs associated with the corresponding inputs and outputs of a memory block with cryptographic algorithm data, an electronic digital signature key storage means, an electronic data input / output unit with electronic digital signature, the first input of which is connected to the connector pins of the specified input-output unit associated respectively with the indicated buses, a unit for checking data on a list and comparing it with a given sign or signs of an object and an indication means for informing On the result of the verification of the digital signature, the listed blocks by the corresponding inputs and outputs are connected through the information and control buses to the controller intended for control, and / or a transceiver intended to receive data transmitted through the communication network with the digital signature and to send a message containing the answer on the identification of the object , one input connected to the corresponding output of the I / O unit, one output connected to the corresponding input of the warning device, and the corresponding inputs and outputs of the transceiver chicas are respectively connected with the control and information schinami, a database for storing the list presented for validation with the digital signature associated corresponding inputs-outputs with the information and management schinami.

Also, the memory device is configured to read data from the digital signature from it and transmit it to the identification device by reading them from the memory device through the corresponding pins of the identification device connector.

And also the specified storage medium is configured to record and save a graphic image of the generated data with digital signature and / or the specified data applied to the object is made in the form of a graphic image of the generated data with digital signature. In addition, the storage medium and / or specified data,

plotted on the object, made with the possibility of visual reading from them data from EDS recorded in the form of a graphic image, for subsequent transmission of the read data over the communication network for identification to the identification device.

In addition, the graphic image of the data from the digital signature is an inscription of alphabetic and / or digital characters.

And in addition, the specified identification device is configured to connect to a communication network for receiving digital data from EDS and for sending messages containing the result of the identification of the object.

And in addition, the communication network is a public telephone network.

And also, a certain telephone number corresponds to an identification device in a telephone communication network.

And also the communication network is the Internet.

And in addition, the communication network is a telecommunications network.

In addition, the memory device is a microchip.

In addition, the memory device consists of a memory unit and associated contacts of the connector of the memory unit, designed to enable the input or output of these digital data from the digital signature when reading data from the memory unit by the identification device.

And in addition, the object is a product or product, or structure, or vehicle or elements included in the product or product, or structure, or vehicle, or security form, and the storage medium is a label or tag or an excise stamp or an imprint on the package or a label or imprint on the object.

Also, the specified graphic image of the generated data with EDS recorded on the information carrier and / or on the object is made, at least partially, covertly by applying to the specified image

.

8 masking device and / or by placing the specified

images in places accessible after opening the object packaging.

As well as a memory device and / or storage medium can be placed on the packaging of the object, including the product or product, or structure, and / or placed directly on the object, and / or placed separately from the object on the appropriate label or tag, or card, or label.

Also, at the indicated location of the indicated memory device and / or information carrier, a graphic image of the data of the corresponding EDS key for digital data from the EDS recorded in the indicated memory device and / or on the information carrier is placed with them.

And in addition, a graphic image of the identifier data of the corresponding EDS key is also placed on the object.

In addition, the specified sign or signs of the object may be the production date and / or product code, and / or the region of distribution, and / or the trade organization, and / or the name of the legal or natural person, and / or the face value of the security, and / or quantity markings, and / or highest instance number, etc.

The technical result is also achieved by the fact that in the marking and identification system of an object containing encryption / decryption means, said data encryption / decryption means is configured to generate corresponding data, at least partially encrypted, and to apply said generated data to the object, and / or recording the specified generated data on an appropriate storage medium designed to supply the facility, the system includes a communication network designed for transmission over messages containing said data and encryption means / decryption adapted for the reception and / or transmission network communication of the messages and identify the object by testing which is performed by decrypting the encrypted data, and / or by checking

9 corresponding entry in the list of all data submitted for verification

and / or by comparing the presented data for compliance with a given sign or signs of the object.

In addition, the data encryption / decryption means comprises a data encoder / decoder, the first input-output of which is connected to the corresponding input-output of the cryptographic algorithm data memory block, the other input-output is connected to the corresponding input-output of the memory block intended for storing the generated encrypted data , the third input-output is connected to the input data input unit, a means of generating and storing secret encryption / decryption keys, connected via the information and control buses to the unit an encoder / decoder and with a controller, which, in turn, is connected to all blocks of the data encryption / decryption means by means of these buses and is configured to control their operation, a database associated with these buses and designed to store data about all generated encrypted data and corresponding source data, means for printing a graphic image of encrypted data, corresponding inputs and outputs associated with the specified memory unit and with buses, a transceiver intended for receiving and transmitting encrypted data transmitted over the communication network, and for sending a message containing a response on the identification of goods, its first input-output connected to the corresponding input-output of the input-output block, the second input-output connected to the corresponding input-output of the means alerts, the corresponding inputs and outputs of the transceiver are connected respectively to the information and control buses, a database designed to store a list of encrypted messages submitted for verification data associated with the corresponding inputs and outputs with the information and control buses, respectively, the verification unit according to the list of encrypted data submitted for verification and comparison of the presented data with a given sign or features of the object, associated with the corresponding inputs and outputs with information and

, /

10 control bus, respectively, and as well as all of these blocks,

made with the ability to work under the control of the controller.

In addition, the storage medium and / or the indicated data deposited on the object is capable of visually reading from them the encrypted data recorded in the form of a graphic image for subsequent transmission of the read data over the communication network for identification to the encryption / decryption means.

In addition, the specified storage medium is configured to record and save a graphic image of the generated data and / or these data applied to the object are made in the form of a graphic image of the generated data

The graphic image of the generated data is also a barcode.

And also the graphic image of the generated data is an inscription of alphabetic and / or digital characters.

In addition, the communication network is a public telephone network.

And in addition, a certain telephone number corresponds to the encryption / decryption means in the telephone communication network.

In addition, the communication network is the Internet.

Also, the communication network is a telecommunications network. In addition, the object is a product or product, or structure, or vehicle or elements included in the product or product, or structure, or vehicle, or security form, and the storage medium is a label or tag or an excise stamp or print on the package or label or print on the object.

And in addition, the specified graphic image of the generated data recorded on the information carrier and / or on the object is made, at least partially, covertly by applying a masking device to the indicated image and / or by placing the specified image in places accessible after opening the package of the object.

W f

11 As well as the storage medium can be placed on the packaging

object, and / or placed directly on the object, and / or placed separately from the object on the appropriate label or tag or card or label.

And also, at the indicated location of the indicated information carrier, a graphic image of the data of the corresponding encryption and / or decryption key identifier for the encrypted data recorded in the information carrier and / or on the object is placed with them.

In addition, the specified sign or signs of the object may be the production date and / or product code, and / or the region of distribution, and / or the trade organization, and / or the name of the legal or natural person, and / or the face value of the security, and / or quantity markings, and / or highest instance number, etc.

