EP3123452A1

EP3123452A1 - Security method

Info

Publication number: EP3123452A1
Application number: EP15712306.8A
Authority: EP
Inventors: Friedrich Kisters
Original assignee: Individual
Current assignee: Individual
Priority date: 2014-03-27
Filing date: 2015-03-18
Publication date: 2017-02-01
Also published as: CA2943846C; RU2688258C2; DE102014004348A1; WO2015144508A1; US20170132857A1; US10055912B2; CN106415597B; CN106415597A; RU2016141952A3; CA2943846A1; RU2016141952A

Abstract

The present invention relates to a method for authenticating and/for identifying persons, items, service systems or computer programs, in which a static, unchanging security feature that is characteristic of the person, the item, the service system or the computer program is provided or used that is subsequently altered by the influence of an unforeseeable factor and thereby converted into a dynamic security feature. Positive authentication is obtained when the dynamic security feature has at least partly changed by a dynamic factor between two query times in comparison with the static security feature stored in the memory means, wherein the static security feature stored in the memory means corresponds to the most recently updated altered dynamic security feature from the last query time. In addition, the invention relates to an authentication system in which dynamic security features originate from a static security feature.

Description

Description: Technical area:

The present invention relates to a method and an authentication device for the authentication and / or identification of persons, objects,

Service systems or computer programs in which a static, non-changing security feature characteristic of the person, the subject, the service system or the computer program is either recreated or an existing security feature is used, which subsequently is not added by the addition

changed by predictable factors and thereby converted into a dynamic security feature.

State of the art:

Many of the known authentication facilities are based on rigid

Security features in which, for example, a PIN number, a biometric (e.g., fingerprint), a code, or a password is associated with a particular user. In service systems, access restrictions to certain user groups are the rule and require extensive security measures to secure the associated sensitive data of the participants. Usually authentication methods are based on a previous registration, in which the identity of a user is deposited by entering user data before the first access of the application. In the prior art are different

Authentication methods distinguished, the factors the knowledge (e.g.

Password), ownership (e.g., an access card), and personal characteristics of the user (e.g., fingerprint, signature).

For example, evolutions of these technologies suggest that small portable devices simultaneously generate and display valid passwords through an algorithm and an authentication server on a display. These passwords usually contain longer rows of numbers that must be entered correctly. Many of these

However, procedures can easily be manipulated or bypassed. Password-based authentication methods are extremely vulnerable to security because of data transfers can be heard and hacked with it.

Methods that include biometric detection of features of the user, such as a user's fingerprint or iris scan, do not always work reliably and, moreover, are not safe from potential attackers because the biometric data does not change and is therefore copyable.

An example of the transmission of security features in a network system is described in DE 10 201 1 055 297 B4. The security features in an autonomous authentication device are separate from the application server

saved. A disadvantage of the method, however, is that these are inflexible security features that can be copied.

Another way is pursued in WO 2013/191913 A1. It will become one

described three-dimensional code having a structure or a profile in the X, Y and Z direction. Information is encoded in the structure. It will be

different parameters of the structures, e.g. the height, width or depth, as well as the shape of the elements used to encode information. The codes contained therein may also contain further information, for example conventional codes such as bar codes or QR codes. Again, the structure, albeit two-dimensional, is predetermined and does not change. A change in structure would inevitably entail deletion or alteration of the information encoded therein, and would be undesirable. Thus, even these 3-D structures can be easily bypassed by an attacker.

In DE 10 2010 009 977 A1 a security element with aligned

Magnetic pigments described in which by the action of laser radiation, a dynamic motif is generated. By combining a static and a dynamic motif, the attention and recognition value of the

Security elements are significantly increased.

In addition, security elements and methods are known in which

Surface structures or material structures that are part of a security element, an object or a person can be harnessed. In the WO

201 1/006640, for example, topographical structures in the form of crackles are used as a security feature. In EP 0 996 928 B1 an authentication method is described in which a combined code consisting of a unique random part and a non-random part is used. This code may be encrypted or decrypted as needed. The random part of the code can be matched to a local or central database. In the query, for example, it can be determined whether a code has already been read. However, here too the random part and the non-random part of the code (eg manufacturer information) are static; the code itself does not change dynamically. US 4,998,279 A describes a static code (PIN) consisting of a dynamic variable (eg a date or time). However, there is no conversion, recalculation or activation of the static security feature by a dynamic, unpredictable factor. Presentation of the invention:

Against this background, it is an object of the present invention to provide a more flexible and at the same time improved method for authentication and / or identification

provide with the persons, objects, service systems or

Computer programs with a higher level of security can be checked.

