WO2022229015A1

WO2022229015A1 - Method for the secure registration and checking of the authenticity of a packaged product

Info

Publication number: WO2022229015A1
Application number: PCT/EP2022/060687
Authority: WO
Inventors: Walter Braumandl
Original assignee: Sensor-Instruments Entwicklungs- Und Vertriebs-Gmbh
Priority date: 2021-04-29
Filing date: 2022-04-22
Publication date: 2022-11-03
Also published as: DE102021111015A1

Abstract

The invention relates to methods for tracking and checking high-quality or sensitive products (10). In a first method, the product (10) is registered in a secure manner in that two different codes (12, 18) which are applied onto a packaging or a seal of the product (10) are detected and the coded information is stored in a secure manner. The aforementioned method is preferably carried out in a distributed system using a blockchain, for example. The product (10) can then be checked again at each additional point in the supply chain, wherein the information which is detected again is likewise stored as part of the blockchain. In this manner, the authenticity of the product can be checked at each point in the chain, in particular during the final handover of the product (10), and any manipulation at a specific point in the chain can be ascertained.

Description

PROCEDURE FOR SECURE REGISTRATION AND VERIFICATION OF AN AUTHENTICITY

OF A PACKAGED PRODUCT

The present invention relates to methods for securely registering a packaged product and for verifying the authenticity of the packaged product. In addition, the present invention relates to a system for carrying out the methods mentioned, as well as other methods for checking the authenticity of an object using a determination of a characteristic variable that indicates a phosphorescence of at least one marker.

Various methods are known which can be used to mark products that are secure against forgery, for example pharmaceutical packaging or containers such as bottles and the like.

For example, EP 2 318 286 B1 discloses an authentication method and system that is used in conjunction with a packaging film for product authentication. The packaging film contains pigment particles which are present in a random distribution in one surface of the packaging film. A product is packaged with a packaging film containing the randomly distributed pigment particles. An identity code is derived from the relative position coordinates and optionally the color values of the pigment particles according to an encryption algorithm and recorded. During authentication, an imaging device records a digital image of the surface of the packaging film that contains the pigment particles. The digital image is evaluated by a computer, a check code being derived from the relative position coordinates of N different pigment particles and optionally the color values of the same, and compared with recorded identity codes with regard to a match.

DE 102015 005 304 B3 discloses a device having a UV lighting unit adapted to illuminate an object to be authenticated. In addition to the above-mentioned relative position coordinates of pigment particles, the device can also determine a characteristic decay behavior of a phosphorescence of a marker, which can be compared with a stored reference. In this way, it can be queried, for example, whether an object to be examined is a packaging film made by a specific manufacturer. The object of the invention is to provide a way of being able to reliably and reliably check the authenticity of a packaged product, in particular at several points in a supply chain of the same.

This object is achieved by a method according to one of claims 1 and 6 and a system according to claim 16. In addition, the object is achieved by a method according to one of claims 17 and 18. Developments of the invention are specified in the dependent claims.

Secure registration of a packaged product using two preferably different codes applied to a component of a package of the product enables increased security against counterfeiting compared to using only one code. The codes are in a form that has to be read out using special devices or is not visible and/or evaluable with the naked eye. If the two codings are provided, for example, on a seal of the packaging of the product, a suitable query, for example with the end seller of the product, can ensure that the product is in its original packaging and therefore also the original product. In this way, security can be additionally increased if the two codes are not only provided on one component, for example the seal, but also on a second component, for example a closure of a container or the container itself. This can ensure that, in the event that counterfeiters get hold of a quota of the original seals, for example, they would also have to obtain the original containers in order to be able to counterfeit the product.

Furthermore, security is improved in that the codings are registered and securely stored at a first, trustworthy location, for example the manufacturer of the product, in association with one another (linked to one another). This can be done, for example, on a secure server owned by the manufacturer or by the trusted authority. However, it is particularly advantageous, especially if the authenticity or integrity of the product is to be checked again at several points in the supply chain Storing information in a distributed manner, in particular in the form of a so-called blockchain.

A suitable selection of the two codes from a plurality of codes on the one hand allows increased flexibility and on the other hand a possible counterfeiting of the product is made more difficult since the counterfeiter cannot readily determine which codes are used for a specific product.

Further features and advantages result from the description of exemplary embodiments based on the figures. Show it:

1 is a schematic view of a system for performing the methods disclosed herein;

Fig. 2 is a schematic view showing different ways of applying different codes to a packaged product;

FIG. 3 shows several examples of encodings that can be used in connection with the methods disclosed herein; FIG.

FIGS. 4 and 5 show schematic views of an exemplary detection device for performing the methods disclosed herein;

6 exemplary intensities of a primary emission and a secondary emission for determining a characteristic variable of a phosphorescence of a marker; and

7 shows a diagram that illustrates a determination of a cut-off frequency when a phosphorescent marker is excited with pulse sequences with different frequencies.

