Abstract:
A method and system that registers data carried by a watermark with a server, reads watermark data from a document and generates an action string if a watermark read from a document matches registered data. In one embodiment the system includes two servers. Registration is done on one server via the internet the registration data is sent to a second server. The second server is interrogated via a local area network (LAN) to determine if particular watermark data is registered. The LAN allows data carried on documents such as tickets to be authenticated very quickly. In a second embodiment, there are multiple registration servers, each of which registers a different sets of watermark data. The compartmentalization of data increases security and privacy of data.

Description:
Related Applications  
       [0001]    The present application is a continuation in part of pending application Ser. No. 09/571,422, filed May 15, 2000, which is a CIP of each of the following applications:  
         [0002]    1) Ser. No. 09/314,648, filed May 19, 1999  
         [0003]    2) Ser. No. 09/342,688, filed Jun. 29, 1999  
         [0004]    3) Ser. No. 09/342,689, filed Jun. 29, 1999  
         [0005]    4) Ser. No. 09/342,971, filed Jun. 29, 1999  
         [0006]    5) Ser. No. 09/343,101, filed Jun. 29, 1999  
         [0007]    6) Ser. No. 09/343,104, filed Jun. 29, 1999  
         [0008]    7) Ser. No. 60/141,468, filed Jun. 29, 1999  
         [0009]    8) Ser. No. 60/151,586, filed Aug. 30, 1999  
         [0010]    9) Ser. No. 60/158,015, filed Oct. 6, 1999  
         [0011]    10) Ser. No. 60/163,332, filed Nov. 3, 1999  
         [0012]    11) Ser. No. 60/164,619, filed Nov. 10, 1999  
         [0013]    12) Ser. No. 09/531,076, filed Mar. 18, 2000  
         [0014]    13) Ser. No. 09/543,125, filed Apr. 6, 2000  
         [0015]    14) Ser. No. 09/547,664, filed Apr. 12, 2000, and  
         [0016]    15) Ser. No. 09/552,998, filed Apr. 13, 2000 
     
    
     
       FIELD OF THE INVENTION  
         [0017]    The present invention relates to computer systems and more particularly to a system for handling documents that contain a digital watermark.  
         BACKGROUND AND SUMMARY OF THE INVENTION  
         [0018]    The technology for inserting digital watermarks in documents and the technology for detecting and reading digital watermarks that are embedded in documents is well developed. Furthermore, methods and systems for linking to internet sites in response to physical objects that contain watermarks are known. For example see co-pending application Ser. No. 09/571,422 May 15, 2000 entitled “Methods and Systems for Controlling Computers or Linking to Internet Resources from Physical and Electronic Objects” the content of which is hereby incorporated herein by reference.  
           [0019]    It is also noted that a system marketed by Digimarc Corporation under the trademark “Media-Bridge” includes a central computer which accepts and registers identification numbers and associated action strings, and software which reads a watermark containing an identification number. When a watermark is read, the data base is interrogated via the Internet to locate a previously registered action string, and a response is returned to the requesting software via the Internet.  
           [0020]    In some situations, the turn around time between when a watermark is read and when a desired action occurs is very critical. For example, watermarks on a ticket for an event can be used to carry authentication data. The data carried by the watermark on the ticket can be compared to data registered on a server in order to authenticate the ticket. When a ticket is presented at an entry point for an event, the ticket must be authenticated very quickly. The present invention provides a system which can be used to very quickly authenticate documents such as tickets through a local area or a wide area network. The authentication is done without the use of communication via the Internet. Tickets may be sold at many different locations, hence, identification data is registered at a central site using the Internet. At a specified time, the registration data is downloaded to a computer data base at a local site where the tickets will be presented for entry to an event. At the time of the event, when the tickets are presented for authentication, the identification is done quickly for the local data base via a local area network (LAN). Data for tickets sold after the initial download can be downloaded as increments to the local data base.  
           [0021]    In other situations, for security considerations, it is not desirable to store all the registration data in a single local data base. In one embodiment, the present invention provides a number of local computers which exchange data on a peer to peer basis. Thus the data can be compartmentalized for security reasons.  
           [0022]    In still other situations, due to security and other considerations, it is desirable that all communication be over a local area or wide area network other than the Internet. The present invention provides a system that can operate on a local area network (LAN) or on a wide area network (WAN). 
       