In addition, the technical result is achieved by the fact that in the marking and identification system of the object containing the means for generating the identification code or number data and the identification device, said means for generating the identification code or number data is configured to apply the generated identification code or number and / or recording the generated identification code or number data into a corresponding memory device for supplying an object and / or recording the generated identification code or number data on an appropriate storage medium intended for supplying the object, and said identification device is configured to identify the object by checking the availability of an appropriate entry in the list of all generated and recorded identification codes or numbers and / or the identification device is configured to identify the object by checking the availability of the corresponding entry in the list of all identification codes submitted for verification Whether numbers and / or identification device adapted to identify the object by comparing the data presented to specify the feature or features of the object.

; // DGs

12 In addition, the identification device contains

transceiver corresponding input / output associated with

the corresponding input-output of the input-output unit, another input-output connected to the corresponding input of the notification device, the information and control inputs and outputs of the transceiver are connected respectively through the information and control buses to the controller, the identification device contains means for verifying the identification code or numbers, the corresponding inputs- outputs associated with the information and control buses and with the corresponding input-output database, designed to store a list of data ide identification codes or numbers presented for verification and / or intended for storing a list of identification codes or numbers data generated and recorded in said memory devices and / or on said information carriers, also connected by corresponding inputs and outputs with information and control buses, the controller is designed to control the blocks contained in the identification device.

In addition, the identification code or number is a serial number and / or a randomly selected number.

In addition, the means for generating the identification code or number data comprises an identifier code or number generator for generating data representing an identification code or number, the corresponding inputs and outputs of which are connected respectively to the information and control buses, a database intended for storing data issued identification codes or numbers, the corresponding inputs and outputs of which are also associated respectively with the information and control buses, block memory designed to store the generated identification code or number, a means of printing a graphic image of the data of the specified code or number, connector pins, means of generating data of the identification code or number, all of these blocks, including these contacts, are connected to the information and control buses, to which are also connected

thirteen

inputs and outputs of a controller configured to

control the above blocks.

And in addition, the memory device is configured to read the identification code or number from it and transmit it to the identification device by reading them from the memory device through the corresponding pins of the identification device connector.

And in addition, the specified storage medium is configured to record and save a graphic image of an identification code or number and / or these data applied to the object are made in the form of a graphic image of an identification code or number.

And also a graphic image of an identification code or number is a bar code.

And also the information carrier and / or the indicated data deposited on the object is made with the possibility of visually reading from them the identification code or numbers recorded in the form of a graphic image for the subsequent transmission of the read data over the communication network for identification to the identification device.

In addition, the specified identification device is configured to connect to a communication network to receive an identification code or number and to send messages containing the result of the identification of the object.

Also, the communication network is a public telephone network.

As well as an identification device in a telephone communication network, a certain telephone number corresponds.

In addition, the communication network is the Internet.

And in addition, the communication network is a telecommunications network. them over the communication network to the specified identification device, through

serially connected converter of read signals and transceiver.

And also, the memory device consists of a memory block and associated with it a contact of the memory block connector, designed to enable the input or output of the indicated identification code or number when reading data from the memory block by the identification device.

In addition, the object is a product or product, or structure, or vehicle or elements included in the product or product, or structure, or vehicle, or security form, and the storage medium is a label or tag or an excise stamp or print on the package or label or print on the object.

Also, the specified graphic image of the identification code or number recorded on the information carrier and / or on the object is made, at least partially, covertly by applying a masking device to the specified image and / or by placing the specified image in places accessible after opening the package of the object.

And also the memory device and / or the storage medium are located on the object’s packaging, and / or placed directly on the object, and / or placed separately from the object on a corresponding label or tag or card or label.

And in addition, the memory device and / or storage medium are located on the object’s packaging and / or placed on the object, including on the product or product or structure and / or placed separately from the object, including the product or product, or structure on the corresponding label or tag or card or label.

In addition, the specified sign or signs of the object may be the production date and / or product code, and / or the region of distribution, and / or the trade organization, and / or the name of the legal or natural person, and / or the face value of the security, and / or quantity markings, and / or highest instance number, etc.

fifteen

The claimed system is illustrated by drawings. In FIG. 1 is a functional diagram of a system for identifying an object, according to claim 1, in FIG. 2 presents a functional diagram of a system for identifying an object, according to claim 22, in FIG. 3 presents a functional diagram of a system for identifying an object according to claim 37 of the formula.

According to the first, second and third variants of implementation (Figs. 1, 2, 3), the identification system contains an object, which may be a product or product, or a structure represented by 1 in the figures, hereinafter referred to as product 1. For this product 1 be marked 11, for example, in the form of a graphic image, digital data or identification code or number. The product 1 may be equipped with a memory device 2, for example, which is a microchip designed to store, for example, digital data containing digital signature or other data. The specified device 2 consists of a memory unit 21 and a connected connector 22 of the contact, designed to enable the input or output of these data when reading information from the memory unit 21 using a reader. In addition, when implementing the claimed system options, the product 1 can be equipped with a storage medium 7, which is, for example, a label, tag, brand, sticker, stamp, etc., and is intended to store, for example, data containing digital signature or encrypted data , or other data, for example, in the form of an inscription (i.e. images of these digital data). An option is also provided (Figs. 1, 2, 3), in which the product 1 contains both the marking on the product 1 and the memory device 2 and the storage medium 7 or any combination of these marking means. A case is possible, as was indicated above, when data from the digital signature or encrypted data, or, as will be indicated below, the identification code or number is applied to the object, i.e. directly to the product or product, or design. The system according to the first embodiment includes, respectively, means 4 for generating EDS (Fig. 1) or according to the second embodiment, means 14 for encrypting / decrypting data (

figure 2), designed to convert the source data about the product or product, or design into the corresponding digital data with electronic digital signature (EDS) or to encrypt the specified source data by converting them with the corresponding secret key (hereinafter in the description for the encryption option, for example, provides, as an example, a block encryption algorithm that uses the corresponding secret encryption key to encrypt / decrypt the source data. the rhythm and the terms used are indicated, for example, in A.L. Chmora, Moscow, “Helios ARV, 2001, p. 2046.) for product 1. The indicated means 4 of forming an EDS, consists of a shaper 44 of EDS, the first input-output of which is connected with the corresponding input-output of the cryptographic algorithm data memory block 46, another input-output is connected to the corresponding input-output of the memory block 42 formed by digital data with digital signature, the third input-output is connected to the input data input block 441, in addition, the means 4 contains means 45 of the formation and storage of secrets and their corresponding public keys, connected through the information 47 and the control 48 bus with the shaper EDS 44 and with the controller 43, which in turn through these buses 47 and 48 is connected with all blocks of the means 4 and controls their work, database 49, associated with the specified tires 47 and 48, intended for storing data on all generated data with electronic digital signature, including data on objects (product or product, or design), batch, date of manufacture, manufacturer, number of units of goods, region of shipment / r alizatsii etc. (for example, one entry in database 49 can be represented in the form: date, manufacturer code, product code, secret key, number of markings and / or number range of product copies, distribution region, etc.) and also intended for data storage sign or signs of the object (for example, the signs of the object may be: a certain date of presentation, the region from which the marking should be presented, the number of the instance is greater

// LGs

17 which cannot be the number of the marking presented, etc.),

contact 41 connectors (means port 4), associated with respective buses 47 and 48 of means 4, means for printing 411 graphic images of data with digital signature, corresponding inputs and outputs associated with the indicated memory unit 42 and with buses 47 and 48, respectively.