A system or a method for the secure registration and verification of the authenticity of a packaged product is described below with reference to the figures. 1 shows a schematic view of a system 200 for registering, tracking and verifying the authenticity of a packaged product 10. The packaged product 10 may, for example, comprise a package 14 in which an article or substance 11 is contained. The packaging 14 can for example consist of two parts such as a container 17 plus a closure 15 and be closed by means of a seal 16 . This means that the pack 14 can only be opened by destroying the seal 16 in order to remove the article 11 . The container 17 or the article or substance 11 contained therein are not particularly limited. For example, the container can be a plastic bottle or a glass bottle, which can be transparent or tinted. Furthermore, loading containers made of metal or packaging made of paper and corrugated cardboard or blister packs made of plastic or composite materials can also be used. For example, the bottle could contain medicine such as a vaccine or the like, or the blister pack could also hold medicine such as tablets and the like. In the case of a container, the seal 16 can be formed, for example, as a transparent shrink tube, while in the case of blister packs, an aluminum foil or a marked plastic foil can represent the seal.

As shown in Fig. 1, the system 200 has a plurality of detection devices 50, each of which is configured to detect a first and a second code 12, 18 applied to the package 14 or the seal 16 (see Fig. 2). . In addition, the system 200 has a plurality of decoding devices 51 which are each associated with the plurality of detection devices 50 and are designed to decode first and second information which are each coded by the first coding 12 and the second coding 18 . In some embodiments, the respective decoding device 51 can be integrated into the detection device 50 . For example, a detection device 50 can be used, which is described in DE 102015 005 304 B3. Such an exemplary detection device 50 is shown in FIGS. For example, the detection device 50 can have a cover 210 for a mobile phone 216 . The case 210 has a receptacle 214 for the mobile phone 216 . As shown in FIG. 5, the shell 210 has a bottom surface 211 which has an array 213 with a plurality of lighting units 217, 218 arranged around a camera aperture 219. For example, the lighting units can be a UV lighting unit 217 and a White light illumination unit 218 act. The device shown in FIGS. 4 and 5 as well as other suitable detection devices for detecting the codings described below are known, so that further details thereof are omitted here. In any case, it goes without saying that, depending on requirements, suitable lighting units, detectors such as photodiodes and the like, filters etc. can be provided which are controlled by a suitable controller for emitting light and receiving or detecting secondary light emitted in response thereto.

Referring again to FIG. 1 , in some embodiments the system 200 comprises a first data processing device 22 configured to receive the first and second information from a first of the decoding devices 51 and store them in association with one another in a memory 20 of the data processing device 22. The first data processing device 22 is also designed to transmit the first information and second information stored in the memory 20 to a plurality of further data processing devices 32, 34, 36, 38, which are connected via a network 110 to the first data processing device 22 and respectively connected to each other.

The further data processing devices 32, 34, 36, 38 are designed to store the first information and the second information in association with one another in a memory 33, 35, 37, 39 of the same. Alternatively, the first data processing device is a central data processing device 102 with a memory 120, which is connected via the network 110 to a plurality of further data processing devices 32, 34, 36, 38 and is designed to respond to a request from one of the further data processing devices 32, 34, 36, 38 to verify data transmitted by the further data processing device on the basis of the first and second information stored in the memory. This alternative is shown in FIG. 1 by the dashed line. That is, in this case, the signal generated by the first detection device 50 shown in Fig.

1 on the far right, recorded information can be forwarded to the central data processing device 102 directly or via the data processing device 22 . The two alternatives are explained in more detail below.

The system 200 is used to enable secure registration and tracking of an originally packaged product 10, where at any point in the supply chain where one of the Detection devices 50 is present, the integrity or authenticity of the product 10 can be checked.

2 shows the details of the registration or verification of the product 10. First, a method for securely registering the packaged product 10 will be described.

As shown in FIG. 2, a first code 12 is applied to the package 14 of the product 10 or the package seal 16 and encodes first information. This means that the coding 12 represents the first piece of information, but this cannot be read directly. Instead, the coding 12 must be recorded and decoded in order to arrive at the first piece of information. Examples of the possible codings are explained in more detail below. In the present example, the first code 12 is provided on the seal 16 .

Furthermore, in the present example, the second coding 18, which is different from the first coding (for example, is a different type of coding and/or encodes different information), is also applied to the seal 16. The second coding 18 encodes second information. For example, the first coding 12 and the second coding 16 can be provided at different positions of the seal 16 . In the case of the container 17 shown as an example in FIG. 2, which has a closure 15, the detection device 50 could detect the different codings, for example by rotating the container about its longitudinal axis relative to the detection device 50.

In order to register a product 10 in its original packaging with the packaging 14 closed by the seal 16 , the first coding 12 and the second coding 18 are now initially detected by the detection device 50 . For example, the coding stanchions 12, 18 can be picked up by a camera of the cell phone 216 shown in FIGS. 4 and 5. A corresponding field of view 53 of such a camera onto the first code 12 on the seal 16 is indicated in FIG.

The detected first coding 12 and the detected second coding 18 (ie the first information and the second information) are shown in Fig. 1 by the decoding device 51, associated with the detection device 50 is decoded. The decoded first information and the decoded second information are then stored in association with one another in the memory 20 of the first data processing device 22 . For example, the manufacturer of the product 10 or the person who packs the item 11 in its original packaging can carry out the method described above in order to register or identify the product 10 in its original packaging. It goes without saying that the first coding 12 and the second coding 18 do not necessarily have to be applied to the packaging 14 and/or the seal 16 by the manufacturer or packer of the product. Instead, the corresponding codes could already have been provided in packaging or seals made by other companies. This is explained in more detail below in connection with the individual coding options. In any case, it is crucial that the information identifying the originally packaged product 10 is stored at a specific (first) point in the chain that connects the manufacturer of the product 10 with the end seller or end consumer. The first coding 12 and the second coding 18 can preferably be present in different forms as long as they are suitable for coding or representing corresponding information.

