Reader device for reading a marking comprising a physical unclonable function

Patent metadata

Field	Value
Publication number	US-10275627-B2
Application number	US-201715838774-A
Country	US
Kind code	B2
Filing date	Dec 12, 2017
Priority date	Dec 21, 2016
Publication date	Apr 30, 2019
Grant date	Apr 30, 2019

Abstract

The present disclosure relates to the field of anti-counterfeit protection of products. Specifically, the disclosure is directed to a method of reading with a reader device a marking comprising a physical unclonable function, PUF, and a corresponding reader device. In particular, such reader device marking can be used in connection with or can form a component of a multi-component security system, in particular of an anti-counterfeit protection system, which is also disclosed herein as part of an overall security solution for anti-counterfeit protection. The method comprises a stimulation step, wherein a physical challenge according to a predetermined challenge-response authentication scheme corresponding to the PUF is created and applied to a PUF; a detection step, wherein a response generated by the PUF in accordance with the challenge-response authentication scheme in reaction to the challenge is detected and a digital signal representing the response is generated; a processing step, wherein the digital signal is processed in order to generate a hash value of the response by application of a predetermined cryptographic hash function to the digital signal; and an output step, wherein data representing the generated hash value as a first reading result is output.

First claim

The invention claimed is:

1. A method of reading with a reader device a marking comprising a physical unclonable function, PUF, comprising the following steps:
a stimulation step, wherein a physical challenge according to a predetermined challenge-response authentication scheme corresponding to the PUF is created and applied to a PUF;
a detection step, wherein a response generated by the PUF in accordance with the challenge-response authentication scheme in reaction to the challenge is detected and a digital signal representing the response is generated;
a processing step, wherein the digital signal is processed in order to generate a hash value of the response by application of a predetermined cryptographic hash function to the digital signal;
an output step, wherein data representing the generated hash value as a first reading result is output; and
an access monitoring step, wherein one or more of the following are detected by means of one or more sensors as a security event:
an attempt or actual act of physical intrusion into the reader device;
an attempt or actual act of locally or remotely accessing an internal control functionality of the reader device, wherein such access is not available to a user of the device in the course of its normal operation,

wherein in the processing step the digital signal is generated in such a way that it represents at least one PUF-specific distinctive property of the response that is, at least substantially, invariant under variations of the environmental conditions at which the response is detected.

2. The method of claim 1 , wherein detecting the response in the detection step comprises detecting at least one property of electromagnetic radiation emitted by the PUF as a response in reaction to the challenge and the digital signal is generated such that it represents this response.

3. The method of claim 2 , wherein detecting the response in the detection step comprises detecting a characteristic lifetime of a luminescence effect occurring in the response as a property of electromagnetic radiation emitted by the PUF.

4. The method of claim 2 , wherein:
detecting the response in the detection step comprises detecting a spectrum of the emitted radiation as a property of electromagnetic radiation emitted by the PUF; and
processing the digital signal in the processing step comprises determining from the digital signal one or more of the following:
the position of one or more characteristic features within the spectrum;
one or more statistical measures characterizing the spectrum;
one or more quantized spectral values of the spectrum;
a spectral barcode representing a continuous or a quantized range of allowed spectral values occurring in the spectrum.

5. The method of claim 1 , further comprising:
an acquisition step, wherein a composite security marking comprising a PUF and a corresponding first digital signature or a pointer indicating a source where such first digital signature can be accessed is read, and said first digital signature is acquired from the marking or the source indicated by the pointer, respectively; and
in the output step a representation of the acquired first digital signature, and/or a matching output indicating whether, according to at least one predetermined matching criterion, a hash value provided and signed by the acquired first digital signature matches the hash value generated from the response to the challenge, is output.

6. The method of claim 5 , wherein the acquisition step further comprises
acquiring from the composite security marking a second digital signature or a pointer indicating a source where a particular second digital signature pertaining to the marking can be accessed; and
the output step further comprises outputting a representation of the acquired second digital signature as a second reading result.

7. The method of claim 6 , wherein the storage step comprises:
storing the first reading result in a block of a first blockchain; and
storing the second reading result in a block of a second blockchain that is separate from the first blockchain.

8. The method of claim 7 , wherein the storage step further comprises:
when storing the first reading result in a block of the first blockchain, including a cross-blockchain pointer, which logically maps the block of the first blockchain to a corresponding block of the second blockchain into the block of the first blockchain; and
when storing the second reading result in a block of the second blockchain, including a cross-blockchain pointer, which logically maps the block of the second blockchain to a corresponding block of the first blockchain into the block of the second blockchain.

9. The method of claim 1 , wherein the output step further comprises outputting at least a part of a reading result in the form of a one-dimensional or a multi-dimensional barcode.

10. The method of claim 1 , further comprising an authentication step, wherein a user is authenticated before permitting him or her to further operate the reader device in case of a successful authentication.

11. The method of claim 1 , further comprising a communication step, wherein a reading result is communicated over a communication link to an opposing side.

12. The method of claim 11 , wherein the communication step further comprises capturing and sending security-related information to a predetermined opposing side over the communication link.

13. The method of claim 11 , further comprising an information monitoring step, wherein a security event is detected in information contained in a signal received from the opposing side over the communication link.

14. The method of claim 1 , further comprising a security defense step, wherein one or more of the following security measures are performed in reaction to detection of a security event:
locking the reader device such as to limit or prevent its further use;
self-destroying at least one functional part of the reader device or destroying data stored therein in order to prevent its further use or access by a user;
outputting an error message.

15. The method of claim 1 , wherein the outputting step comprises digitally signing data containing the generated hash value and outputting the resulting digital signature as the first reading result.

16. The method of claim 1 , further comprising a storage step, wherein a reading result being output in the output step is stored into a block of a blockchain.

17. A reader device for reading a marking comprising a physical unclonable function, PUF, wherein the reader device is adapted to perform the method of claim 1 .

18. The reader device of claim 17 comprising:
a stimulator being configured to perform the stimulation step;
a PUF-detector being configured to perform the detection step;
a processing device configured to perform the processing step; and
an output generator being configured to perform the outputting step.

19. The reader device of claim 18 , further comprising one or more of the following:
an acquisition device configured to perform the acquisition step, wherein a composite security marking comprising a PUF and a corresponding first digital signature or a pointer indicating a source where such first digital signature can be accessed is read, and said first digital signature is acquired from the marking or the source indicated by the pointer, respectively, and

in the output step, a representation of the acquired first digital signature, and/or a matching output indicating whether, according to at least one

Assignees

• Merck Patent Gmbh

Inventors

• Endress Thomas
• Szabo Daniel
• Wahl Fabian

Classifications

• H04L9/3278

  using physically unclonable functions [PUF] · CPC title

• G09C5/00

  Ciphering apparatus or methods not provided for in the preceding groups, e.g. involving the concealment or deformation of graphic data such as designs, written or printed messages · CPC title

• G09C1/00 Primary

  Apparatus or methods whereby a given sequence of signs, e.g. an intelligible text, is transformed into an unintelligible sequence of signs by transposing the signs or groups of signs or by replacing them by others according to a predetermined system (cryptographic typewriters G09C3/00) · CPC title

• G06K7/1417 Primary

  2D bar codes · CPC title

• H04L9/0643

  Hash functions, e.g. MD5, SHA, HMAC or f9 MAC · CPC title