Specified for the second option (figure 2) means 14

data encryption / decryption consists of 144 data encoder / decoder, the first input-output of which is connected to the corresponding input-output of the cryptographic algorithm data block 146, the other input-output is connected to the corresponding input-output of the memory block 142 intended for storing the generated encrypted data , the third input-output is connected to the input data input unit 1441, in addition, the means 14 comprises means 145 for generating and storing secret encryption / decryption keys connected through the information 1 47 and a bus control 148 with an encoder / decoder 144 and a controller 143, which, in turn, is connected to all blocks of the means 14 by means of the indicated buses 147 and 148 and controls their operation, a database 149 associated with the indicated buses 147 and 148, intended for storing data on all generated encrypted data, storing secret encryption / decryption keys and corresponding source data, including data on the product or product, or design, batch, production date, manufacturer, number of items, shipment / sales region, etc. (for example, one entry in the database 149 data can be represented in the form of: date, manufacturer code, product code, secret key, number of markings and / or range of numbers of copies of the goods, distribution region, etc.) and also intended for data storage sign or signs of the object (for example, the signs of the object may be: a certain presentation date, the region from which the marking should be presented, the number of the copy cannot exceed the number of the presented marking, etc.), a print media 1411 graphic image live encrypted data corresponding inputs / outputs

.v / 2 r.

18 associated with said memory unit 142 and with buses 147 and 148

respectively. The transceiver 151, designed to receive and transmit encrypted data transmitted over the public communication network and to send a message containing a response on the identification of the goods, its first input-output associated with the corresponding input-output of the input-output block 1511, the second input-output associated with the corresponding input-output of the means 1512 alerts, the corresponding input-output of the transceiver 151 are connected respectively to the control 148 and information 147 buses means 14. Database 1501 data, pre designated for storing a list of encrypted data submitted for verification, connected by corresponding inputs and outputs with information 147 and 148 control buses, respectively, block 157 for checking the list of encrypted data submitted for verification and comparing the presented marking with a given sign or signs of an object (for example: by the date of presentation labeling and / or region of sale, and / or not exceeding the value of the unique product number over the highest number in the corresponding consignment, etc.) corresponding inputs and outputs with information 147 and control 148 buses, respectively, and as well as all of these blocks, operating under the control of controller 143.

Also for the first embodiment, the system (Fig. 1) comprises a device 5 for identifying an object by its marking, consisting of a block 52 for verifying the digital signature, corresponding inputs and outputs associated with the corresponding inputs and outputs of the memory unit 55 with data of the cryptographic algorithm, means 56 for storing the corresponding EDS keys, in addition, the listed blocks with the corresponding inputs and outputs are connected through the information 58 and control 59 buses with the controller 53 and operate under its control. The device 5 also contains an input-output unit 54 of data containing an electronic digital signature, the first input-output of which is connected to the terminal 541 of the input-output block 54 (device port 5), other corresponding inputs and outputs of the units included in the device 5 are also connected with said tires 58 and 59, an indication unit 502 connected through

2 f and

19

bus 58 and 59 with a controller 53 and designed to inform

about the result of verification of the signature. In addition, according to several possible scenarios, according to the first embodiment of the system (in the drawing, the blocks and communications are indicated by dashed lines), the identification device 5 may include a transceiver 51 for receiving and transmitting data containing electronic digital signature transmitted over a public communication network and for sending message containing the answer on the identification of goods, its first input-output associated with the corresponding input-output of the input-output block 511, the second input-output associated with the corresponding input home-output means 512 alerts, as well as the database 501, designed to store a list of data submitted for verification with digital signature, associated with the corresponding inputs and outputs with information 58 and 59 control buses, respectively, block 57 against the list of data submitted for verification with digital signature and comparing the presented marking with a given sign or signs of the object (for example: by the date of presentation of the marking and / or by region of sale, and / or not exceeding the value of the unique number of the product over the highest number in accordance favoring the consignment, etc.) associated with the respective vhodamivyhodami information 58 and managing schinami 59 respectively and as well as all of these blocks, running the controller 53.

And, in addition, the system according to the first embodiment may also provide for the possibility of a combined digital signature verification by means of devices 5 for checking both the electronic digital signature recorded in the memory device 2 and for checking the graphic image of the electronic digital signature recorded on the information medium 7 or applied to the object (product or product or design). Identification devices 5 are made in the same way as described above, but the goods 1, as described above, are equipped with a memory device 2 and a storage medium 7 or markings on the product itself. And, as mentioned above, according to the second embodiment, the system provides the ability to verify encrypted data, while a graphical image of the encrypted data is applied to the product or product, or design and / or media 7

information.

In addition, in the second and third scenarios of the first embodiment of the system (Fig. 1), the control 48 and information 47 buses of the digital signature generation tool 4 are connected, respectively, through communication channels 100 and 101 to the identification device 5 to provide data for verification to the tool 57 via his request from base 49 means 4.

The system according to the third embodiment may (FIG. 3) comprise means 6 for generating an identification code or number, which includes an identifier code or number generator 65 for generating data representing an identification code or number, which can be made in the form of, for example, a random number generator, the corresponding inputs and outputs of which are associated respectively with information 67 and control 68 buses, a database 69 intended for storing data issued identifiers code codes or numbers and for storing data of a sign or signs of an object, the corresponding inputs and outputs of which are also connected respectively to information 67 and control 68 buses, a memory unit 62 for storing the identification codes or numbers generated by the shaper 65 and printing means 611 a graphic image of the data of the specified code or number. The means 6 may include a contact connector 61, which may be a port of the means 6, both means 611 and 61 are connected to the information bus 67 and the control bus 68 of the means 6. In addition, all of these blocks and means operate under the control of the controller 63, the corresponding inputs and outputs of which connected with the controller, respectively, through the information 67 and control 68 bus. The system may also (FIG. 3) comprise an object identification device 3 by its marking, which, similarly to the system according to the first embodiment of the method, includes a transceiver 31, the corresponding input-output of which is connected to the input-output of the input-output unit 311, the corresponding input the output of which is connected with the input-output of the notification unit 312, the controller 33,

/ 2GF /

21

associated with the corresponding inputs and outputs with information

38 and the control bus 39, in addition, the identification device 3 includes means 37 for verifying the marking with the corresponding inputs / outputs associated with the information 38 and the control bus 39 and with the corresponding input / output of the database 35, designed to store a list of data identification codes or numbers presented to verification, also associated with the corresponding inputs and outputs with information 38 and control 39 buses associated with the controller 33. The blocks that make up the device 3 operate under the control of the controller RA 33. The authentication unit 371 is intended to verify the authenticity of the presented identification code or number by searching for the corresponding entry in the list of the base 69 of the means 6, which stores data on the identification codes or numbers generated and recorded in the device 2 and / or on the medium 7, and / or applied to the object (marking 11) and / or by determining the availability of the corresponding entry from the list of presented identification codes or numbers and block 371 is also intended to compare the presented marking specify the feature or features of the object (for example, by marking the date of presentation and / or in the region of implementation, and / or not exceeding the value of the unique number of the highest numbered item in a corresponding item Nartov etc.). In this case, the block 371 is connected through the information 38 and the control 39 of the bus, respectively, to the controller 33, through which the block 371 is connected through communication channels 102 and 103 with the database 69 of the indicated means 6 for transmitting data from the controllers 33 and 63 into it from specified base 69.