A known possibility is a machine-readable coding, for example a bar code or a QR code. Such a coding can be recorded by a suitable camera, for example the mobile phone 216 shown in FIGS. 4 and 5, and evaluated and decoded by a corresponding decoding device or software running on a processor of the mobile phone 216 in order to to obtain first or second information. As this is well known, further explanation is omitted herein.

Alternatively, the first and/or the second coding 12, 18 can be formed by at least one phosphorescent marker 24, which is present in a detection area 70 of the packaging (see FIG. 2), which is preferably a predetermined area (of a surface) the packaging is. A use of phosphorescent markers is also known, so the details in this regard will only be explained briefly. As shown in FIG. 2, for example, suitable markers or particles 24 can be applied to or contained in the seal 16, which, when excited by light in a specific wavelength range, produces a secondary emission, usually in a different wavelength range. show (afterglow). The encoded information is then that the presence or absence of the at least one phosphorescent marker 24 is indicated. This means that the detection device 50 detects the light emitted by the phosphorescent marker in response to an excitation and can determine a characteristic variable that is associated with the phosphorescence of the marker 24 based on this. The characteristic variable can be, for example, a decay time (time constant) of the phosphorescence, or a limit frequency, which will be explained in more detail below. Decay time or time constant means that the time is determined during which the intensity of the secondary emission, starting from an initial value that corresponds to 100%, falls to a certain value, usually 1/e. Different markers have different decay times, so that information can be determined, for example, which of the different markers is or is not present.

As an alternative or in addition to this, the characteristic variable can also be the limit frequency mentioned. This can be determined using an optical low-pass characteristic of the respective phosphorescent markers 24 . This is explained below with reference to FIGS. 6 and 7 . The first line in FIG. 6 shows a sequence of excitation light pulses which has a first frequency fi and a constant intensity of the individual pulses. In the sequence, each pulse has a certain duration t, and between two consecutive pulses the signal is, for example, zero for the same duration. In this case, the frequency fi or the associated period of the excitation signal corresponds to twice the pulse duration. As shown in the second line of Fig. 6, the primary emission of these excitation light pulses causes a secondary emission which increases to a maximum value if the excitation pulse is sufficiently long and then decreases with the already described sounding behavior after the respective excitation by one of the light pulses ends became. This results in the secondary emission signal shown in the second line in FIG. 6 , which can be detected by a suitable detector in the detection device 50 . It has now been shown that, as can also be seen from the course of the secondary emission in the fourth line in FIG , even if the intensity of the excitation light pulses remains unchanged. In other words, the maximum detected intensity of the secondary remission upon excitation with excitation light pulses whose sequence is above a specific limit frequency is reduced. In this way, by systematic iteration of the frequency range of the sequences of excitation light pulses, a decrease in the detected intensities of the secondary emission with increasing frequency (for example the frequency Ϊ2 in the third line in FIG. 6, which is higher than fi) can be determined.

In this way, for example, a ratio of the intensity at a sufficiently low frequency (or at 0 Hz) to the intensity detected at the respective higher frequencies can be formed. For example, as shown in FIG. 7, the logarithm of the higher frequency signal SIGAC could be taken TO the signal SIGDC at the 0 Hz frequency. As shown in FIG. 7, this ratio decreases sharply when a limit frequency f _c is reached. For example, a predetermined threshold of 50% (at -3 dB in FIG. 7) can be established, on the basis of which an assessment is made as to whether the determined ratio at the frequency used is greater or less than this threshold. It can be seen that by running through the frequency range from low to high frequencies in this way, reaching the limit frequency f _c can be detected. In this way, the cut-off frequency _fc can be determined as the characteristic variable for the respective marker 24.

It goes without saying that it is not necessary to use any desired number of frequencies in order to determine the limit frequency or to determine whether a marker is present whose limit frequency has a specific value. For example, if the cutoff frequency f _c of a marker 24 is known, it would be sufficient to use one frequency that is lower than the cutoff frequency (by a sufficient amount) and another frequency that is higher than the cutoff frequency (by a sufficient amount). to see if the intensity or intensity ratio specified above is changing in the expected way. In addition, a third frequency at or near the cut-off frequency _fc could be used to check that the ratio for that frequency is about 0.5. However, it goes without saying that in other embodiments a larger number of frequencies (or bursts with several consecutive pulses of different frequencies) or a continuously traversed frequency range can be used to determine the cut-off frequency f _c or the presence of the marker 24 . In total, the test can be carried out in a time from a few hundred ps to a few ms. A pulse duration is between 10 ps and 10,000 ps, and typical limit frequencies are 1 kHz to 20 kHz. Furthermore, a limit frequency can also be determined for two or more different markers or it can be determined whether a specific combination of several markers is present or not. For example, two or more markers could be provided which can be excited with excitation light of the same wavelength (or with different wavelengths), but have secondary emission at different (central) wavelengths and/or each have different cut-off frequencies, as indicated by a dashed line is indicated in FIG. In this case too, pulse sequences can be emitted at different frequencies, and a cut-off frequency or a behavior of the combination that is expected at this cut-off frequency can then be determined using the total intensity of a secondary emission detected in one or more wavelength ranges.