    
    
     BRIEF DESCRIPTION OF THE DRAWINGS  
       [0023]    [0023]FIG. 1 is a system diagram of a first embodiment of the invention.  
         [0024]    [0024]FIG. 2 is a program flow diagram of a first embodiment of the invention.  
         [0025]    [0025]FIG. 3 is a system diagram of a second embodiment of the invention.  
         [0026]    [0026]FIG. 4 is a program flow diagram of a second embodiment of the invention.  
         [0027]    [0027]FIG. 5 is a system diagram of a third embodiment of the invention. 
     
    
     DETAILED DESCRIPTION  
       [0028]    An overall system diagram of a first embodiment of the invention is illustrated in FIG. 1. The overall purpose of system is to authenticate tickets for events such as concerts or sporting events. It is important to note, that the time constraints that are involved when tickets are sold is very different from the time constraints involved when tickets are presented for entry to an event. When tickets are presented for entry to an event they must be validated very quickly. The present system is designed to fulfill this requirement.  
         [0029]    Each ticket includes watermark data which is unique to the particular ticket. When a ticket is sold, the data in the watermark of the ticket is registered at server  102 . The tickets can be printed at the time of sale and a watermark can be embedded in the ticket at that time, or tickets can be pre-printed and at the time a ticket is sold, the watermark in the ticket can be read and registered at server  102 .  
         [0030]    The tickets are authenticated when they are presented for entry to the event as follows: The watermark in the presented ticket is read. The data in the watermark is sent to watermark checking server  103  which checks to see if the particular ticket in question has been registered as having been sold.  
         [0031]    It is noted that while as described herein the system is used to check tickets for events such as concerts or sporting events, the system can be used to authenticate any ticket, image or document that contains a watermark. Generally tickets are sold at many widely dispersed points, hence, entry of the data via internet is convenient. Furthermore selling tickets is a relatively time consuming operation, hence communication via the internet is acceptable even if it involves some slight delays. However, validating tickets when they are presented for entry to an event is a very time sensitive operation. Any delay is unacceptable and the validation must be made without delay. Due to the necessity for speed, the validation station is connected to the watermark checking server via an Ethernet LAN connection.  
         [0032]    The system includes a central watermark registration server  102  that can be located anywhere and a watermark checking server  103  that is located near the place here tickets are presented for validation. The watermark registration server  102  includes a watermark registration program  102 A and a database  102 B. The watermark registration program  102 A receives watermark registration information from an entry station when a ticket is sold. This information is generally (but not necessarily) provided to the watermark registration sever  102  via the internet. Thus, watermark registration server  102  collects and stores in a data base  1   02 B, information which identifies the unique data in the watermarks on each of the tickets which is sold.  
         [0033]    Information from the watermark registration server  102  is downloaded to a watermark checking server  103  at a designated time prior to when patrons are expected to present tickets for validation. The system includes a ticket validation station  104  which includes a watermark reading mechanism. When a ticket is presented for entry to an event, the watermark in the ticket is read by a conventional watermark reading program. The data in the watermark is checked against the data in the watermark checking server  103  to determine if the particular ticket is valid. If the data in the watermark of a ticket presented for entry is registered in the watermark checking server  103 , an “action string of data” is returned to the watermark checking station. The action string can be command data that would open an entry gate  105 . Alternatively it could be merely data that would be flashed on a screen to indicate that a particular ticket is valid.  
         [0034]    [0034]FIG. 2 is a program flow diagram showing the operations performed by the various elements in the system. Dotted line  201  indicates the operations performed at a central server  102  and dotted line  202  indicates operations performed at a server  103  which is located at the site where tickets are presented for verification. The process begins at block  203  where a watermark in embedded in a ticket using prior art technology. Each ticket is watermarked with data that is unique to the particular ticket. That is, each ticket contains different watermark data. When a particular ticket is sold, the watermark data in that particular ticket is registered at server  102  as indicated by block  204 . Prior to the start of the event for which the tickets are being sold, data is downloaded from the central server  102  to the server  103  at the location of the event. This can either be done once after tickets sales have stopped, or it can be done incrementally as tickets are sold.  
         [0035]    The system can include an application program  210  which for example scans a ticket and opens a gate if the ticket is validated. The watermark on the ticket is read using conventional watermark reading program  211 , and the data base  215  is interrogated to determine if the particular ticket contains a watermark which has been registered indicating that the ticket is valid. If the ticket has been registered as having been sold, a signal is sent to the application program  210  to take the appropriate action such as to open a gate.  
         [0036]    It is noted that the user application program  210  and the watermark reader  211  are connected to the watermark checking server  103  via a high speed LAN connection. Thus, the communication involved with checking and authenticating a ticket proceeds at high speed with a minimum of delay.  