In addition, the system according to the third embodiment may include (Fig. 3) a reader 8 associated with a means for converting 18 read signals into messages associated with the transceiver 28 and intended for receiving and transmitting messages over the communication network. The reader 8 is designed to read data recorded in the device 2. The transceiver 28 is connected to the display unit 29.

, The claimed system for all implementation options works

in the following way. In order to ensure proper control, for example, of the quality and authenticity (legality) of the goods, within the framework of the claimed system, the relevant interested party, such as the manufacturer of the goods or the trading organization, announces in public sources information about the possibility of verifying the authenticity of the goods sold through the actions and means described in this application. So, any interested buyer is informed about the possibility of verifying the authenticity of the goods by checking the data corresponding to this product with electronic digital signature or by checking encrypted data or by checking the identification code or number. In particular, according to the first scenario, for the first variant (Fig. 1) of the system implementation, the buyer is informed about the possibility of carrying out the said verification by means of devices 5 for identifying the goods by their marking, which, for example, can be previously distributed among the relevant trading organizations. At the same time, for example, in the production of the indicated product, it is preliminarily provided with a corresponding memory device 2, which, for example, can be made in the form of a microchip and into which, for example, when transferred to the corresponding trading organization, the corresponding digital data is processed, processed with the EDS secret key, those. Signed EDS data is entered. Moreover, these data may contain various information, for example, about the manufacturer, about the trading organization and / or region of sale, about the date of production, about the expiration date, a unique product number, etc., i.e. the data is an electronic version of the product label. The production of data containing EDS is carried out by means of EDS generation tool 4, while using the input unit 441, the corresponding source data defining and identifying the product is introduced into the EDS 44 generator, at the same time, the corresponding EDS secret key is selected from the means for generating and storing the keys and they also submit it to the shaper 44, where according to the data of the corresponding cryptographic algorithm stored in the memory block 46,

23 appropriately convert source data into digital signature

for the specified product (the procedure for creating an electronic digital signature by converting the source data is described in detail in RU 2157001 C1, G07 F19 / 00, 09/27/2000, CJSC Alcorsoft et al.). Then, data on the generated data with EDS can be sent for storage to the database 49, and also these data are sent to the memory means 42, through which the contact of the connector 41 (port of the tool 4) through the corresponding contact 22 of the connector (port of the device 2 memory) write the specified data from the digital signature to the memory unit 21 of the device 2. In the same way, according to the second and third scenario of the first embodiment, the means 4 generate the corresponding data from the digital signature for the corresponding product, in the same way as in the first scenario in the third the scripts record the indicated data into the memory device 2 and, in addition, the generated data from the memory unit 42 is sent to the graphic image printing means 411, by means of which the indicated image is applied to the information medium 7 or, as indicated above, the image of data is applied with EDS directly on a product or product, or on a design. According to the second embodiment of the system (Fig. 2), encrypted / decrypted means 14 generate encrypted data for the product or product, or structure. At the same time, through the input unit 1441, the corresponding initial data defining and identifying the product is introduced into the encoder / decryptor 144, at the same time, the corresponding secret encryption key is selected from the key generation and storage means 145 and is also fed to the encryptor / decryptor 144, where the data of the corresponding cryptographic algorithm stored in the memory unit 146, respectively, encrypt the source data for the specified product (the procedure for encrypting the source data, for example, using the algorithm and block encryption, described in detail in A. Petrov, “Computer Security, Cryptographic Methods of Protection, Moscow, DMK, 2000, pp. 34-53). These encrypted data from the block 142 of the memory is sent to the means 1411 print a graphical image of the data by which to put the specified image on the storage medium 7

w

24 or, as indicated above, apply an image of encrypted data

directly to a product or product, or to a structure. The method of printing an image in this application is not considered in detail, but is set out schematically, with this being understood various options for printing or printing using a stamp, etc. In addition, in particular cases of implementation, according to the second and third scenarios of the first embodiment, for the second and third variants of system implementation, when, as was indicated, the image of data from the digital signature is applied to the information carrier 7 and / or directly to the product or product, or structure , the specified image of data from EDS or encrypted data, or an identification code may be hidden to avoid copying this data. Moreover, the concealment, in whole or in part, of the image of the data can be drained by various known methods, for example, by demounting the specified image or its part in places that cannot be accessed without violating the integrity of the product or its packaging, for example, under the cover of a bottle, container, etc. p. or by applying to the specified image a masking layer, the integrity of which is easily verifiable, and reading data containing it in the specified image is impossible without violating the integrity of such a mask, Niya. The methods of applying such masking devices and their devices are widely used in practice and are known, for example, through such masking, its layer is covered by the identifier of a prepaid service card, for example, by telephone, to avoid possible abuse by third parties who have access to the card before its sale. In addition, other methods of hiding these data can be used, including providing for the separate location of the goods and the information carrier 7, when they can be in different places. These methods of concealment and means for their implementation for simplicity are not shown in the diagrams.

So, the data generated with the digital signature for the corresponding product according to the first variant of the system are recorded in the corresponding memory device 2 and / or on the information carrier 7 and / or applied to the goods or to the product, or to the construction or encrypted data of the second variant of the system

25

recorded on the information carrier 7 and / or applied to the product or product,

or on a structure, for example, during its production or during its implementation through a distribution network. Further, everywhere in the description, for simplicity, a description is given of the implementation for the case of recording data on the information carrier 7 and / or when applied to the product or product, or to the structure only with reference to the carrier 7.

In addition, as mentioned above, for all three described systems, in the corresponding databases, in the database 49 according to the first, in the database 149 according to the second and in the database 69 according to the third variants of the system, along with data on the generated markings, the characteristic data or features of the object, which can subsequently determine the legality and / or authenticity of the marking of the object presented for verification. Moreover, for all the described systems, various scenarios are possible for establishing an unambiguous correspondence between the formed markings and the corresponding features of the object, in the process of marking goods and their further distribution. For example, the following scenario is possible, when all objects marked on the same day are sent to one trading organization or to one region, or a scenario is possible in which they mark the objects first, and then, when they are distributed / shipped to the trading organization or region, data about shipped marked objects in accordance with the distribution / shipment. The procedure for accounting and control of shipped marked objects can be built on the basis of well-known and widespread warehouse accounting technologies, for example, using bar coding, when for the corresponding batch of objects (a box with several units of goods, a stack with several boxes, a container with several stacks, etc.). etc.) or an additional marking is printed on each copy of the product in the form of a bar code (in this case, the bar code may contain marking data or information about markings included x to a given consignment of goods), and when a consignment is shipped to a specific addressee, the indicated bar code is read by a scanning device (for example, a laser scanner) and thus data on the shipped are received and stored

labeled objects in accordance with

distribution / shipment.