A detector can be designed to detect the secondary emissions of a number of markers and to determine an overall intensity, for example at a specific wavelength, which can then be used to determine the limit frequency for the marker combination. Alternatively, multiple detectors can also be provided for the multiple markers. Suitable filters can be used if necessary. The respective intensities of the individual secondary emissions can then be determined, and a limit frequency can then be determined, for example, based on the sum of the individual intensities (i.e. with two markers, two intensities L and L could be detected (see Fig.

7), and then the frequency at which the value of the sum L + Leine falls below the corresponding threshold, e.g. 50%, could be determined as the limit frequency).

In this way, a very specific frequency behavior can be achieved by a suitable choice of the markers used and a suitable mixing ratio of the same, which is very difficult or impossible for potential counterfeiters to reproduce. In particular, the cut-off frequency also depends on the relative concentrations or the mixing ratio of the different markers. Furthermore, several limit frequencies of one and the same marker combination could be determined if different excitation light is used in each case. If, for example, only one of the markers is excited when excited with blue light, while two of the markers are excited when excited with green light, with suitable detection of the secondary emission there are different cut-off frequencies for both cases (in one case that of one marker, in the other case that of the mixture of both markers). For example, a two-stage test could be carried out.

In any case, the first or the second coding 12, 18 can represent information indicating the presence or absence of at least one phosphorescent marker 24 by determining whether the characteristic quantities associated with these markers can be detected or not. In the simplest case, where only a single marker 24 is used, the information could be represented by one bit indicating whether the marker has been detected or not. It goes without saying that when using, for example, five or more markers, a corresponding number of bits can be encoded. This is familiar to the person skilled in the art, so that no further details in this regard are described here.

In a similar way, the first code 12 or the second code 18 can be a code formed by a plurality of different markers each having different emission wavelengths in the visible wavelength range. The information then indicates the presence or absence of the plurality of markers 30 which, as shown for example in FIG. The markers 30 can be fluorescent markers of different colors, for example, which can be excited by UV light or blue light, for example. As an alternative to this, the markers 30 can also be passive color particles, in which case, for example, the white light of the mobile telephone 216 of the detection device 50 can be used to illuminate them, and the different reflected colors can then be detected in a known manner. Thus, intensities of fluorescence or reflection in a plurality of different wavelength ranges are detected in response to the illumination, and the associated information is generated based on whether or not the detected intensities in the different wavelength ranges each exceed a predetermined threshold. If a respective threshold is exceeded, a bit of a corresponding code can then be set to 1. The particles mentioned can be sprayed or printed onto the packaging 14 or the seal 16, for example. Furthermore, colored particles (for example so-called flakes, which are used in a similar way in metallic coatings in the automotive industry) can also be incorporated into a masterbatch be mixed in to produce a plastic packaging or seal. In this way, too, a binary code can be generated by the corresponding coding, which can then be detected at a given point in time.

In a further alternative, the first code 12 or the second code 18 can be a code formed by a plurality of optically detectable particles 26 in a predetermined detection area 28, as is shown in an exemplary manner in FIG. In this case, the information indicates relative positional relationships between the particles 26, in a manner similar to that described in EP 2318 286 B1 mentioned at the outset. In other words, for example, the detection area 28 is recorded by the camera of the mobile phone 216, optionally after the particles 26 have been excited to fluoresce by irradiating suitable excitation light, for example in the UV range, and the particles are identified using the fluorescence. Alternatively, the particles could be identified by their color, or by contrast to a background of the package 14 or seal 16 (e.g., in a black and white photograph or the like). In any case, the individual particles in the detection area 28 can be identified and based thereon the relative positional relationships between them can be determined in a known manner, so that a corresponding code can be generated based thereon. It goes without saying that, for example, several different particles can also be used in combination in order to determine the code or the positional relationships. For example, blue and green reflecting or fluorescent particles could be combined.

In Fig. 3, the different options for the coding used are shown again. 3a shows a known QR code. Fig. 3b shows the use of a plurality of different markers 30, each with different emission wavelengths in the visible wavelength range, the presence or absence of the corresponding markers 30 being inferred depending on the number of, for example, red, orange, yellow, green and blue fluorescent particles can be. With five colors, there would thus be 32 possible codes that can be detected by the detection device 50 in a suitable manner. 3c shows a detection of phosphorescent markers 24. In this case, for example, different markers can be used, which each have different decay times and/or limit frequencies. An excitation can take place, for example, with UV light, in the blue, in the red or in the infrared wavelength range. Depending on the presence of the respective markers, their decay times or cut-off frequencies may or may not be detected, and a corresponding code indicating the presence or absence of the individual markers can be generated in the manner described above. It goes without saying that the phosphorescent markers 24 may even be present in the same detection area 28 as the optically detectable particles 26 mentioned above. The same applies to the fluorescent particles shown in FIG. 3d, for example, whose relative positions in the detection area 28 are determined.

