WO2013179265A1

WO2013179265A1 - Method and system for securing an original document

Info

Publication number: WO2013179265A1
Application number: PCT/IB2013/054495
Authority: WO
Inventors: Pietro RUGGIERO RUGGIERI
Original assignee: Flosec Sa
Priority date: 2012-05-31
Filing date: 2013-05-31
Publication date: 2013-12-05
Also published as: FR2991539A1

Abstract

The invention relates to a method for securing an original document, characterised in that the method comprises the following steps: applying first securing means to the original document and/or to an accompanying document separate from the original document, said securing means being determined on the basis of the content of the original document and comprising at least one element of encoded content illegible by humans and only decodable using a specific key; and applying second securing means to the original document and/or to the accompanying document, said second securing means irretrievably deteriorating when an attempt is made to remove them and being able to store information and interact with a reader in a non-contact manner, at least part of the encoded content being printed on at least part of the second securing means.

Description

METHOD AND SYSTEM FOR SECURING A DOCUMENT

ORIGINAL TECHNICAL FIELD OF THE INVENTION

The invention relates to a method of securing an original document. It also relates to a system for implementing the security method.

STATE OF THE PRIOR ART

Securing original documents is necessary in several areas, particularly in the customs field, the commercial field or in the administrative areas. Indeed, widespread counterfeiting or fraudulent practices, the use of forged or partially falsified documents in the context of commercial transactions or the market for false passports and false identity documents require the implementation of methods and systems to try to counter these practices. Thus, we know the case of so-called "biometric" passports whose use is currently developing in many countries. These passports, which are original documents, contain means of security which materialize in the form of a microchip which makes it possible to store information, such as a photo, fingerprints and / or the data relating to marital status. the owner of the passport. Thanks to these devices, these original documents become more difficult to falsify. Other areas require the securing of original documents, for example the securing of guarantee certificates, commercial documents used to authenticate goods or documents to ensure the traceability of products throughout the supply chain defined between the producer goods and the final consumer.

However, although methods and systems for securing original documents have developed recently, it appears that these known systems can not always fully guarantee the security of original documents. For example, it may be difficult to determine and ensure the authenticity of an original document. In the case of biometric passports, it is already known that some counterfeiters falsify the content stored in the microchip and thus succeed in circumventing the methods of securing these documents. Other security techniques such as encryption or coding techniques are also at the mercy of flaws that can allow more or less bypass the security barriers they impose. STATEMENT OF THE INVENTION

The invention aims to overcome the known drawbacks of security techniques of original documents and to propose a method for securing a more reliable original document. The method according to the invention makes it possible to secure an original document so that a recipient of this document can make sure, without the shadow of a doubt, of the authenticity of the content of an original document. The method according to the invention also makes it possible to facilitate the traceability of an original document along a distribution chain. It also makes it possible to manage the access rights of the users who are involved in the transfer or management of the original document. The invention makes it possible to provide a method for securing an original document that is more reliable and thus minimizes the risk of falsification of an original document. The invention also aims to provide a computer system for implementing these aspects.

To do this is proposed, according to a first aspect of the invention, a method of securing an original document comprising the following steps:

affix on the original document and / or on an accompanying document separate from the original document the first means of securing, determined using the content of the original document, comprising at least one coded content unreadable by a human and only decodable using a key specific;

-apply on the original document and / or the accompanying document second security means that deteriorate irretrievably when we try to remove and that are able to store information and interact with a contactless reader, to at least a portion of said coded content being printed on at least a portion of the second securing means. According to one embodiment, the method may comprise a step of affixing to the original document and / or the accompanying document third security means comprising a printed content or a handwritten signature using an ink containing a element having a specific wavelength.

According to one embodiment, the encoded content may contain a specific digital signature, using the specific key, based on the content of the original document.

[0009] Preferably, the coded content may make it possible, by using the specific key, to determine the content of the original document.

Advantageously, the specific key can be contained in the information stored in the second security means.

Preferably, the second security means may comprise at least one RFID tag. According to one embodiment, the encoded content may comprise at least one part in the form of a barcode.

Preferably, the original document may comprise one or more pages.

According to one embodiment, the original document may be a printed document.

Preferably, the method may comprise a step of scanning the original document.

Advantageously, the method may comprise a step of recording information in the second security means by means of a contactless reader. Preferably, the information stored in the second security means may include information to identify the original document.

According to one embodiment, the method may comprise a step of linking the accompanying document and the original document.

According to another aspect of the invention, it relates to a system for securing an original document comprising hardware and software for the implementation of the method according to one of the preceding claims.

BRIEF DESCRIPTION OF THE FIGURES

Other features and advantages of the invention will emerge on reading the description which follows, with reference to the appended figures:

[0021] - Figure 1 illustrates a secure original document using the security method according to the invention;

[0022] - Figure 2 illustrates certain components of a security system according to the invention for reading a secure document and reconstructing the content of the original document.