Further, a person who is interested in verifying the authenticity and / or legality of the goods being sold, for example, a buyer, who wants to carry out the appropriate identification of the object within the framework of the announced system according to the first scenario of the first option (Fig. 1) using device 5

identification of an object by its marking, which, as indicated, is preliminarily distributed among trading organizations, may conduct such a check. In this case, to verify the digital signature, the connector 541 of the input / output unit 54 is brought to the corresponding connector of the contact 22 of the memory unit 21. The input / output unit 54 is a means of reading with the possibility of inputting information to the device 5. They send a signal to read data through the controller 53 from the unit 21 of the memory of the device 2 data with EDS and data input through the first block 54 input-output unit 52 to check the EDS. In this case, for example, after reading the necessary data from the device 2, a signal can be sent to eliminate the specified data in order to prevent the possible copying of the memory device 2 with the recorded data. The read data through the input-output block 54 and through the information board 58 is fed to the EDS block 52, in which, using the corresponding EDS key, the data of which is stored in the means 56 for storing the corresponding EDS keys and according to a cryptographic algorithm, the data of which is stored in the memory unit 55, appropriate calculations are made to determine the authenticity of the digital signature (for example, for a description of the authentication see CJSC Alcorsoft et al. RU, 2157001, C1, G07, F19 / 00, 09/27/2000). It should be noted that within the framework of the selected cryptographic system, a periodic change of secret and corresponding public keys is provided, it can be possible to enter the corresponding EDS public key or its identifier using the corresponding block (not indicated in the drawing), while the corresponding EDS public key data or their data identifiers can be displayed in the form of a graphic image on the label of the checked product or in another accessible place (at the same time

27

EDS public key identifier can be, for example, date

the production of the goods being checked or a serial number in the list of public EDS keys, the data of which are stored in the specified means 56 for storing the corresponding EDS keys). As mentioned above, there are many examples of the implementation of electronic digital signature schemes and methods for verifying its authenticity (see A.L. Chmora, “Modern Applied Cryptography, Moscow 2001,“ Helios ARV, pp. 105-112.) Thus, according to the result of the authentication of the digital signature, which is carried out by processing the entered data from the digital signature through the input-output block 54 using the cryptographic algorithm of the block 55 and the public keys of the digital signature of the block 56, the accuracy of the entered data is determined, i.e. EDS authenticity. After the check, the controller 53 sends a corresponding command to the display unit 502, by means of which the result of the check is signaled.

According to the second scenario of the first embodiment and the second embodiment of the system (FIGS. 1, 2), digital signature authentication or encrypted data verification (identification) is carried out as follows. The interested person reads a graphic inscription of the specified data from the digital signature or the specified encrypted data. In the event that the indicated inscription is hidden, the masking device is removed prior to reading or otherwise made accessible by the image with the graphic inscription of data from the digital signature, for example, they open the packaging of the goods or open the envelope sealed accordingly, etc. They read the data, the graphic display of which can be represented in the form of alphanumeric characters representing data from digital signature or encrypted source data. In this case, after reading the data, you can contact the identification device 5, or with the means 14 for encrypting / decrypting the data, for example, via a communication network over the Internet or by phone and transmit a message containing data from the digital signature or encrypted data. In addition, the message transmitted over the communication network may indicate the region in which the goods were purchased. There are various options for receiving and transmitting messages in a telephone conversation with the identification device 5, or with

means 14 for encrypting / decrypting data (not shown in the drawing), for example, in a tone mode or in a voice message transmission mode, depending on the embodiment of the transceiver 51 according to the first embodiment of the method or 151 according to the second embodiment of the method (respectively, further on text) and the second I / O block 511 or 1511 for cases of working in automatic mode or by communicating with a telephone operator. Moreover, to operate the system in automatic mode, an “expansion board for computer telephony systems with a serving server can be applied. The specified fee may be, for example, manufactured by Dialogic (see Ivanova TI “Subscriber Terminals and Computer Telephony, Moscow“ Eco-Trends, 1999, p. 132). In this case, the implementation of the computer telephony card and the serving server are a transceiver 51 or 151, a second input / output unit 511 or 1511, and a voice announcement driver 512 or 1512. Otherwise, the creation of an equipped workstation for a telephone operator (telephone operator) is provided, comprising a terminal configured to connect to the telephone network and connected to an identification device 5, or to a data encryption / decryption means 14 (for example, a telephone set and a personal computer) while the transceiver 51 or 151 and, respectively, the input / output unit 511 or 1511 and the voice alert driver 512 or 1512 can be a telephone terminal (telephone) by which the telephone operator communicates with the subscriber and the telephone operator’s personal computer through which the telephone operator transmits data received from the subscriber to the identification device 5 or to the encryption / decryption means 14, and the identification device 5 or the encryption / decryption means 14 are based on the server , controller 53 or 143, which operates according to the program described below. In the input-output block 511 or 1511, data from the digital signature or encrypted data received in the message over the communication network are converted into digital signals and

29 through the controller 53 or 143 enter into block 52 check the digital signature or

encryptor / decryptor 144. Then, the goods are identified by verifying the authenticity of the digital signature, as described for the first version of the system, or by decrypting the data for the second version of the system. The data decryption procedure may, for example, be carried out as follows. When encrypted data is entered into the encryptor / decryptor 144 from the encryption key storage means 145, the corresponding secret key on which the encryption was performed is sent to block 144. Moreover, in the case when the identification system under consideration provides for the identification of a large assortment of goods, the selection of the corresponding secret key can, for example, be carried out in accordance with an identifier that can be placed together with encrypted data, for example, can be placed in an inscription containing encrypted data . Moreover, the information identifying the manufacturer and / or the name of the object (product) can be encoded in the indicated identifier, and / or the production date and the like can be the identifier, that is, the information in the indicated identifier can be source data, and can be stored in in the form of the corresponding record in the database 149 in the list of all generated and recorded data, and accordingly, the specified identifier can serve as a standard with which the value of the decrypted data is compared. Thus, when the encrypted data and the corresponding encryption key are entered into the block 144, the data is decrypted using the corresponding cryptographic algorithm, the data of which is stored in the memory block 146. The obtained decrypted data is checked, as indicated above, by searching through the block 157 in the database 149 for the corresponding record and / or comparing the decrypted marking data for compliance with the specified attribute or attributes of the object (for example: by the date of presentation of the marking and / or by region of sale, and / or not exceeding the value of the unique product number over the highest number in the corresponding consignment, etc.). Moreover, this check is intended to exclude the possibility of selling expired goods.