Referring again to FIG. 1, in order to track the product 10 in its original packaging, as already mentioned, the method according to the invention for the secure registration of the product 10 is carried out in the first step. Irrespective of which codings 12 and 18 are used, it can be seen that the first information and the second information can be obtained by the detection device 50 in conjunction with the associated decoding device 51 . This is preferably done immediately after the product 10 has been manufactured or packaged, for example by the manufacturer. The first information and the second information, which now state that the product 10 is in its original packaging, are then stored in the first data processing device 22 in association with one another. This data processing device 22 can be any known data processing device that has a memory 20, for example a conventional desktop computer, a server, a mobile phone with appropriate software, a tablet, etc. It is understood that it is of crucial importance that the Memory 20 stored first information and second information is safe, ie, can not be changed by a possible counterfeiter. Otherwise, at a later point in time, a counterfeit product could be brought into circulation, which, for example, has different codings or does not have one or both of these codings at all, and at the same time the stored information, which corresponds to the original codings, could also be manipulated in order to do so it again matches the counterfeit product. It is therefore important to have a mechanism in place to ensure that the information originally recorded cannot be subsequently altered. One possibility is that the first data processing device is a secure server 102, which is operated by the manufacturer of the product 10, for example. The information originally recorded is then stored in the memory 120 of this server 102, to which the other participants in the system 200 have no write access. They can only transmit a request from another data processing device 32, 34, 36, 38 for verifying transmitted data on the basis of the first and second information stored in memory 120 to server 102 and receive a corresponding result of the verification from server 102. That is, for example, the shipping company that transports the packaged product 10, an intermediary who resells it, or a retailer, such as a pharmacist in the case of medicines or the like, could use another detection device 50 to re-read the first and second codes 12, 18, the corresponding decoding device 51 can then decode the coding genes, and the first information and second information thereby obtained can then be transmitted to the server 102 as the data. Only when this transmitted data matches the data stored in memory 120 is it the originally packaged original product. A corresponding notification can be transmitted from the server 102 to the querying data processing device.

However, another approach is particularly preferred, in which the information is freely accessible in the respective memories 20, 33, 35, 37, 39 of the data processing devices 22, 32,

34, 36, 38 of the respective users of the system 200 are stored. For example, the well-known blockchain mechanism is ideal for this. Since this mechanism is known to those skilled in the art, details in this regard are omitted and only the essential features are briefly explained. Such a distributed, secure system such as the blockchain is based on the fact that all the information on each node of the network 110, ie the data processing device of each user (manufacturer, freight forwarder, distributor, intermediary dealer, end seller) is preferably stored unencrypted. For example, in a first step, the user who owns the first data processing device 22 would send the information stored in the memory 220 to the other data processing devices 32, 34, 36, 38, which are connected to the first data processing device 22 via the network 110 and to each other are connected, and these would be in Allocation to each other stored in each of the memory of the other data processing devices.

At the next point in the supply chain, for example when loading a truck of the forwarding company that delivers the packaged product 10 to a distribution warehouse or the like, the detection of the first coding and the second coding described above would be carried out again. The newly decoded information would then be added to the original information stored in memories 20, 33, 35, 37, 39, as is conventional in the blockchain, with additional information, if any, associated with re-entry existing information, for example an identification of the person who carries out the detection and/or an identifier of the detection device used, a time stamp or the like. The blockchain would then indicate, for example, that after packaging by the manufacturer, the first piece of information and the second piece of information had specific values, and would further indicate what those values were at the time the truck was loaded by the carrier. If there is a mismatch, each of the participants in the system could then determine or trace back that the product 10 was manipulated or exchanged on the way between the manufacturer and the carrier. In this way, not only each participant, in particular the end seller, for example a pharmacy, can read the complete blockchain and then determine whether the value of the first piece of information and the second piece of information determined by himself corresponds to the respective original value of the same, but it could also be determined at which point in the chain a manipulation has taken place.

The security mechanism consists, as is usually the case with blockchain, in that the individual data processing devices 22, 32, 34, 36, 38 are networked and synchronized with one another via the network 110. This means that the information stored in the respective memories 20, 33, 35, 37, 39 (the blockchain) is constantly compared with one another. In the event of a deviation, for example due to a manipulation attempt by the person who has access to the data processing device 34, it would then be determined that the manipulated information in the memory 35 does not match the information in all the other memories 20, 33, 37, 39 . In this way, the incorrect information in the memory 35 would then be replaced by the correct information be replaced. This means that each of the data processing devices queries, for example at regular intervals, the information stored in the memories of all data processing devices, and in the event of discrepancies between the information stored in the querying data processing device from another data processing device, valid information would be obtained, for example by majority vote scheid on the basis of all stored information, and this valid information would then be stored again in the querying data processing device. It is obvious to the person skilled in the art that the blockchain used in connection with the system described here is, for example, a so-called “private blockchain” as is known to the person skilled in the art. Therefore, further explanations of details of this technology are omitted herein.

The features explained above allow a method according to the invention for checking the authenticity of a packaged product 10 to be carried out at any point in the supply chain by, as already explained, first coding 12 being recorded again and the first information being decoded, and second coding 18 also being recorded and the second information is decoded, and finally the first and the second information are compared with reference data stored, for example, in the memory 37 of the data processing device 36. If the first and second information and the reference data match, it is then determined that a genuine product 10 is involved. As explained above, security is increased in that two preferably different and mutually independent codes 12, 18 are used, both of which must match the reference data. Furthermore, as explained above, the reference data is stored in a secure manner so that manipulation of the same can be ruled out.

