METHOD AND SYSTEM FOR THE APPLICATION OF A SAFETY MARKING

Abstract: The present invention relates to a method and system for the identification of a marking device. The invention is based on utilizing encryption of information and a biometric sample taken of the person. By this method, a marking device can be effectively and reliably identified. In practice, double verification of the authenticity of the owner of the marking device is achieved by the method and system of the invention. The first verification consists in that the owner must know a password for a key used for encrypting the information stored in the marking device, and the second verification consists in that a biometric sample taken of the person must be consistent with biometric sample code stored in the marking device or with information derived from it.

Description: METHOD AND SYSTEM FOR THE APPLICATION OF A SAFETY MARKING FIELD OF THE INVENTION The present invention relates to an electronic safety marking. In particular, the present invention concerns a new and improved method and system for the application of a safety marking in an electric form for marking objects and devices. BACKGROUND OF THE INVENTION The safety marking is used for the marking of objects, devices and information in order to protect them against theft and misuse. The safety marking may consist of the owner' s social security number or name or some other piece of information, engraved on the device and identifying the owner of the device. However, this is difficult to implement as engraving or a corresponding physical marking method may damage the device to be marked and the marking often looks unaes- thetic. The safety marking may also be based on biometric data, such as e.g. the DNA, finger print or data obtained from the eye, in which case the person's identity can be more reliably ascertained. On the other hand, for example, cloned individuals have identical DNA but different finger prints. The accuracy of identification can be further improved by combining different identifying factors independent of each other. The DNA of a human being can be formed in 2 44 « 1,76 * 10 13 different ways. Correspondingly, the number of inhabitants on the earth is of the order of about 10 10 . By combining the DNA with the finger print independent of it and e.g. the PIN code used in mobile communication devices, the number of different combinations will be 10 29 . At present, objects can also be marked with an electric or electronic safety marking based on the idea of marking objects with a small coded safety chip containing marking data that can only be read using special reading apparatus. A system of this nature is based on transponder technology used in conjunction with almost invisible chips. The chips are generally passive, so they cannot be re-programmed, which is why they cannot be forged and are not sensitive to elec- tromagnetic radiation. To apply an electronic safety marking, the customer buys a safety marking from an authorized dealer. The dealer installs a microchip in the object to be marked, whereupon the marking is registered, using a register card, in a database main- tained by a third party. When a stolen object provided with a safety marking is found, the information contained in the chip is read by means of a special reading apparatus. This information is compared with the third party da- tabase to determine the right owner of the object. However, such an arrangement requires a special registration database which has to be maintained and is therefore difficult to use. Moreover, the reading apparatus or the information read may be modified or ma- nipulated before the database query. Consequently, the system cannot be fully relied on. The object of the invention is to eliminate the problems referred to above. A specific object of the invention is to dis- close a new type of method and system for electronic marking of objects, devices or information. The object of the invention is to simplify the identification of marked equipment and to achieve a system that is absolutely reliable. The invention concerns a method for the application of a safety marking. In the method, the device to be marked is provided with a safety marking in an electric form. The marking can be installed in the device or object so unnoticeably that it is practically impossible to discover. According to the invention, the safety mark- ing is read into an identification device and decoded in order to obtain the information contained in it. This information may include personal owner identification data, such as name, social security number, etc. In connection with this information, it is also possible to apply e.g. a PIN code (PIN, Personal Identity Number) , which makes it possible to form an electronic signature. The PIN code to be used can be implemented either in the mobile station or in the SIM card. The PIN code and its length can be so defined that they fit the application, and, in an embodiment, the user can change it at will. In an embodiment of the invention, the safety marking is produced by forming a first string of predetermined form from personal or other identification data. This predetermined form may be e.g. the binary form, which can be readily handled by a microprocessor. The first string is encrypted with a first key, thus encrypting information as to what personal data have been used to form the safety marking. The string is signed electrically. After this, the string is encrypted in a marking device using e.g. the user's public key to generate and encrypted string. The marking device preferably contains two encryption keys. The user's public key in the marking device is unknown to the world outside. Therefore, the identification data remain concealed, thus affording privacy protection to the user of the safety marking. The encrypted string is stored in an electric form in the marking device, which is attached to the object or product to be marked. To decrypt the safety marking, the encrypted string is read into an identification device compris- ing means for decrypting the encrypted string. The identification device also contains a decryption key to which only the owner and user of the safety marking has an access right. In practice, the access right consists of a password for the decryption key, e.g. a PIN code or some other corresponding code, by means of which the decryption key can be used. The user may send this decryption key likewise in an encrypted form such that a reliable third party, e.g. the police, will be able to decrypt it and use this key e.g. for the identification of the safety marking. The personal data preferably comprise a biometric sample of the owner of the safety marking. The biometric sample may be the DNA code, which is stored in the safety marking in a predetermined- form. The biometric sample may also consist of a finger print or a picture of the retina or iris of the eye of the user of the safety marking. From these samples, a graphic representation is generated and encoded into a suitable form, e.g. binary form, so that it can be encrypted using a known encryption method. When a biometric sample is included in the personal