This object is achieved by a method having the features of claim 1.

Preferred embodiments are part of the subclaims. The inventive method is based on the basic idea that a static security element in a changing, dynamic security element

is converted. A static security feature refers to a security feature that can be associated with a particular person, object, service system or computer program and that does not itself change. A dynamic security feature, on the other hand, indicates a

A security feature that irreversibly alters due to the effects of unpredictable factors, and where development is unpredictable to a potential attacker or hacker. The static security feature is thus changed so that at least the changed parts of it can not be readily assigned to a specific person, an object, a service system or a computer program. The term article is to be understood as broad in the context of the present invention and includes any type of devices, systems, Media, devices and circuits.

In the method according to the invention, the static security feature is first deposited in a storage means. The deposit can be done in analog or digital form on any disk, for example on a database server. The static security feature or parts thereof are / are associated with a particular person, object, service system or computer software. In this respect, the process according to the invention does not differ from the already known processes in the prior art up to this process step.

According to the invention, however, it is only provided that the static security feature or parts thereof are converted, recalculated or activated, so that the static feature changes into a dynamic security feature. The transforming, the

Recalculation or activation of the static security feature occurs over an unpredictable factor, thereby reversibly or irreversibly changing the entire security feature or parts thereof from the original static security feature. A dynamic factor refers to a factor or influence that constantly changes itself, such as a physical parameter. Subsequently, the changed dynamic security feature or partial areas thereof is compared with the stored in the storage means static security feature at a particular query time. The polling time defines the time at which, for example, an authentication request is sent to an authentication server. This may be, for example, a user query or the intended activation of a service on a service server. The polling time preferably defines the beginning or the end of a session, for example a session in which a user wishes to access a particular service of a service system.

The person and / or the object and / or the service system and / or the computer software are / is then positively authenticated if the dynamic

Security feature against the stored in the storage means static security feature by an unpredictable factor between two

Query times, or in the case of an increased security requirement has at least partially changed. A characteristic of the change here is that it is not reproducible, that is to say the change of the static security feature into a dynamic security feature preferably takes place in a manner which is not subject to any particular rule and can not be hacked in this respect. The person and / or the subject matter and / or the service system and / or the computer software are / are positively authenticated if the dynamic security feature has at least partially changed from the static security feature stored in the storage means by a preferably dynamic factor between two polling instants, or in the case of an increased security requirement. By changing the static security feature into a dynamic security feature under the influence of a dynamic factor, it is unpredictable to a potential attacker how the dynamic security feature has changed or will change in the future. The dynamic factor is preferably a material property, the property of a device or a physical or chemical parameter. For example, it may be provided that a fingerprint triggered as a biometric feature is modified by the factor such that the dynamic security feature thus obtained can no longer be assigned to any particular person. The change can take place, for example, in that the profile of the fingerprint is recalculated, distorted or split into several individual parts. From such a

dynamic security feature, a potential attacker has no use.

According to the invention, it is further provided that not only is a conversion carried out, but that the dynamic security feature is continuously influenced by a

dynamic factor evolved. At the polling time it will be like this

advanced dynamic security feature is compared and updated in case of a successful authentication with the security feature stored in a database. Thus, the stored in the storage means static security feature always corresponds to the last updated security feature. As the change or evolution of the dynamic security feature progresses, a potential attacker will not recognize which part or state of the security feature in question in the last

Storage medium of the database was deposited. This will be a far higher

Security level reached, as it is the case with conventional, rigid security features.

Preferably, the security feature is a biometric

A security feature, preferably a fingerprint, a recorded voice profile of a human voice, the iris of an eye, an ear profile, a body fluid composition or other biometric feature that is unique to a particular individual. This feature can be converted into a dynamic security feature, for example, by changing the geometric profile or structure, surface, or other property that varies an internal or external factor continues to evolve in an unpredictable way.

It may be sufficient that only a part of the security feature evolves. Preferred embodiments provide that the security feature is a material, a device, a substance or a substance mixture or a physical or chemical property of a material, a device, a substance or a substance mixture, wherein at least one component between two

Polling times changed dynamically. The physical property may be, for example, the color or intensity of a substance. The coloring or the intensity can be effected by a dynamic factor, for example by reaction with atmospheric oxygen. In such an embodiment, the security feature could initially be in a protected form, for example, covered by a

Safety film. By peeling off the security film, the security feature is activated by reacting a substance with oxygen in the air, causing it to change. Preferably, the change takes place over a longer period of time, so that a dynamic state exists between several query times.

