Identification card manufacturing security

Identification card manufacturing security restricts use of an identification card manufacturing system with only authorized supplies. In accordance with one aspect of the invention, a supply-specific security code (SSSC) and supply-specific data are stored in memory of the supply. The SSSC is translated using the supply-specific data. Finally, the supply is authorized for use with the identification card manufacturing system only when the translated SSSC is found to be valid. In accordance with another aspect of the invention, an identification card manufacturing system is configured to operate only with supplies having corresponding customer-specific security codes (CSSC). A supply CSSC and supply-specific data are retrieved from memory of the supply. Additionally, a system CSSC and system-specific data are retrieved from memory of the identification card manufacturing system. The supply CSSC and the system CSSC are translated using the supply-specific data and the system-specific data, respectively. Finally, the supply is authorized for use with the identification card manufacturing system when the translated system CSSC and the translated supply CSSC correspond.

FIELD OF THE INVENTION

The present invention generally relates to identification card manufacturing and, more particularly, to security for identification card manufacturing systems to prevent unauthorized use of identification card manufacturing devices and corresponding supplies.

BACKGROUND OF THE INVENTION

Identification card manufacturing systems generally include a computer, at least one card manufacturing application running on the computer, and at least one identification card manufacturing device such as an identification card printer or laminator. In the case of an identification card printer, the card manufacturing application can combine textual and graphical information to form a print job corresponding to an image that is to be printed by the identification card printer. The print job can then be processed by the identification card printer by printing an image to a card substrate fed from a card supply using a thermal print mechanism or an ink jet print mechanism. The thermal print mechanism utilizes a thermal print ribbon supply, whereas the ink jet print mechanism utilizes an ink cartridge supply. When the identification card manufacturing device is a laminator, the card producing application can control the operation of the identification card laminator to laminate the printed card using an overlaminate supply. Other identification card processing devices, such as data encoders and card flippers, can also be controlled by the identification card manufacturing application.

Security from counterfeiting of identification cards is in high demand. Methods of providing such security have been employed to produce an identification card that is made difficult to copy or modify. For example, printed identification cards can be laminated with an overlaminate supply that includes custom security markings, such as holograms. Also, the identification card can include special layers of materials that reveal attempts to tamper with the card. However, such an investment in customized supplies can provide a false sense of security from counterfeiting.

For example, the above methods of enhancing security from counterfeiting and tampering can be overcome by a counterfeiter that gains access to the custom supplies. The counterfeiter can then obtain an identification card manufacturing system and use the custom supplies to possibly generate undetectable counterfeit identification cards.

A continuing need exists for improved identification card manufacturing security and, more particularly, improved security from identification card counterfeiting.

SUMMARY OF THE INVENTION

The present invention improves identification card manufacturing security by restricting an identification card manufacturing system to operate only with authorized supplies. In accordance with this aspect of the invention, a supply-specific security code (SSSC) and supply-specific data are stored in memory of the identification card manufacturing system supply. The SSSC is translated using the supply-specific data. Finally, the supply is authorized for use with the identification card manufacturing system only when the translated SSSC is found to be valid. In this manner, the identification card manufacturing system can be precluded from operating with supplies that are determined to be invalid.

In accordance with another aspect of the invention, identification card manufacturing systems are configured to operate only with supplies having corresponding customer-specific security codes (CSSC). In accordance with this aspect of the invention, a supply CSSC and supply-specific data are retrieved from memory of the supply. Additionally, a system CSSC and system-specific data are retrieved from memory of the identification card manufacturing system. The supply CSSC and the system CSSC are translated using the supply-specific data and the system-specific data, respectively. Finally, the supply is authorized for use with the identification card manufacturing system when the translated system CSSC and the translated supply CSSC correspond.

Another aspect of the present invention is directed to a method of configuring an identification card manufacturing system to operate only with supplies having corresponding CSSC's. Here, a CSSC is generated for a customer. Next, the CSSC is stored in a secure data base and in memory of an supply. Finally, the identification card manufacturing system is configured to operate only with supplies having the CSSC.

DETAILED DESCRIPTION OF THE DRAWINGS

FIG. 1is a schematic diagram of an identification card manufacturing system10, in accordance with embodiments of the invention. System10generally includes a computer12having a card manufacturing application and driver software14stored in memory16. System10also includes an identification card manufacturing device20that is controlled by application14to process an identification card in some manner. One alternative to system10ofFIG. 1is to configure identification card manufacturing device20to include a microcomputer that is capable of executing the application14in order to eliminate the need for a separate computer12.