data, this provides a double safety check for the verification of the owner of the safety marking. When a user claiming to be the owner of a safety marking gives a password with which the safety marking can be decrypted and the user' s personal details obtained, then a first check has been carried out as the password for the decryption key is specific to the user and/or person. After this, the user can be associated with the safety marking by taking of him/her a sample corresponding to that contained in the safety marking. For example, if a DNA code contained in the safety marking corresponds to the DNA code determined from the user, then this is irrefutable proof that the safety marking belongs to the person in question. Included in the safety marking are also the owner's personal details for individualizing the safety marking and obtaining authenticity of the owner. The system of the invention for the application of a safety marking used to mark objects and equipment by providing them with a safety marking in an electric form comprises an identification device comprising a reading device for the reading of an identification symbol and a processor for the processing of the identification symbol. The identification device may be any known device capable of reading a safety marking stored in an electric form. Moreover, the properties of the identification device are largely determined on the basis of the form of storage of the safety marking. As the safety marking can be stored in many different forms, such as graphic, bar code, binary or equivalent forms, the reading device may also have many different properties, respectively. According to the invention, the system comprises means for generating a first string from personal data in a predetermined form. In addition, the system comprises means for encrypting the first string with the user' s public key to form an encrypted string. The means for generating a string and the means for encrypting the string may be located e.g. in a computer or an equivalent device, into which the personal data is supplied and which is used to form the safety marking. Moreover, the system comprises a marking device for storing the encrypted string in an electric form. The encrypted string is fed into the marking device in a predetermined form. Furthermore, the system comprises means for decrypting the encrypted string using a decryption key provided in the identification device. In a preferred embodiment, the marking device comprises a storage device and a first interface for linking the marking device with the reading device. The identification device may consist of a safety module which comprises a second interface for setting up a connection with the marking device. In a preferred embodiment, the first and second interfaces are implemented using Bluetooth technology. As compared with prior art, the present invention has the advantage that it guarantees a reliable and safe arrangement for the application of a safety marking in an electric form. In addition, the invention significantly simplifies the use of a safety marking in an electric form because it does not require the use of a separate registration database. A further advantage of the invention as com- pared with prior-art technology is that the invention allows double verification of the authenticity of the owner of the safety marking. This often produces a complete certainty as to who is the owner of the safety marking. The procedure of the invention also affords privacy protection to the user of the safety marking as deciphering the information contained in the safety marking is very difficult, depending on the encryption algorithm used. LIST OF ILLUSTRATIONS In the following, the invention will be described by the aid of a few examples of its preferred embodiments with reference to the attached drawing, in which Fig. 1 presents an identification device according to the present invention, Fig. 2 presents a preferred marking device according to the present invention, and Fig. 3 presents a flow diagram representing a preferred identification method according to the present invention. DETAILED DESCRIPTION OF THE INVENTION Fig. 1 presents a preferred identification device 1. The identification device comprises a second interface RP1 for linking it to a marking device 6. In addition, the identification device comprises encryption and decryption means 5, 7 for decrypting the information to be stored in the marking device 6 and decrypting the encrypted information to be read by means of the marking device. Furthermore, the decryption means presented in Fig. 1 comprise a processor 3, which can be designed and optimized specially for encryption functions and which encrypts and decrypts and implements an electric signature, and a storage 9, which is con- nected to the processor for storing the keys and parameters it needs. The information stored in the storage 9 may include the personal decryption key of the user of the safety module, parameters of the encryption algorithm and other data needed. A preferred ex- ample of the encryption algorithm used in this invention is the RSA method, but other unsymmetrical or symmetrical algorithms can also be used, depending on the application. The frame 11 of the identification device has been designed to fit the shapes of the power source of a mobile station. The frame 11 is provided with a connector 12 for connecting the identification device to the mobile telephone. The connector 12 also serves to connect the power and communication between the iden- tification device and the mobile station. In this embodiment, the power source of the identification device has a capacity substantially corresponding to the power source of the mobile station and is also chargeable. Therefore, the identification device can be eas- ily connected to the mobile station both mechanically and electrically. The marking device presented in Fig. 2 com ¬ prises a storage device 8 and a first interface RP1 for connecting the marking device to an external device, e.g. an identification device. The marking de- vice 6 may preferably be a commonly used marking αe- vice known in itself based on transponder technology. Via the first and second interfaces RP1, RP2, the identification device 1 can be connected to the marking device 6 using a wireless or physical link to allow data transfer between them. The encrypted string can be transferred into the marking device 6 by means of the identification device or n conjunction with the manufacture of the marking device. The encrypted string can be read by means of the identification de- vice or a corresponding device provided with the required reading means. A device like this could be e.g. a safety module as described in patent specification FI 981902. In conjunction with the interfaces RP1, RP2, it is possible to provide a so-called Bluetooth component, although th s is not shown in Fig. 1 and 2. The Bluetooth component is used to implement the functions required by the technology in question. The interfaces RP1, RP2 can be implemented using any optical infrared link, radio link or a known bus interface. Fig. 3 illustrates a preferred identification method