The security feature may in another variant also be a three-dimensional structure or a three-dimensional code having regions that dynamically change due to a dynamic factor while other regions in that structure or code remain unchanged.

Preferably, it is provided that the alteration of the static security feature into a dynamic security feature takes place physically, chemically, chemically, biologically, mechanically, magnetically or by behavior and that the change involves waxing, shrinking, supplementation, shortening, replacement, distortion, equalization , adding, removing, changing a physical value, converting or recalculating one or more elements or values whose properties or geometries comprise.

Preferably, a manifestation of the altered dynamic is

Security feature stored in a central or local storage means at the last successful polling time. In the next query, ie the next query time, or in the case of an increased security requirement, the deposited security feature with a newly transmitted security feature of the person to be authenticated, the object, the service system or the Computer program compared. The authentication and / or identification run / runs positive if the changed dynamic security feature and the transmitted security feature at least partially differ

The security feature can be stored in different forms in the storage means. In a preferred variant, the security feature can be converted before, during or after the change into a code or digital information and as such (r) deposited in a storage means. For example, a photograph or scan of a fingerprint may be converted to digital information. This digital information can in turn be distorted, leaving a dynamic

Safety information arises. Characteristic of this is that the change develops further and that at each polling time the security information stored in the storage means is replaced by the newly transmitted security information. The storage means used can be executed either centrally, locally or mobile and

Be part of a database.

The unchanged static security features and the changed dynamic security features are stored either directly or indirectly in a central and a local database, wherein the dynamic characteristics in at least one of the databases by a dynamic factor between two query times changed and the query time with that in the other Database

deposited dynamic security feature is compared.

In a preferred embodiment, the dynamic security features are not reversible, i. not reversible. Therefore, a potential attacker can not deduce a particular person, item, service system, or computer program based on the dynamic security feature. In another

However, embodiment may be provided that the dynamic

Security information can be converted back to the original static security information. This "reset" creates a new initial state. By choosing the reset time, additional security is created.

Preferably, the static security feature is in an initial state, in which the security feature does not change and then by a physical, chemical or mechanical influence in a dynamic

Security feature is activated. Examples of such influences are shown in the examples. The invention further relates to an authentication system for retrieving at least one security feature and a central and / or local storage means, in which the at least one security feature is stored, which consists of static and

dynamic security features, wherein the static security feature is associated with a person, an item or a service system. The dynamic security feature emerges from the static security feature and is physically, chemically, biologically, mechanically, magnetically or behaviorally changeable between two polling times.

Preferably, the security feature is a material, a

Apparatus, a substance or a mixture of substances or a physical or chemical property of a material, device, substance or mixture in which at least one component changes between two sampling times, the change being a growth, a shrinking, an extension, a

Shortening, replacement, distortion, equalization, addition, removal, alteration of a physical value, conversion or recalculation of one or more elements whose properties or geometries comprises.

Preferably, only the dynamic security feature is readable by the interrogator. For example, it may be provided that only a part of the original security feature is converted into a dynamic security feature, for example it can be provided that a protective coating conceals the dynamic security feature. Upon removal of the resist, the underlying layer activates and forms dynamic, continuously evolving structures that are separated from one another

Read-out device are scanned.

Preferably, only the dynamic security feature and not the rigid one

Security feature readable by the interrogator by the rigid

Security feature is coated with a protective layer, which does not allow scanning by the interrogator.

In one embodiment, it is possible to have another, purely digital, locally available dynamic security feature in the recalculation of the static or

dynamic security feature prior to its use. Such a digital security feature may be, for example, due to local circumstances be changing code. The method according to the invention is applicable to all rigid security features which can be converted or changed according to the invention via a dynamic factor into a dynamic, continuously changing security feature. The decisive factor is that the change takes place in a way that is not predictable for a potential counterfeiter and in which the product differs from the original state.

Ways of carrying out the invention and commercial utility: The invention is explained in more detail in the following examples.

In the embodiment shown in Fig. 1, a fingerprint is shown as a conventional rigid security feature. The individual structure of the fingerprint can be assigned to a specific person so that they can authenticate via a fingerprint scan. The invention is now based on this and provides that the static fingerprint is changed by a local factor in an unpredictable manner.