In a preferred exemplary embodiment, the reference data has first reference data and second reference data, which are stored in association with one another. These first and second reference data correspond, for example, to the first information and the second information that were originally recorded, for example, by the manufacturer. The check can now proceed in such a way that the first coding 12 is detected first and the first information is derived from it. For example, the first coding 12 could be a QR code. This QR code could then be used to e.g. way in the memory 37 of the data processing device 39, in which the check is carried out, to determine the second reference data based on the assignment to the first reference data. The currently determined second piece of information is then compared with the second reference data, and the authenticity of the packaged product is established if the second piece of information and the second reference data match. For example, the detected QR code could indicate that a specific decay time of a marker 24 represents the second information, or that the second information indicates that the marker 24 with the specific decay time is present. Thus, the decay time determined as part of the test could be compared with the decay time stored in the memory 37 and the authenticity or intactness of the product 10 could be determined in this way. Furthermore, the invention provides that after the check has been carried out, the newly acquired information is also stored in the memory of the corresponding data processing device and the memories of all other data processing devices in the manner described above, as is the case with a blockchain, for example. Alternatively, the QR code could indicate a storage address or a link to the central server 102 where the (second) reference data is stored.

In order to further increase security, as already briefly mentioned at the outset, provision can be made for the first code 12 and the second code 18 to be provided together on at least two different components of the packaging, including the seal 16 . A first coding 12 and a second coding 18 are therefore provided on a first component (e.g. seal) of the packaging and an identical or different first coding 12 and an identical or different second coding 18 on a second component (e.g. base) of the packaging . Then, during a test, the first code 12 and the second code 18 are each recorded for the at least two different components, and the authenticity of the packaged product 10 is then determined when for each of the at least two different components the match between the first and the second information and the reference data is present. For example, as shown in FIG. 2, the first and second codes 12, 18 could be provided on both the seal 16 and the container 17 of the package 14 and the closure 15 of the same, so that a total of three tests are carried out. Therefore, if a counterfeiter wants to put a counterfeit product into circulation, he would have to he not only have, for example, possibly stolen original containers, but also additionally have the original closures and the original seals 16 in their possession. This makes counterfeiting or manipulation even more difficult. It goes without saying that all of the recorded or decoded information for all components is stored in the respective memories either of the server 102 or of the distributed data processing devices 22, 32, 34, 36, 38 (for example as part of the blockchain).

In some embodiments, it is preferred that the first code 12 and the second code 18 are both applied to either the seal 16 or the package 14 . In other embodiments, however, it is also possible that, for example, the first code 12 is applied to the seal 16 and the second code 18 is applied to the packaging 14 . Any combinations of the individual positions of the codes are conceivable.

With the methods described above and the system described above, the trans port or delivery of high-value and sensitive goods, for example ampoules with vaccines and the like or hazardous substances such as toxic chemicals, etc., can be continuously monitored, and at every point of the corresponding supply chain, both the authenticity and the integrity of the product can be checked and tampering can be detected.

In addition, the method for determining the limit frequency of at least one phosphorescent marker can also be used to determine the authenticity of any object, for example a banknote, an identity document or other reliable proof. The object to be checked could have a security feature (for example a marking, a band or the like) in which the at least one marker 24 is provided (applied or present in the starting material of the security feature) in the manner explained above. One or more limit frequencies or the presence of the same can then be determined using the methods described above. In the manner described here, the presence of a (further) fluorescent marker can also be determined whose cut-off frequency is “infinity” (since the detected secondary remission is frequency-independent). Accordingly, the following further aspects can be obtained:

1. A method for determining a characteristic variable that indicates a phosphorescence of at least one marker (24), with the following steps:

illuminating a detection area (70) on an object (10) with a plurality of pulse trains (72, 74) of excitation light each having different frequencies;

detecting phosphorescence intensities of the at least one marker (24) at the different frequencies; and

Determining a limit frequency at which the intensity of the phosphorescence falls below a predetermined threshold as the characteristic variable of the at least one marker (24).

2. Method according to aspect 1, in which a plurality of markers, each with different emission behavior, are present, the limit frequency being determined on the basis of the total intensity or the sum of the separate intensities of the phosphorescence of the respective markers.

3. Method for checking the authenticity of an object (10), for example a banknote, with the following steps:

illuminating a detection area (70) on the object (10) with a plurality of pulse trains (72, 74) of excitation light each having different frequencies;

detecting intensities of phosphorescence at the different frequencies, determining whether or not the detected intensity of phosphorescence falls below a predetermined threshold above a predetermined cut-off frequency (f _c ); and determining the authenticity of the object if the threshold above the cut-off frequency (f _c ) is undershot.

4. The method of aspect 3, further comprising:

illuminating the detection area (70) with a pulse train of excitation light having a first frequency below the cut-off frequency (f _c ), including 0 Hz;

detecting a first intensity associated with the first frequency;

illuminating the detection area (70) with a pulse train of excitation light having a second frequency above the cut-off frequency (f _c );

detecting a second intensity associated with the second frequency; forming a ratio of the second intensity to the first intensity; and determining that the intensity of the phosphorescence above the predetermined cutoff frequency (f _c ) falls below the predetermined threshold if the ratio is less than a predetermined value.