30 to control the region of sale of goods, to control the volume

release of goods, etc. In addition, as provided for in some cases of the implementation of the first version of the system, (the procedure is described below), the specified decrypted data is checked in the database 1501 according to the list of all data presented for verification, which is also carried out using block 157. At the same time, this check designed to exclude possible unauthorized copying. Based on the results of the checks and comparisons, for example, as described above, they judge the authenticity and / or legality of the marking or object (product or product, or design). In addition, in another case, for a possible scenario for the implementation of the first version of the system, within the framework of the implemented product identification system, it is announced that it is necessary to transfer the specified data via the communication network to the identification device 5, for example, by transferring them as indicated above by telephone or via Internet transmission. Data can be received by telephone both automatically and by transmitting it in the form of a voice message to a telephone operator (channel 51 of the transceiver) via blocks 511 and 51. Further, in the part of signature authentication, the device 5 operates as described above, while also in special cases of implementation, a periodic change of secret and corresponding keys can be provided for, their public keys, EDS public key data or their identifiers can be published in a separate inscription, for example, on iketke, or can be added to the label that displays data from the digital signature or encrypted data. In this case, the key storage means 56 is configured to change secret and corresponding public keys. In the device 5, it is possible to check for the presence of relevant records in the database 501 of data intended for storing the list presented for verification of data from the digital signature, while recording the corresponding record in this list is carried out with a positive verification of the presented data from the digital signature and transferring the verification data from block 52 checks to database 501. For any presentation of data for verification, block 57 by means of controller 53

, /2.e

31

sequentially compares newly entered data with list data in

database 501. Based on the results of the audit, they conclude that the goods are genuine or that re-submitted data with digital signatures indicate that the goods, for example, are forged. In this mode, the data from the digital signature also come through block 511 to the check block 57 of the list data. In this block, a sequential comparison of the received data with the data from the database 501 is performed, i.e. submitted for verification and tested positively. If the data received by the device 5 coincided with one of the data in the database 501, they form the corresponding response, which can be transmitted back to the caller through the communication network through the transceiver 51. In addition, it is possible to check for the availability of an appropriate entry in the database 49 of the means 4, designed to store data about all the generated data, access to which is possible through the corresponding communication channels 100 and 101. The check is also carried out in block 57, but the fact is checked the availability of relevant data from the EDS recorded in the database 49 at the stage of generating the corresponding data from the EDS and entered into the device 2 and / or the carrier 7 and / or the goods 1. The specified check on the list in the database 49 is also carried out in block 57 by comparison the data received from the transceiver 51 and the corresponding source data from the database 49. Also, in the base 49, by means of block 57, the presented markings are compared for compliance with a given sign or signs of the object (for example: by the date of presentation of the markings and / or the implementation of the region, and / or not prevyscheniya value of the unique number of the goods on the highest number in the relevant consignment, etc.). Moreover, this check is intended to exclude the possibility of selling expired goods, to control the region of sale of goods, to control the volume of output of goods, etc.

According to the third scenario of the first embodiment of the system, as indicated above, the goods 1 are provided simultaneously with a memory device 2 and a storage medium 7. And accordingly, the identification of the goods by its

y / lg

labeling according to this scenario is carried out similarly to the first and

second scenarios of the first variant of the method at the same time.

According to the third embodiment of the system (FIG. 3), as mentioned above, an identification code or number is used to identify the object, which is generated in the means 6 for generating an identification code or number, for example by means of a random number generator 65, and which are stored in the database 69 data. In this case, as in the first embodiment, the generated code is recorded in the memory device 2 and / or applied to the information carrier 7 in the form of a graphic image, which, in particular cases of implementation, can be hidden until identification or applied directly to the goods. In this case, the indicated memory devices 2 and / or information carriers 7 are supplied with the goods 1. The memory device 2 and the information carrier 7 are configured to read the recorded data from them for transmission over the communication network, namely, the identification code or number data recorded in the device 2 can be read by means of a reading device 8, data directly deposited on the goods can be read by this device. The device 8 is connected to the Converter 18, designed to convert the read signals into messages, connected to the transceiver 28, designed to transmit messages over the communication network. The transceiver 28 is configured to connect to a network, such as the Internet via a modem (not shown in the drawing), for transmitting read data, or the transceiver 28 can be connected to an indication means 29, for example, in the form of a display on which the read data is displayed and which can be transmitted over a network, such as a telephone communications network, via a telephone. In the case of reading data recorded on the medium 7, which, as indicated above, is written in the form of a graphic inscription, the reading is carried out by visual inspection and then they are also transmitted via the communication network, in this case, instead of means 8, 18 and 28, use the phone .

communications, for example by telephone or over the Internet, or otherwise,

for example, by means of means 8, 18, 28. Moreover, as described in the previous embodiment, automatic reception or reception by a telephone operator is possible. The data received from the verification linden, through the I / O block 311, is sent to the verification means 37, in which the received identification code or number is checked by comparing the received identification code with the codes presented for verification, the lists of which are stored in the database 35 (the lists are formed similarly as in device 5). They verify the authenticity of the received code in another way - they determine its presence in the list of all generated codes, the data of which is entered when the specified identification codes or numbers are written into the memory device 2 and / or on the information medium 7 and stored in the database 69 of the means 6, when forming the identification codes or numbers. Data is accessed through the corresponding communication channels 102 and 103 by means of a transceiver 31 controlled by a controller 33. Control according to the list of data submitted for verification is carried out as well as according to the first embodiment. At the same time, the entry in the list of codes presented for verification is entered immediately after verification in block 371. As part of the system for identifying the goods in question, the detection in the data list means that the goods were sold and they were presented again. In this case, the means 37 through the controller transmits to the means of indication 39 that the presented data is not authentic. In addition, they check the presented marking for compliance with the specified sign or signs of the object (for example: by the date of presentation of the marking and / or the region of sale, and / or not exceeding the value of the unique product number over the highest number in the corresponding consignment, etc. .). Moreover, this check is intended to exclude the possibility of selling expired goods, to control the region of sale of goods, to control the volume of output of goods, etc. Based on the results of the checks and comparisons of the identification code or number received over the communication network, for example, the authenticity (legality) of the corresponding product is judged, and the response is accordingly passed back to the inspector in the form

corresponding message, for example, using a telephone operator.

In addition, it should be added that in each of the nodes 3, 4, 5, 6 and 14 of the system, the blocks included in them are interconnected via control and information panels, respectively.

The given implementation examples are one of the possible embodiments of the utility model, while there are many other systems that allow the implementation of the claimed methods.