         [0037]    The system can include a hit recording program  216  which keeps track of the number of tickets that have been presented for verification. This system can record a wide variety of statistics. For example it can analyze where tickets presented for verification have been sold and it can record the number of un-validated tickets presented.  
         [0038]    A second embodiment of the invention is shown in FIG. 3. In this embodiment, the registration servers operate on a peer to peer basis. There can be any number of such servers connected in a network. For simplicity of illustration and explanation in the example shown in FIG. 3, only four peer to peer servers are shown; however it should be understood that there can be more similarly connected. Each server may for example be associated with a different department in an organization. In the example illustrated in FIG. 3, the servers are associated with four separate departments A to D. Each department could for various security considerations, desire to register and keep from access by other departments certain watermarks. The registration of other watermarks could be exchanged between departments.  
         [0039]    Each Department A to D has a watermark embedding and registration input  301 A to  301  D. These are conventional devices which embed particular watermark data in an image and which ten register the watermark with a registration server. In the example illustrated the servers are designated  302 A to  302 D. These servers could be physically separate computers or they could be independent servers operating on a single computer. Separate computer provide added security. Each department A to D also has an associated application program and watermark reader  303 A to  303 D. The watermark readers  303 A to  303 D check to see if the information read from the watermark in a particular image is registered on the associated server  302 A to  302 D.  
         [0040]    In some situations, a department may desire to have a particular watermark registered on some other servers in addition to the server associated with the particular department. There is a connection between the servers designated  305  to  307  which allows exchange of registration information between the servers. Each registered watermark includes an indication of the particular servers on which the watermark should be registered. There is communication between the servers. When a particular watermark is registered, the user registering the watermark can indicate the particular servers on which the particular watermark should be registered. For example, in a situation where there are ten registration servers connected on a peer to peer basis, the user registering a watermark, might indicate that it should only be registered on the one server in that department, or he might designate nine servers and indicate that it should be register on only these nine of the ten servers, or he might indicate that it should be registered on all of the servers, etc.  
         [0041]    [0041]FIG. 4 is a program flow diagram illustrating the operation performed by the system shown in FIG. 3. The doted blocks  401  and  402  illustrate the operations performed by the systems for departments A and B. The systems at each of the other departments perform similar operations. The watermark embedding steps  401 A and  401 B and  402 A and  402 B proceed as in the prior embodiments; however, when a watermark is registered, an indication is given concerning on which servers the watermark should be registered. Likewise the users application programs  401 F and  402 F, the watermark reading steps  401 E and  402 E individually proceed as in the prior embodiments. That is each of the servers  301 A,  301 B etc. individually operate as described as the previously referenced co-pending applications, except that when a watermark is registered, some additional data is entered into the registration data base. When a watermark is registered, an entry is made as to which servers would store the registration information in addition to the server with which the mark is registered. Thus, each watermark is registered with one server, and if the appropriate instruction is given when the watermark is registered, the registration information is transmitted to other designated servers.  
         [0042]    A third embodiment of the invention is illustrated in FIG. 5. In this third embodiment, all the units are connected via high speed LAN connections rather than via the internet. This system can for example be used by an organization that desires it own self contained system for registering and responding to requests from a watermark reader. The system includes a computer server  502  that includes a watermark registration program  502 A and a watermark serving program  502 B. The system can also include a watermark hit recording program  502 C. One or more watermarking embedding and registration input stations  501  operate similar to the previously described systems except that they are connected to the computer  500  via a local area network (LAN) connection. Likewise the watermark reader and the user application  503  operate similar to the previously described embodiments except that they are connected to the computer  502  via a LAN connection. The LAN provides for high speed and more secure communication than does an Internet connection.  
         [0043]    The contents of co-pending application Ser. No. 09/571,422 May 15, 2000 entitled “Methods and Systems for Controlling Computers or Linking to Internet Resources from Physical and Electronic Objects is incorporated herein by reference to provide details of some of the elements shown herein in block diagram form. While the invention has been shown and described with respect to a number of preferred embodiments, it should be understood that various other changes in format and detail can be made without departing from the spirit of the invention. The scope of the invention is limited only by the appended claims.