Identification card manufacturing device20includes a controller22, memory24and one or more supplies that are generally designated as26. Controller22receives instructions from application and driver software14to process an identification card accordingly. Device20can be an identification card printer, an identification card laminator, or other card manufacturing device. The printing, laminating and other card processing components of device20are not shown to simplify the illustration and the discussion of the invention.

Supply26can include a card supply26A, a printer supply26B, a laminator supply26C or other card manufacturing supply. Card supply26A can include a card cartridge or card holder that includes a supply of individual identification cards for feeding to a card processing component of device20. Printer supply26B can be a thermal print ribbon for use with a thermal printhead, or an ink cartridge for use with an ink jet printhead. Laminator supply26C can be a supply of overlaminate material for use with a laminator that is applied to a surface of a card.

Each of the supplies26includes a memory28that is accessible by controller22through a supply reader30. Supply reader30can communicate with the memory28of each supply26through a direct electrical connection or through a wireless connection using radio frequency (RF) communication methods and provide data contained therein to controller22. Controller22can analyze the data and/or communicate the data to application14.

The data contained in the memory28of the supplies26can include general information about the supply. For example, memory28can include information as to whether the supply26is a card supply26A, a printer supply26B, a laminator supply26C or other type of supply. Additionally, general supply information such as the number of cards contained in the new card supply26A, the amount of ink or type of ink stored in the printer supply26B, and the amount of overlaminate material and type of overlaminate material stored in the laminator26C. Additionally, the data can include supply-specific data32that relates to the specific supply. This supply-specific data can include, for example, a unique serial number, unique date information (e.g., expiration date, date produced, date shipped, etc.), and other data that is substantially unique to the particular supply.

In accordance with an embodiment of the invention, memory28includes a supply-specific security code (SSSC)34that is either encoded using the supply-specific data32, such as the serial number, or is encrypted using the supply-specific data32and a private key that is not stored in the supply memory28. As a result, the SSSC is unique for each supply26. That is, SSSC34A of card supply26A is different from SSSC34B of printer supply26B and SSSC34C of laminator supply26C, as well as other card supplies. The private key used to encrypt the SSSC34can be stored, for example, in memory24of card manufacturing device20as indicated at36, in memory16of computer12, or contained in memory38of a card key40that can be read by a card reader42.

In accordance with one embodiment of the invention, a first level security check is performed in accordance with the flowchart illustrated inFIG. 2. At step44, SSSC34and supply-specific data32are retrieved from memory28of a card supply26. This is generally accomplished using supply reader30under control of controller22. Next, at step46, the SSSC34is translated using the supply-specific data32. This can be accomplished by controller22or by computer12in accordance with instructions from application14. This translation of SSSC34generally involves deciphering or decoding SSSC34using supply-specific data32in accordance with a predefined algorithm. Alternatively, SSSC34can be decrypted using the supply-specific data32and a corresponding private key48stored in system memory24or other locations as described above.

At step50, use of the supply26with the identification card manufacturing system10is authorized when the translated SSSC34is determined to be valid. In accordance with one embodiment, this authorizing step involves comparing the translated SSSC34of the supply26to an authorization code52stored in system memory24. The translated SSSC34is determined to be valid when it matches or otherwise corresponds to the authorization code52. If found to be valid, identification card manufacturing system10can be enabled for operation with the supply26. If the supply26is found to be invalid, system10can trigger an interlocking mechanism using, for example controller22, to preclude operation of system10with the invalid supply26.

In accordance with another aspect of the present invention, identification card manufacturing system10can be configured to operate only with supplies26that have been customized for use by a particular customer. In accordance with one embodiment, both the supply26and the identification card manufacturing system10include a customer-specific security code (CSSC). The supply CSSC60stored in supply memory28is either encoded using the supply-specific data32or is encrypted using the supply-specific data32and a private key that is preferably different from the private key (key48) of memory24used to encrypt the SSSC34.