35

Claims (57)

1. A system for marking and identifying an object, comprising means for generating data with electronic digital signature (EDS) and an identification device, characterized in that said means for generating digital data with EDS is configured to apply generated data from the digital signature to the object and / or record generated data with an electronic digital signature in the appropriate memory device, designed to supply the object, and / or record the generated data with electronic digital signature on the appropriate storage medium designed to supply the object, the specified identification device is configured to identify the specified object by verifying the authenticity of the specified EDS, by processing the specified data with the EDS, the corresponding EDS key according to the corresponding cryptographic algorithm, and / or by checking the availability of the corresponding entry in the list of all data submitted for verification with the EDS, and / or by comparing the presented data with an electronic digital signature for compliance with a given attribute or attributes of an object.  2. The system according to claim 1, characterized in that the means for generating digital data with an electronic digital signature contains an electronic digital signature generator, the first input-output of which is connected to the corresponding input-output of the memory block with the data of the cryptographic algorithm, the other input-output is connected to the corresponding input-output the memory block of the generated digital data with an electronic digital signature, the third input-output is connected to the input data input unit, in addition, the digital data generating means with an electronic digital signature contains means for generating and storing secret and corresponding open keys d, connected through the information and control buses to the EDS driver and to the controller, which through these buses is connected to all blocks of the means for generating data from the EDS and configured to control their work, a database designed to store data on all generated data from the EDS, associated with the specified information and control buses, the contacts of the memory block connector of the generated data with digital signature are designed to connect to the specified memory device to provide the specified record and are connected respectively, with the indicated tires, means for printing a graphic image of data with an electronic digital signature, connected via corresponding tires to a memory block of generated data with electronic digital signature, intended for reading data from an electronic digital signature from it and writing to the indicated memory device and / or to the indicated information carrier.  3. The system according to claim 1, characterized in that the identification device comprises an EDS verification unit, corresponding inputs and outputs associated with corresponding inputs and outputs of a memory unit with cryptographic algorithm data, an EDS public key storage means, an EDS data input-output unit, the first input of which is connected to the connector pins of the indicated I / O block, associated with the indicated buses, the list data verification unit and comparisons with a given sign or signs of the object and an indication means In order to inform the EDS about the result of the verification, the listed blocks are connected via the information and control buses to the controller intended for control and / or the transceiver intended to receive data transmitted through the communication network from the EDS and to send a message containing the answer via identification of the object, one input connected to the corresponding output of the I / O unit, one output connected to the corresponding input of the warning device, and the corresponding inputs transceiver odes-outputs are connected respectively to the control and information buses, a database intended for storing the list presented for data verification with digital signature, associated with the corresponding inputs and outputs with information and control buses.  4. The system according to claim 1, characterized in that the memory device is configured to read data from the digital signature from it and transmit it to the identification device by reading them from the memory device through the corresponding pins of the identification device connector.  5. The system according to claim 1, characterized in that the storage medium is configured to record and save a graphic image of the generated data from the digital signature and / or the specified data deposited on the object is made in the form of a graphic image of the generated data from the digital signature.  6. The system according to claim 5, characterized in that the graphic image of the data from the digital signature is a bar code.  7. The system according to claim 1, characterized in that the storage medium and / or the indicated data deposited on the object is configured to visually read data from them with EDS recorded in the form of a graphic image for subsequent transmission of the read data over the communication network for identification to the identification device.  8. The system according to claim 5, characterized in that the graphic image of the data from the digital signature is an inscription of alphabetic and / or digital characters.  9. The system according to claim 1 or 7, characterized in that said identification device is configured to connect to a communication network to receive digital data from EDS and to send messages containing the result of the identification of the object.  10. The system according to claim 7 or 9, characterized in that the communication network is a public telephone network.  11. The system of claim 10, characterized in that the identification device in the telephone communication network corresponds to a specific telephone number.  12. The system according to claim 7 or 9, characterized in that the communication network is an Internet network.  13. The system according to claim 7 or 9, characterized in that the communication network is a telecommunications network.  14. The system according to claim 1, characterized in that the memory device is a microchip.  15. The system according to claim 4, characterized in that the memory device consists of a memory unit and associated contacts of the memory unit connector, designed to enable the input or output of these digital data from the digital signature when reading data from the memory unit by an identification device.  16. The system according to claim 1, characterized in that the object is a product or product, or a structure, or a vehicle, or elements that are part of a product or product, or a structure, or a vehicle, or a security form, and a storage medium represents a label or tag, or an excise stamp, or a print on the package, or a label, or a print on the object.  17. The system according to claim 5 or 7, characterized in that said graphic image of the generated data with digital signature, recorded on an information carrier and / or on an object, is made, at least partially, covertly by applying a masking device to said image and / or by placing the specified image in places accessible after opening the package of the object.  18. The system according to claim 1 or 16, characterized in that the memory device and / or storage medium is placed on the packaging of the object, including the product or product, or structure, and / or placed directly on the object, and / or placed separately from object on the corresponding label or tag, or card, or label.  19. The system according to p. 18, characterized in that, at the indicated location of the indicated memory device and / or information carrier, a graphic image of the data of the corresponding EDS key for digital data with EDS recorded in the indicated memory device and / or on the information carrier is placed with them .  20. The system according to p. 18 or 19, characterized in that the object also contains a graphic image of the identifier data of the corresponding EDS key.  21. The system according to claim 1, characterized in that the given sign or signs of the object may be the production date and / or product code, and / or the region of distribution, and / or the trade organization, and / or the name of the legal or natural person, and / or the face value of the security, and / or the number of markings, and / or the highest instance number.  22. A system for marking and identifying an object, comprising means of encryption / decryption, characterized in that said means of encrypting / decrypting data is configured to generate corresponding data, at least partially encrypted, and to apply said generated data to the object and / or to write said generated data on an appropriate storage medium designed to supply the object, the encryption / decryption tool is configured to identify the object by cheap frovaniya encrypted data and / or by checking the corresponding entry in the list of all data presented for verification, and / or by comparing the data presented in conformity with a predetermined feature or features of the object.  23. The system of claim 22, wherein the data encryption / decryption means comprises a data encoder / decoder, the first input-output of which is connected to the corresponding input-output of the cryptographic algorithm data memory block, the other input-output is connected to the corresponding input-output a memory unit for storing the generated encrypted data, the third input-output is connected to the input data input unit, a means for generating and storing secret encryption / decryption keys connected through information a control bus with an encoder / decoder unit and with a controller, which, in turn, is connected to all blocks of the data encryption / decryption means via these buses and is capable of controlling their operation, a database associated with these buses and designed to store data on all generated encrypted data and the corresponding source data, a means of printing a graphic image of the encrypted data, the corresponding inputs and outputs associated with the specified memory unit and with buses, a transmitter, intended for receiving and transmitting encrypted data transmitted over a communication network and for sending a message containing a response on the identification of the object, with its first input-output connected to the corresponding input-output of the input-output unit, the second input-output connected to the corresponding input - the output of the warning device, the corresponding inputs and outputs of the transceiver are connected respectively to the information and control buses, a database designed to store the list presented to verification of encrypted data associated with the corresponding inputs and outputs with information and control buses, respectively, a verification unit according to the list of encrypted data submitted for verification and comparison of the presented data with a given sign or attributes of the object, associated with the corresponding inputs and outputs with information and control buses, respectively, and so on the same as all of these blocks are made with the ability to work under the control of the controller.  