A first change provides for the appearance of the fingerprint to be split into a plurality of elements (e.g., two elements), with the two elements being translated. The distances b and c of the two halves of the security feature are determined by the dynamic factor. For example, the image file can be used as a local dynamic factor depending on the battery state of charge of a mobile phone in which the security feature is stored. Depending on the state of charge of the battery, the distances b and c of the fingerprint change. By changing b and / or c, the fingerprint as a formerly static security feature changes dynamically and becomes a dynamic security feature. In a further variant, the fingerprint can also be recalculated due to a locally dynamic factor, for example by

three-dimensional changes or distortions are made. In this case vectors can be provided which deliberately distort the individual levels of the appearance. This creates a new profile that does not have much to do with the original look of the fingerprint. This effectively prevents counterfeiting. In Fig. 2, an arbitrary three-dimensional structure is shown, which may represent, for example, a three-dimensional 3-D code. The 3-D code may be coded in an X, Y and Z direction. In this case, individual positions or spatial elements of the code can encode information within a plane. In addition, additional information can be encoded in the depth of the elements.

Known 3-D codes are statically formed, i. the profiles and structures do not change, as this would also cause the information encoded in it to be lost or changed. However, if certain information is used as security features in accordance with the invention, a dynamic change in the sense of the present invention is desired. It can be provided that only certain areas within the three-dimensional structure serve as a security feature, which change due to a dynamic factor, as described above by way of example. While a potential counterfeiter may find that a change is taking place, he does not know which laws or factors are based on that change. Also, the counterfeiter does not know which version of the feature to last

Polling time is stored in the storage means.

The change may be such that the structures change, at least in some areas, for example, by a displacement of a plane or a structural profile in the X, Y or Z direction. At the time of the query, the entire element or at least the safety-relevant subarea would be scanned and, after successful

Pre-authentication is transmitted to the authentication device. The

Authentication device checks whether a change compared to the last stored appearance has taken place. If there is a change and the other features match, the user is positively authenticated. The transmitted dynamic security feature is then stored as a new security feature in the storage means and serves as a reference for the next query. Fig. 2A shows the initial state of a 3-D code which is in a static form. In Fig. 2B, the structure of the 3-D code has partially changed. The

Changes can be seen, for example, in the cross-sectional view. 2C shows the initial state and FIG. 2D the dynamically changed state. FIG. 3 shows an example of a security element in which the dynamic state is generated starting from an unstructured surface. The interface can be activated to a dynamic security feature, for example by the surface is coated with a protective varnish, which protects the underlying surface from a change. When the resist is removed, the underlying surface changes. This change can be made, for example, by reaction with

Atmospheric oxygen are effected. For the individual query times, the respective development status of the dynamic pattern thus obtained is updated in the database.

In Fig. 3A, such a surface is coated with a protective varnish. After removing the protective varnish, the surface continues to develop, forming cracks, cavities or grooves in the surface, for example, which continue to evolve. This dynamic state is shown in Fig. 3B. The change of the surface of the

Security element can either be continuous or only when an authentication request is made. A scanning device, the surface of the material can be read and stored in a storage means. At the next query time, the surface has at least partially developed further, so that this current appearance of the security element can be stored in the storage means and serve as the basis for the next authentication.

In Fig. 4 is a flowchart of an embodiment of the invention

Shown method. For a request, a dynamic feature is regenerated from a static feature and the local, dynamic factor. For this purpose, a request is started, which is triggered locally, for example via a software. In this case a static factor is requested, for example a static, biometric feature. Upon request of a dynamic factor, the static biometric feature or parts thereof are converted or changed into a local, dynamic, unpredictable security feature. This creates a new dynamic security feature. The new dynamic security feature is used to authenticate to one

Authentification device transmitted, which for positive authentication forwards the request to a service provider. FIG. 5 shows a second variant of the method according to the invention. In this variant, a new dynamic material is generated from the last dynamic material and the local, dynamic factor. Here, too, a locally triggered request is made (eg via a software, app), whereby the existing dynamic feature is requested. Then, the request is made for the current dynamic factor, which alters the last dynamic feature, creating a new dynamic security feature. In this variant, the dynamic change only takes place with the query, ie the security feature does not have to be constantly dynamic change. The new dynamic security feature is then transmitted to the authentication device and, if the authentication is positive, the release is made to the service provider. FIG. 6 shows a third variant in which the new dynamic feature is generated from the last dynamic feature and the local dynamic factor.

In this case, the dynamic change of the security feature occurs continuously in

Background, regardless of the actual request. After the request is triggered, the dynamic feature is called and the state of the feature prevailing at that time is used as a new dynamic security feature. In contrast to the previously mentioned variant, the dynamic change of the security feature takes place permanently in the background, whereas in the second variant (FIG. 5) the change of the dynamic security feature takes place only during the request. This change is preferably triggered by the dynamic factor.