Similarly, a system CSSC62is stored in system memory24. Memory16can also operate as a system memory storing the system CSSC and other information described below. The system CSSC62is preferably encoded using system-specific data64, or encrypted using system-specific data64and a private key that is preferably different from the private key used to encrypt the supply CSSC60of the supply26. The system CSSC62can take the form of a device CSSC corresponding to device20that is preferably stored as shown in memory24, or an application CSSC62corresponding to application14that is preferably stored in memory16of computer12. System10can utilize both application and device CSSC's62. The system-specific data64is a serial number or other information that uniquely identifies device20(device-specific data) or application14(application-specific data) of system10. The private keys used to encrypt the supply and system CSSC's are preferably stored outside of supply memory28or system memory24. In accordance with one embodiment, the private key used in encrypt the supply and system CSSC's is stored in memory37of card key38.

FIG. 3is a flowchart illustrating operation of the system10with a supply26having a supply CSSC60. At step70, a supply CSSC60and supply-specific data32are retrieved from memory28of supply26. As discussed above, this reading of memory28can be accomplished through supply reader30by controller22. The supply CSSC60and supply-specific data32can be analyzed by controller22or by computer12in accordance with instructions from application14. Next, at72, a system CSSC62and system-specific data64are retrieved from memory24of identification card manufacturing system10. The supply CSSC60is translated using the supply-specific data32at174. As discussed above, this can be accomplished by controller22or application14. Similarly, the system CSSC62is translated using the system-specific data64, at76. Finally, at78, use of the supply26with the system10is authorized when the translated system CSSC62and the translated supply CSSC60correspond.

Prior to the first use of identification card manufacturing system10with a customized supply, the system10may be set up as a generic system. Accordingly, the initial system CSSC62mentioned above could be in the form of a generic code. In accordance with one embodiment, the first use of identification card system10with a customized supply26causes the generic code to be replaced with a system CSSC that is preferably generated using the translated supply CSSC60and system specific data64.

The translations of the supply CSSC60and the system CSSC62can be accomplished as described above by deciphering or decoding the CSSC's using the corresponding supply-specific data32and the system-specific data64. Alternatively, the translating steps can be accomplished by decrypting the system CSSC62and the supply CSSC60using an appropriate private key. For example, the supply CSSC60can be decrypted using a private key that is stored in memory37of card key38or in system memory24.

FIG. 4is a simplified block diagram illustrating a method in which custom supplies26and their corresponding systems10including card manufacturing device20and application and driver software14are formed. Initially, a customer requests to be provided a custom system10with custom card manufacturing supplies26, as indicated at box80. The customer's order is typically provided to a dealer82of the identification card manufacturing systems10and supplies26, or directly to the manufacturer84of the devices20and supplies26. Once the order is made, the customer is assigned a secret CSSC as indicated at box86, which is then stored in a secure database88. This feature allows a specific custom supply26to be matched to the corresponding custom device20and/or application14.

Identification card manufacturing devices20and supplies26are preferably initially programmed to operate as generic devices by applying or storing a generic security code in the respective memories24and28, or in the data of the application14, as indicated at box90. A supply CSSC60corresponding to the CSSC assigned to the customer is then programmed into memory28of supply26as indicated at box92. As mentioned above, the supply CSSC60is preferably encoded or encrypted using the supply specific data34that is unique to the supply26.

In accordance with one embodiment, card manufacturing device20can also be programmed with the CSSC assigned to the customer by storing it in memory24and/or including it in the application14. Alternatively, the installation of a custom supply26having a CSSC60automatically causes the generic security code of the device20or application14to be updated to correspond to the supply CSSC. This allows generic devices20that are already in the possession of the customer to be updated to operate as custom devices. Once this occurs, the device20will only operate with custom supplies26having the corresponding supply CSSC60.

As mentioned above, it is also possible for the customer to obtain custom devices20and supplies26through an authorized dealer82. Here, generic devices20and supplies26are shipped to the dealer82from the manufacturer84. For new customers, the dealer can request a secret CSSC for the customer from the manufacturer82, which is then stored in the secure database88. When customers with assigned CSSC's submit new orders to the dealer82, the dealer82may access the database84and retrieve the CSSC corresponding to the customer. The CSSC can then be applied to the supply26or the device20prior to shipment to the customer by the dealer as indicated at box94.

It should be understood that the dealer can actually be treated as the customer where the manufacturer of the systems provides the dealer with a unique CSSC. The dealer then provides systems10and supplies26that all operate with devices20, applications14, and supplies26having the corresponding CSSC's.