5. The method of aspect 4, further comprising:

illuminating the detection area (70) with a pulse train of excitation light having a third frequency at or near the cutoff frequency (f _c ); and determining the authenticity of the object if the intensity at or near the cutoff frequency (f _c ) has a value substantially equal to the value of the threshold.

6. Method according to one of aspects 3 to 5, in which the intensities of the phosphorescence are obtained by adding a plurality of individually detected intensities at different wavelengths of the secondary emission.

7. Method according to one of aspects 3 to 6, in which the excitation light is emitted in a number of wavelength ranges, for example using a number of illumination devices.

8. Device for checking the authenticity of an object (10), for example a banknote, with: an illumination device which is designed to illuminate a detection area (70) on the object (10) with a plurality of pulse sequences (72, 74) of an excitation light, each having different frequencies; a detection device configured to detect intensities of phosphorescence at the different frequencies; and a determination unit that is designed to determine whether the detected intensity of the phosphorescence above a predetermined cut-off frequency (f _c ) falls below a predetermined threshold or not, and to determine the authenticity of the object if the threshold falls below the cut-off frequency (f _c ). becomes. It is explicitly emphasized that all features disclosed in the description and/or the claims are considered separate and independent of each other for the purpose of original disclosure as well as for the purpose of limiting the claimed invention independently of the feature combinations in the embodiments and/or the claims should be. It is explicitly stated that all indications of ranges or indications of groups of units disclose every possible intermediate value or subgroup of units for the purpose of the original disclosure as well as for the purpose of restricting the claimed invention, in particular also as a limit of a range indication.

Claims

patent claims

1. Procedure for securely registering a packaged product (10), comprising the following steps:

Detection of a first coding (12), which is applied to a packaging (14) of the product (10) or a seal (16) of the packaging and encodes first information; detection of a second code (18), which is different from the first code and is applied to the packaging (14) or the seal (16) and encodes second information;

decoding the first information and the second information; and

Storing the first information and the second information in association with one another in a memory (20; 120) of a first data processing device (22; 102), in which the first coding (12) and the second coding (18) are selected from: machine-readable coding such as a barcode or a QR code; a code formed by at least one phosphorescent marker (24), the information indicating the presence or absence of the at least one phosphorescent marker (24); a code formed by a plurality of optically detectable particles (26) in a predetermined detection area (28), the information indicating relative positional relationships between the particles (26); and a coding formed by a plurality of different markers (30) each having different emission wavelengths in the visible wavelength range, where the information indicates the presence or absence of each of the plurality of markers (30).

2. The method of claim 1, further comprising

Passing on the first information and second information stored in the memory (20) to a plurality of further data processing devices (32, 34, 36, 38) which are connected to the first data processing device (22) and to each other via a network (110). are and

Storing the first information and second information in association with one another in a memory (33, 35, 37, 39) of each of the further data processing devices (32, 34, 36, 38), for example in a blockchain.

3. The method of claim 2, further comprising

Querying the information stored in the memories (22, 33, 35, 37, 39) of the first and the further data processing devices by each of the data processing devices (22, 32, 34, 36, 38) and in the event of discrepancies between the data in one querying data processing device stored information from information stored in another data processing device ge, determining valid information by majority vote on the basis of all stored information and storing the valid information in the querying data processing device.

The method of claim 2 or 3, further comprising re-detecting the first and second encodings (12, 18) at a later time, decoding the first and second information of the re-detected encodings, adding the newly decoded information to the information in the storing (20, 33, 35, 37, 39) stored original information in the event of a match between the same, optionally in conjunction with other data related to the re-acquisition.

5. The method as claimed in claim 1, in which the first data processing device is a central data processing device (102) with the memory (120) which is connected via a network (110) to a plurality of further data processing devices (32, 34, 36,

38), further comprising, in response to a request from one of the further data processing devices (32, 34, 36, 38), verifying data transmitted by the further data processing device on the basis of the first and second information stored in the memory.

6. Method for checking an authenticity of a packaged product (10), with the following steps:

Detection of a first coding (12), which is applied to a packaging (14) of the product (10) or a seal (16) of the packaging and encodes first information; decoding the first information; detection of a second code (18), which is different from the first code and is applied to the packaging (14) or the seal (16) and encodes second information;

decoding the second information;

comparing the first and second information with reference data stored in a memory (20; 120) of a first data processing device (22; 102); and determining the authenticity of the packaged product (10) in the event of a match between the first and second information and the reference data, in which the first code (12) and the second code (18) are selected from: a machine-readable code such as a bar code or a QR code; a code formed by at least one phosphorescent marker (24), the information indicating the presence or absence of the at least one phosphorescent marker (24); a code formed by a plurality of optically detectable particles (26) in a predetermined detection area (28), the information indicating relative positional relationships between the particles (26); and a coding formed by a plurality of different markers (30) each having different emission wavelengths in the visible wavelength range, where the information indicates the presence or absence of each of the plurality of markers (30).

7. The method as claimed in claim 6, in which the reference data have first reference data and second reference data, which are stored in association with one another, further containing:

identifying the first reference data based on the first information;

determining the second reference data based on the assignment to the first reference data; comparing the second information with the second reference data; and determining the authenticity of the packaged product (10) if there is a match between the second information and the second reference data.