Claims

claims:

Method for authentication and / or identification of persons,

Objects, service systems or computer programs, in which one for the person, the subject, the service system or the

Computer program characteristic static, not changing

Security feature is created or used, which then changed by the influence of an unpredictable factor and thereby in a

dynamic security feature, comprising the steps of: a. Storing the static security feature in a storage means, b. Assign the static security feature or parts thereof to one

particular person, object, service system or computer program,

c. Transform, recalculate, or enable the static security feature or parts thereof by a dynamic, unpredictable, changing factor into a dynamic security feature, in which the entire

Security feature or part of it is changed from the original static security feature or part of it, d. Comparing the changed dynamic security feature or a part thereof with the static security feature stored in the storage means at a polling time,

wherein the person and / or the object and / or the service system and / or the computer program is / are positively authenticated when the dynamic security feature is opposite to that in the storage means

deposited static security feature by a dynamic factor

has changed at least partially between two query times, wherein the stored in the storage means static security feature the last

updated modified dynamic security feature of the last

Polling time corresponds.

2. The method according to claim 1, characterized in that it is in the

dynamic factor around a material property, the property of a device, or a physical or chemical parameter.

3. The method according to any one of the preceding claims, characterized in that it is the security feature is a biometric feature, preferably a fingerprint, a voice profile, the iris of an eye, an ear profile, a composition of a body fluid or other biometric feature, which unique to a particular person, object, service system or computer program.

4. The method according to any one of the preceding claims, characterized in that it is the security feature is a material, a device, a substance or a mixture of substances or a physical or chemical property of a material, a device, a substance or mixture of substances at at least one component dynamically changes between two polling times.

5. The method according to any one of the preceding claims, characterized in that it is the security feature to the digital image of a static or dynamic security feature and only this digital image between two query times due to a dynamic factor continues to change dynamically, without affecting to take on the original security feature.

A method according to any one of the preceding claims, characterized in that the security feature is a three-dimensional or three-dimensional code which has areas which dynamically change due to a dynamic factor, while other areas in that structure or the code of this dynamic factor remain unchanged.

7. The method according to any one of the preceding claims, characterized in that the change of the static security feature in a dynamic security feature is physically, chemically, biologically, mechanically, magnetically or behaving conditioned and that the change is a waxing, shrinking, a supplement, a shortening, an exchange, distortion, equalization, addition, removal, change in physical value, conversion or recalculation of one or more elements or values whose properties or geometries comprises.

8. The method according to any one of the preceding claims, characterized in that in each case an image of the modified dynamic security feature in a central or local storage means at the last successful

Polling time is deposited, which with a transmitted

Security feature of the person to be authenticated, the object, the service system or the computer program is compared in the next query, with an authentication and / or identification is positive if the changed dynamic security feature and the transmitted security feature at least partially different.

9. The method according to any one of the preceding claims, characterized in that the security feature before, during or after the change in a code or digital information converted and as such (r) in a

Storage medium is deposited.

10. The method according to any one of the preceding claims, characterized in that the unchanged static security features and the changed dynamic security features are stored directly or indirectly in a central and a local database, wherein the dynamic characteristics in at least one of the databases by a dynamic factor between change two query times and compared to the query time with the stored in the other database dynamic security feature.

1 1. Method according to one of the preceding claims, characterized in that the dynamic security feature is converted back to the original, unchanged static security feature.

12. The method according to any one of the preceding claims, characterized in that the static security feature is in an initial state in which the security feature is not changed and then activated by a physical, chemical or mechanical influence in a dynamic security feature.

An authentication system comprising an interrogator for retrieving

at least one security feature and one central and / or local one

Storage means in which the at least one security feature is deposited, which consists of static and dynamic security features, the static security feature of a person, an object, a

Associated with the service security system or a computer program, characterized in that the dynamic security feature emerges from the static security feature, wherein the security feature is a three-dimensional security feature in which areas within the three-dimensional structure of the security feature change due to a dynamic factor.

14. Authentication system according to claim 13, characterized in that the dynamic factor is a material property, the property of a device or a physical or chemical parameter.

15. Authentication system according to claim 13 or 14, characterized in that it is the security feature is a three-dimensional (3-D) code, wherein the structures by the dynamic factor, at least in some areas by a displacement of a plane or a structural profile change in X, Y or Z direction.