according to the invention. When an object or device provided with a marking device is to be identified, the information stored in the marking device 6 is read by means of the identification device 1, block 31. The reading may be effected via a wireless connection or the identification device may be physically attached to the marking device. After the information has been read into the identification device, the user's personal password is fed into the ldent fica- tion device, enabling the use of the personal decryption key stored in the identification device, block 32. This is the first check for verifying the owner of the marking device. Only the owner of the marking device is in possession of the decryption key to be used in decrypting the encrypted string stored in the marking device. Once the user has given the key, the encrypted string is decrypted by the identification device 1, block 33. The person's identity is verified against the decrypted string thus obtained, and if it corresponds to the identity declared by the person, then the process goes on to block 35, and if not, then the reading and encrypting operations can be repeated, e.g. three times, returning to block 31. In block 35, if a further check is to be carried out to verify that the person is actually the individual he/she is claim- ing to be, a biometric sample is taken from the person and the sample is compared with the sample information stored in the marking device. If the sample is all right, then the person's identity has been established with nearly absolute certainty and likewise that the marking device belongs to the person in question. This process of comparing the sample can also be repeated e.g. three times to make sure that a failure of the test has not been caused by a technical fault. The invention makes it possible to implement reliable identification locally without having to establish a connection with a separate database to verify the correctness of an identifier. Especially when electronic identification becomes more widespread, a situation is likely to arise where several databases are used for identity checks, which may impair identity protection. In a case described as an example, a first string is formed from personal data about the user. The first string comprises e.g. the DNA code and fin- ger print information, both converted into digital form. The string thus formed is encrypted by the RSA 1024 method using the user's secret encryption key, so that it will not be possible to determine from the string thus generated what part or parts of the body is/are the origin of the biometric data. The string is signed electrically and encrypted using a public key. The identifier thus produced is incorporated in the product to be encrypted. The safety marking can be checked e.g. by means of an identification device attached to a mobile station, in which case the user' s right to the marked object or information can be proved by means of the mobile station. Electronic information can be easily incorporated e.g. in data stored in digital form. For instance, on a CD disk which contains a large amount of redundant information, it is possible to hide an identifier that is hard to detect and is only found as the output of an appropriate function. The safety marking embedded in the information can not be altered as it is not visible from outside. The safety marking can be read e.g. by a verification reading method, the desired safety marking being obtained as an output for certain information. In this way, it is possible to verify e.g. copyright data regarding electronic information, in other words, to mark electronic information in the name of a given person, corporation or commu- nity. The present invention is not restricted to the examples described above, but many variations are possible within the scope of protection of the inventive idea defined in the claims.

Claims: CLAIMS 1. Method for identifying a safety marking, in which method a safety marking is used to mark objects, devices or information by attaching the safety marking in electric form to them, characterized in that the safety marking is read into an identification device; and the safety marking is decoded to obtain per- sonal information contained in it. 2. Method as defined in claim 1, characterized in that the safety marking is generated by forming from personal data a first string in a predetermined form; encrypting the first string; signing the first string electrically; encrypting the signed first string to form an encrypted string; the encrypted string is stored in electric form in a marking device; and that the safety marking is decoded by reading the encrypted string into an identification device; and decrypting the encryption using a decryption key provided in the identification device. 3. Method as defined in claim 1 or 2, characterized in that the personal data comprise a biometric sample of the owner of the safety marking. 4. Method as defined in any one of claims 1 - 3, characterized in that the biometric sample comprises the DNA code of the owner of the safety marking in a predetermined form. 5. Method as defined in any one of claims 1 - 3, characterized in that the biometric sample comprises a fingerprint specimen of the owner of the safety marking in a predetermined form. 6. Method as defined in any one of claims 1 - 3, characterized in that the biometric sample comprises an image of the eye of the owner of the safety marking in a predetermined form. 7. Method as defined in any one of claims 1 - 6, characterized in that the biometric sample is in binary form. 8. Method as defined in any one of claims 1 - 7, characterized in that, to individualize the safety marking, the personal details regarding its owner are included in the safety marking. 9. System for the application of a safety marking used to mark objects and devices by attaching the safety marking to them in an electric form, said system comprising an identification device (1) , which comprises a reading device (2) for reading the safety marking and a processor (3) for processing the safety marking, characterized in that the system comprises means (4) for forming a first string from personal data in a predetermined form; means (5) for encrypting the first string using the user' s public key to generate an encrypted string; a marking device (6) for storing the encrypted string in an electric form; means (7) for decrypting the encryption using a decryption key provided in the identification device. 10. System as defined in claim 9, characterized in that the marking device (6) comprises a storage device (8) and a first interface (RP1) for connecting the marking device to the reading device (2) . 11. System as defined in claim 9 or 10, characterized in that the identification device (1) is a safety module. 12. System as defined in any one of the preceding claims 9 - 11, characterized in that the safety module (1) comprises a second interface (RP2) for establishing a connection to the marking device.

Inventors: VATANEN HARRI, VATANEN, HARRI
Applicants: SONERA OYJ, VATANEN HARRI, VATANEN, HARRI
Application year: 1999
Main classification: H04L9
IPC codes: G06F21, G06K17, H04L9