Systems and methods for token authentication

Patent metadata

Field	Value
Publication number	US-12244725-B2
Application number	US-202217735917-A
Country	US
Kind code	B2
Filing date	May 3, 2022
Priority date	May 3, 2022
Publication date	Mar 4, 2025
Grant date	Mar 4, 2025

Abstract

In some embodiments, an authentication system may be configured to process one or more tokens that incorporates one or more tailored-wavelength-range coded patterns, codes represented within a steganographic image, or “overlapping” codes. As an example, such a token may include (i) one or more invisible-ink-printed patterns printed using infrared ink corresponding to different tailored wavelength ranges within the infrared light spectrum, (ii) one or more steganographic images in which invisible-ink-printed patterns are interweaved within the steganographic images, (iii) visible-ink-printed patterns and invisible-ink-printed patterns printed substantially within the visible ink portions of the visible-ink-printed patterns, or (iv) other features, where the invisible-ink-printed patterns correspond to one or more authentication codes or other data for token authentication.

First claim

What is claimed is:

1. A system for employing multiple optical sensor modes to perform token authentication, the system comprising:
storage circuitry configured to store a secret key;
an optical sensor system configured to operate in a plurality of wavelengths, the plurality of wavelengths comprising a first invisible mode corresponding to a first wavelength range within a first invisible light spectrum and a second invisible mode corresponding to a second wavelength range within a second invisible light spectrum different from the first wavelength range; and
control circuitry configured to perform operations comprising:
obtaining text printed on a document, wherein the text comprises a date printed on the document;
generating a first message authentication code based on the text and the secret key;
obtaining a second message authentication code by:
setting, based on the date printed on the document, the optical sensor system to operate in the first invisible mode corresponding to the first wavelength range;
extracting, via the optical sensor system in the first invisible mode, an invisible mode indicator from invisible ink printed on the document, wherein the invisible mode indicator indicates the second wavelength range;
setting, based on the invisible mode indicator extracted via the first invisible mode, the optical sensor system to operate in the second invisible mode corresponding to the second wavelength range; and
extracting, via the optical sensor system in the second invisible mode, the second message authentication code from the invisible ink printed on the document; and

authenticating the document based on a determination that the first message authentication code matches the second message authentication code.

2. The system of claim 1 , wherein extracting the second message authentication code comprises:
determining, via the optical sensor system, a plurality of steganographic images;
generating, based on the text, a cryptographic hash;
in response to determining that the cryptographic hash is less than a threshold value, selecting a first steganographic image of the plurality of steganographic images; and
extracting the second message authentication code from the first steganographic image.

3. The system of claim 1 , wherein generating the first message authentication code comprises:
generating concatenated text by concatenating the text with the secret key; and
inputting the concatenated text into a cryptographic hash function.

4. The system of claim 1 , wherein the text comprises an indication of a recipient, an amount, and an account identification number.

5. A method comprising:
determining text on a document, the text comprising a first text portion and a second text portion;
generating a first message authentication code based on the first text portion and a cryptographic key;
determining, based on the second text portion, a first wavelength range of a light spectrum to use to scan the document;
extracting, via one or more sensors, based on the first wavelength range, a wavelength indicator from a first coded image printed on the document, wherein the wavelength indicator indicates a second wavelength range of the light spectrum;
determining, via the one or more sensors, based on the wavelength indicator, the second wavelength range to use to scan the document;
extracting, via the one or more sensors, based on the second wavelength range, a second message authentication code from a second coded image printed on the document; and
authenticating the document based on a determination that the first message authentication code matches the second message authentication code.

6. The method of claim 5 , wherein determining the first wavelength range comprises:
determining, based on the text, an expiration date of the document; and
determining, based on the expiration date, the first wavelength range.

7. The method of claim 5 , wherein determining the first wavelength range comprises:
generating, based on the text, a cryptographic hash; and
in response to determining that the cryptographic hash is greater than a threshold value, selecting the first wavelength range from a plurality of wavelength ranges.

8. The method of claim 5 , wherein the cryptographic key comprises a first public key of a key pair, the method further comprising:
determining a third-party certificate on the document; and
determining, based on a second public key corresponding to the third-party certificate, that the third-party certificate is valid.

9. The method of claim 5 , wherein the wavelength indicator comprises a first invisible-ink-printed pattern, and wherein the second message authentication code comprises a second invisible-ink-printed pattern that overlaps with the first invisible-ink-printed pattern.

10. The method of claim 5 , wherein extracting the second message authentication code comprises:
determining, via the one or more sensors, a plurality of steganographic images;
generating, based on the text, a cryptographic hash;
in response to determining that the cryptographic hash is less than a threshold value, selecting a first steganographic image of the plurality of steganographic images; and
extracting the second message authentication code from the first steganographic image.

11. The method of claim 5 , wherein determining the first wavelength range comprises:
retrieving a data structure comprising a plurality of wavelengths and a plurality of dates, wherein each date of the plurality of dates is mapped to a wavelength of the plurality of wavelengths; and
determining, based on the data structure and a date of the document, the first wavelength range.

12. The method of claim 5 , wherein generating the first message authentication code comprises:
generating concatenated text by concatenating the text with the cryptographic key; and
inputting the concatenated text into a cryptographic hash function.

13. One or more non-transitory, computer-readable media comprising instructions that when executed by one or more processors, causes operations comprising:
determining text on a document, the text comprising a first text portion and a second text portion;
generating a first authentication code based on the first text portion and a secret key;
determining a first wavelength range based on the second text portion;
extracting, via one or more sensors and based on the first wavelength range, a wavelength indicator from a first coded representation on the document, wherein the wavelength indicator indicates a second wavelength range;
extracting, via the one or more sensors and based on the second wavelength range indicated by the wavelength indicator, a second authentication code from a second coded representation on the document; and
authenticating the document based on a determination that the first authentication code matches the second authentication code.

14. The one or more non-transitory, computer-readable media medium of claim 13 , wherein determining the first wavelength range:
determining an expiration date of the document; and
determining, based on the expiration date, the first wavelength range.

15. The one or more non-transitory, computer-readable media of claim 13 , wherein determining the first wavelength range comprises:
generating, based on the text, a cryptographic hash; and
in response to determining that the cryptographic hash is greater than a threshold value, selecting the first wavelength range from a plurality of wavelength ranges.

16. The one or more non-transitory, computer-readable media of claim 13 , where

Assignees

• Capital One Services Llc

Inventors

• Osborn Kevin
• Wurmfeld David Kelly

Classifications

• H04L9/3268

  using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL] · CPC title

• B42D25/378

  Special inks · CPC title

• H04L9/3242 Primary

  involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC · CPC title

• H04L9/3213 Primary

  using tickets or tokens, e.g. Kerberos (network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807) · CPC title