24. The system according to p. 22, characterized in that the storage medium and / or the specified data deposited on the object, made with the possibility of visual reading from them encrypted data recorded in the form of a graphic image, for subsequent transmission of the read data over the communication network for identification encryption / decryption tool.  25. The system according to p. 22, characterized in that the storage medium is configured to record and save a graphic image of the generated data and / or these data deposited on the object, made in the form of a graphic image of the generated data.  26. The system according A.25, characterized in that the graphic image of the generated data is a bar code.  27. The system according A.25, characterized in that the graphic image of the generated data is an inscription of alphabetic and / or digital characters.  28. The system of claim 22, wherein the communication network is a public telephone network.  29. The system according to p. 28, characterized in that the means of encryption / decryption in the telephone communication network corresponds to a specific telephone number.  30. The system according to item 22, wherein the communication network is an Internet network.  31. The system according to item 22, wherein the communication network is a telecommunications network.  32. The system of claim 22, wherein the object is a product or product, or a structure, or a vehicle, or elements that are part of a product or product, or a structure, or a vehicle, or a security form, and a storage medium represents a label or tag, or an excise stamp, or a print on the package, or a label, or a print on the object.  33. The system according A.25, characterized in that the specified graphic image of the generated data recorded on the storage medium and / or on the object, made at least partially, covertly by applying to the specified image a masking device and / or by placing the specified image in places accessible after opening the package of the object.  34. The system according to item 22, wherein the storage medium can be placed on the packaging of the object and / or placed directly on the object, and / or placed separately from the object on the corresponding label or tag, or card, or label.  35. The system according to p. 34, characterized in that at the indicated location of the specified information medium, a graphic image of the data of the corresponding encryption and / or decryption key identifier for encrypted data recorded in the information medium and / or on the object is placed with them.  36. The system according to p. 22, characterized in that the given sign or signs of the object can be the production date and / or product code, and / or the region of distribution, and / or trade organization, and / or the name of the legal or natural person, and / or the face value of the security, and / or the number of markings, and / or the highest instance number.  37. A system for marking and identifying an object, comprising means for generating data of an identification code or number and an identification device, characterized in that said means for generating data of an identification code or number is configured to apply an generated code or number and / or records of generated data to the object identification codes or numbers in the corresponding memory device, designed to supply the object, and / or record the generated identifier data code or numbers on the appropriate information carrier designed to supply the object, and the specified identification device is configured to identify the object by checking the availability of the corresponding entry in the list of all generated and recorded identification codes or numbers and / or by checking the availability of the corresponding entry in the list of all presented verification of identification codes or numbers, and / or by comparing the presented data with a given sign or signs of the object.  38. The system according to p. 37, wherein the identification device comprises a transceiver, corresponding input-output connected to the corresponding input-output of the input-output unit, another input-output connected to the corresponding input of the warning device, information and control input-output of the transceiver connected respectively through the information and control buses to the controller, the identification device contains means for checking the identification code or numbers, the corresponding inputs and outputs are connected e with information and control buses and with the corresponding input / output of a database intended for storing a list of data of identification codes or numbers presented for verification and / or intended for storing a list of data of identification codes or numbers generated and recorded in the indicated memory devices and / or to these storage media, also associated with the corresponding inputs and outputs with information and control buses, the controller is designed to control the blocks contained in the device stve identification.  39. The system according to clause 37, wherein the identification code or number is a serial number and / or a randomly selected number.  40. The system according to clause 37, wherein the means for generating data of an identification code or number comprises a driver of an identification code or number intended to generate data representing an identification code or number, the corresponding inputs and outputs of which are associated respectively with the information and control buses , a database designed to store data issued by identification codes or numbers, the corresponding inputs and outputs of which are also associated with information and control buses, a memory unit for storing the generated identification code or number, a means of printing a graphic image of the data of the specified code or number, connector pins, means of generating data of the identification code or number, all of these blocks, including these contacts, are associated with information and control buses, which are also connected to the inputs / outputs of the controller, configured to control the above blocks.  41. The system according to clause 37, wherein the memory device is configured to read the identification code or number from it and transmit it to the identification device by reading them from the memory device through the corresponding contacts of the identification device connector.  42. The system according to clause 37, wherein said storage medium is configured to record and save a graphic image of an identification code or number, and / or said data deposited on the object is made in the form of a graphic image of an identification code or number.  43. The system of claim 42, wherein the graphic image of the identification code or number is a bar code.  44. The system according to p. 42, characterized in that the storage medium and / or the specified data deposited on the object, is made with the possibility of visual reading from them the identification code or numbers recorded in the form of a graphic image, for subsequent transmission of the read data over the communication network for identification on the identification device.  45. The system according to clause 37, wherein said identification device is configured to connect to a communication network to receive an identification code or number and to send messages containing the result of the identification of the object.  46. The system according to item 45, wherein the communication network is a public telephone network.  47. The system according to item 46, wherein the identification device in the telephone communication network corresponds to a specific telephone number.  48. The system according to item 45, wherein the communication network is an Internet network.  49. The system according to item 45, wherein the communication network is a telecommunications network.  50. The system according to clause 37, wherein the memory device is a microchip.  51. The system according to clause 37, wherein the system comprises a reader configured to read data recorded in the memory device and transmit them via the communication network to the specified identification device, through a read signal transformer and a transceiver connected in series.  52. The system of claim 51, wherein the memory device consists of a memory unit and associated contacts of a memory unit connector, designed to enable input or output of said identification code or number when reading data from the memory unit by an identification device.  53. The system according to clause 37, wherein the object is a product or product, or a structure, or a vehicle, or elements that are part of a product or product, or a structure, or a vehicle, or a security form, and a storage medium represents a label or tag, or an excise stamp, or a print on the package, or a label, or a print on the object.  54. The system of claim 42, wherein said graphic image of an identification code or number recorded on a storage medium and / or on an object is made at least partially covertly by applying a masking device to said image and / or by placing the specified image in places accessible after opening the package of the object.  55. The system according to item 53, wherein the memory device and / or storage medium are located on the packaging of the object, and / or placed directly on the object, and / or placed separately from the object on the corresponding label or tag, or card, or label .  56. The system according to p. 53 or 55, characterized in that the memory device and / or storage medium are placed on the packaging of the object and / or placed on the object, including on the product or product, or design, and / or placed separately from the object , including product or product, or design, on the appropriate label or tag, or card, or label. 57. The system according to clause 37, wherein the specified sign or signs of the object may be the production date and / or product code, and / or the region of distribution, and / or trade organization, and / or the name of the legal or natural person, and / or the face value of the security, and / or the number of markings, and / or the highest instance number.