In summary, card manufacturing supplies26and identification card manufacturing devices20and applications14can be configured to include a secret CSSC relating to a customer, which limits their use only with corresponding custom components. Initially, a CSSC is generated at86for a customer. The CSSC can be based upon a customer order80. Next, the CSSC is stored in a secure database88and in memory28of the card manufacturing supply26, as indicated at92. Finally, the identification card manufacturing system10including identification card manufacturing application14and device20are configured to operate only with supplies26having a CSSC. This can be accomplished either by storing the corresponding CSSC62in the memory24of the device20or in the data system of the application14, or by generating the system CSSC62automatically when the generic device20or application14is used with the custom supply26for the first time. Following such a use, the identification card manufacturing system10is configured to only operate with the custom supplies26having the corresponding CSSC.

FIG. 5is a flowchart illustrating a method that can be implemented by the identification card manufacturing system10to perform the above-described security checks. It should be understood that the presented method is only one example of how the desired identification card manufacturing security can be implemented and that additional steps may be added or removed, or be performed in a different order without departing from the spirit and scope of the present invention. The method generally starts at100with a request to perform a card processing function, such as process a print job, or perform some other card processing function using identification card manufacturing system10. This causes application and driver software14or controller22to request a read of supply memory28. Next, at102, controller22reads memory28of supply26using supply reader30and either provides the data directly to application14or implements the first level of security described above, as indicated at104, by translating the SSSC34using the supply-specific data32. The supply26is then validated by checking whether the translated SSSC34matches a corresponding code, such as authorization code52stored in system memory24, as indicated at106. If the supply26is determined to be invalid, the method moves to108where controller22notifies application14that supply26is invalid. Additionally, the user of system10can be notified that the supply26is invalid, as indicated at110. Identification card manufacturing system10is then disabled from use with the supply26and the card processing job is terminated.

In accordance with another embodiment of the invention, a second level security check is performed when it is determined at106that the supply26is valid. At step112, the supply SSSC60is retrieved along with the supply data32, if necessary. Next, at114, the system CSSC62and system-specific data64are retrieved. The supply CSSC60and the system CSSC62are then translated at116using the supply-specific data32and the system-specific data64, respectively.

At118, a comparison is made between the translated supply CSSC60and the translated system CSSC62to determine whether they correspond or match. If they do not correspond, it may be due to the system CSSC62being a generic code. Accordingly, a check is made to determine whether the system CSSC62is generic at120. If the system CSSC62is a generic code, a CSSC corresponding to the supply CSSC60is generated and stored in memory24at122. In accordance with one embodiment, the system CSSC62is generated using the translated supply CSSC60, system-specific data64, and/or a private key. As a result, identification card manufacturing system10is thereafter configured to operate only with supplies26having the corresponding CSSC.

In the event that the system CSSC62is not a generic CSSC, then it has been customized for use with corresponding customized supplies26that are different than the supplies26being used for the current card processing function. Accordingly, operation of system10with the installed supply26is prevented and the card processing job is terminated. The user of system10can then be notified of the unauthorized supply, as indicated at110.

In the event that it is determined at118that the translated supply CSSC60and the translated system CSSC62correspond, supply26is authorized for use with system10. The card processing job is, therefore, allowed to commence as indicated at124.

Although the present invention has been described with reference to preferred embodiments, workers skilled in the art will recognize that changes may be made in form and detail without departing from the spirit and scope of the invention. For example, those skilled in the art understand that the translations of the supply SSSC's and the supply and system CSSC's can be accomplished in many different ways. The general purpose of the translation is to perform some manipulation (decoding, deciphering or decrypting) to the supply SSSC, the supply CSSC, and/or the corresponding reference. The resulting translation is then used to determine whether the supply is authorized for use with the identification card manufacturing system. Accordingly, a translation of a supply SSSC, a supply CSSC, or a system CSSC can involve a direct manipulation of the code and/or a direct manipulation of the corresponding reference that is used to authorize use of the supply with the identification card manufacturing system. For example, the translation of a supply SSSC can involve direct manipulation of: the supply SSSC using the supply-specific data in some manner; the corresponding reference (e.g., authentication code) using the supply-specific data; or both the supply SSSC and the corresponding reference using the supply-specific data. Likewise, the translation of the supply CSSC can involve direct manipulation of: the supply CSSC using the supply-specific data in some manner; the corresponding reference (e.g., the system CSSC) using the supply-specific data; or both the supply SSSC and the corresponding reference using the supply specific data. The translation of the system CSSC can be made in the same manner. Thus, it is possible that the translations of the supply and system CSSC's involve manipulation of only the supply CSSC or the system CSSC.