8. The method of claim 7, further comprising

Storing the first information and the second information in association with one another in the memory (20) of the first data processing device (22), Passing on the first information and second information stored in the memory (20) to a plurality of further data processing devices (32, 34, 36, 38) which are connected to the first data processing device (22) and to each other via a network (110). are and

9. The method according to any one of claims 6 to 8, in which the first code (12) and the second code (18) are provided together on at least two different components of the packaging (14), including the seal (16), furthermore with detecting the first coding (12) and the second coding (18) for the at least two different components and

Determining the authenticity of the packaged product (10) given a match between the first and second information and the reference data for each of the at least two different components.

10. The method according to any one of claims 1 to 9, wherein the first code (12) and the second code (18) are both applied to either the seal (16) or the package (14).

11. The method according to any one of claims 1 to 10, in which the first information indicates the presence or absence of the at least one phosphorescent marker (24), fer ner

Determining whether the at least one marker (24) is present or not, based on a detection of a characteristic variable that describes a phosphorescence of the at least one marker (24), and

generating the first information based on the determination.

12. The method as claimed in claim 11, in which the characteristic variable is a decay time of the phosphorescence of the at least one marker (24).

13. The method of claim 11, further comprising Transmission of sequences of excitation light pulses with different frequencies, detecting an intensity of the phosphorescence of the at least one marker (24) at the different frequencies and

Determining a characteristic frequency at which the intensity of the phosphorescence falls below a predetermined threshold as the characteristic variable based on the detected intensities.

14. The method according to any one of claims 1 to 10, in which the first information indicates the presence or absence of the plurality of different markers (30) each having different emission behavior in the visible wavelength range, further with

Illuminating the marker (30) with UV light or light in the visible wavelength range, detecting intensities of a fluorescence or a reflection in a plurality of different wavelength ranges in response to the illumination and generating the first information based on whether the detected intensities in the un ent Wavelength ranges each exceed a predetermined threshold or not.

The method of any one of claims 1 to 14, wherein the second information indicates the relative positional relationships between the plurality of optically detectable particles (26) in the predetermined detection area (28), further comprising exciting the particles (26) to fluoresce and identifying the same based on the fluorescence and / or

identifying the particles (26) based on a contrast to a background of the package (14) or the seal (16) and/or

identifying the particles (26) based on their color, and further determining the relative positional relationships based on the identified particles and generating the second information based on the determined relative positional relationships.

16. System (200) for carrying out the method according to any one of the preceding claims, with: a plurality of detection devices (50), which are each designed to detect the first and the second coding (12, 18); a plurality of decoding devices (51), which are each assigned to the plurality of detection devices (50) and are designed to decode the first and the second information; a first data processing device (22; 102) which is designed to receive the first and the second information from one of the decoding devices (51) and store it in the memory (20; 120) of the data processing device, in which the first data processing device (22) also is designed to transmit the first information stored in the memory (20) and second information to a plurality of further data processing devices (32, 34, 36, 38) which are connected via a network (110) to the first data processing device (22) and each other are connected, passed on, and the further data processing devices (32, 34, 36, 38) are designed to store the first information and the second information in association with one another in a memory (33, 35, 37, 39) of the same or the first data processing device is a central data processing device (102) with the memory (120) which is connected via a network (110) is connected to a plurality of further data processing devices (32, 34, 36, 38) and is designed to, in response to a request from one of the further data processing devices (32, 34, 36, 38) transmit data by the further data processing device on the to verify the basis of the first and second information stored in the memory.

17. A method for determining a characteristic variable that indicates a phosphorescence of at least one marker (24), with the following steps:

18. A method for checking the authenticity of an object (10), for example a banknote, with the following steps:

detecting intensities of phosphorescence at the different frequencies; determining whether or not the detected intensity of phosphorescence above a predetermined cut-off frequency (f _c ) falls below a predetermined threshold; and determining the authenticity of the object if the threshold above the cut-off frequency (f _c ) is undershot.

19. The method of claim 18, further comprising

illuminating the detection area (70) with a pulse train of excitation light having a first frequency below the cut-off frequency (f _c ), including 0 Hz,

detecting a first intensity associated with the first frequency,

illuminating the detection area (70) with a pulse train of excitation light having a second frequency above the cut-off frequency (f _c ),

detecting a second intensity associated with the second frequency,

Forming a ratio of the second intensity to the first intensity and determining that the intensity of the phosphorescence above the predetermined limit frequency (f _c ) falls below the predetermined threshold if the ratio is less than a predetermined value.

20. The method of claim 19, further comprising

illuminating the detection area (70) with a pulse train of excitation light having a third frequency at or near the cutoff frequency (f _c ), and determining authenticity of the object if the intensity is at or near the cutoff frequency (f _c ) has a value substantially equal to the value of the threshold.

21. The method as claimed in one of claims 18 to 20, in which the intensities of the phosphorescence are obtained by adding a plurality of partial intensities at different wavelengths of the secondary emission.

22. Device for checking the authenticity of an object (10), for example a banknote, with: an illumination device which is designed to illuminate a detection area (70) on the object (10) with a plurality of pulse sequences (72, 74) of an excitation light, each having different frequencies; a detection device configured to detect intensities of phosphorescence at the different frequencies; and a determination unit that is designed to determine whether the detected intensity of the phosphorescence above a predetermined cut-off frequency (f _c ) falls below a predetermined threshold or not, and to determine the authenticity of the object if the threshold falls below the cut-off frequency (f _c ). becomes.