DETAILED DESCRIPTION OF THE INVENTION

In Figure 1 is illustrated a secure original document using the security method according to the invention. In the remainder of the description, the term "secure document" will be used to refer to an original document that is secured by using the security method according to the invention. In addition to the content of the original document, the secure document 1 includes a coded content 2 which contains the original document in its entirety and in its original format. The coded content 2 is unreadable by a human and allows, as will be described below, an integral reconstruction of the original document. It should be noted that in the following description of the present invention, "integral reconstruction" will be understood to mean a reconstruction of the content of the original document in the format of the original document. Thus, an "integral reconstruction" from coded content 2 allows you to reconstruct not only the content of the original document but also to present it in its original format.

A first step of the method according to the invention therefore consists in affixing the coded content to the original document. The author of the original document uses dedicated software that provides, among other things, access to the functionalities of a public key infrastructure. (Digital certificates, public / private keys, electronic signature, etc.) to generate the encoded content 2. The encoded content 2 is generated based on the entire content of the original document and is then directly included in the original document. The format of the original document is also taken into account to generate coded content 2.

Preferably, the step of affixing the coded content 2 on the original document is performed by requesting a specific key in addition to the digital signature on a website or a local server, a dedicated software determines the content of the document original and codifies it with an electronic signature. On this basis, the software calculates the coded content 2. The coded content 2 is then directly integrated into the original document as shown in FIG. However, instead of being directly embedded in the original document, coded content 2 may be included in an accompanying document separate from the original document. As will be described below, this accompanying document can advantageously be transferred alone to one or more recipients or it can be linked to the original document. Advantageously, the original document comprising the coded content 2, and / or the accompanying document, can then be printed so that it can be routed to its addressee (s). The coded content 2 may advantageously contain a digital signature determined on the basis of the content of the original document. Preferably, the coded content 2 may comprise at least one portion in the form of a barcode.

In order to verify the authenticity of the secure document, the encoded content 2 is preferably decodable by a recipient only if it has a specific key. In one embodiment, only one recipient is in possession of the specific key needed to decode the encoded content is therefore able to verify the authenticity and / or the content of the secure document. For this, the recipient can advantageously scan the secure document containing the coded content 2, or the accompanying document, and dedicated software running on a computer, tablet or smartphone can reconstruct the content of the original document on the basis of coded content 2. It is also conceivable for the recipient to simply take a photo of the secured document by means of a smartphone or a camera and that a dedicated software can decode the coded content 2 using the specific key and thus reconstruct the original document content. The recipient can then immediately verify that the reconstructed content corresponds to the content of the document before him. The recipient of an original document can thus know if the document is authentic. It will be possible through dedicated software to compare the content of the document with the content of coded 2 and detect any changes. In the case of highly confidential documents, only coded content 2 will be transmitted.

As illustrated in Figure 1, the secure document 1 further comprises second security means 3. Preferably, these second security means comprise one (or more) RFID tag 3 which is integrated with the original document. The second step of the security method according to the invention therefore consists in affixing to the original document second securing means, preferably an RFID tag 3. Information enabling the original document to be identified can advantageously be stored in the RFID tag. 3. This information may include data to identify the author of the original document, possible recipients or any other type of information that depends on the context in which the security method according to the invention is used. The RFID tag 3 may also contain an additional specific key needed to decode the coded content 2. Alternatively, the specific key may be recorded in a smart card made available to authorized users. The RFID tag 3 is designed to deteriorate irretrievably when attempting to remove it from the original document. As seen in Figure 1, at least a portion 3a of the RFID tag 3 is printed at least a portion of the coded content 2. Thus, the security method according to the invention allows a better security of the original document by combining the level of security provided by the coded content 2 and the level of security provided by the RFID tag 3. By printing at least a portion of the coded content 2 on the RFID tag, the possibilities for a forger to build a fake are restricted .

A recipient of the secure document 1 can therefore, by means of a contactless reader, read the information stored in the RFID tag 3 and thus determine whether this information is consistent with the expected information. To this end, a software on a website or a local server delivers on request to the recipient a decoding key, valid only once, which allows viewing the original document in its original format on a local station. A recipient can also, before transferring the document to another recipient, record information in the RFID tag 3. This information can advantageously ensure the traceability of the document throughout the document distribution chain.

Finally, the secure document 1 comprises third security means 4 which are in the form of printed content or handwritten signature. This content can be printed or handwritten using an ink whose hue has a specific wavelength or include a nanotechnology element for storing information. Advantageously, this element of nano technology can also validate the person who signed the document. A recipient of the document can then also verify the authenticity of the original document by relying on these third securing means and verifying that the wavelength of the hue corresponds to the expected wavelength. Dedicated hardware and software resources can also be used to read the information stored in the nanotechnology element and thus check whether this information corresponds to what is expected. An original secure document using the method according to the invention therefore comprises at least three security means that verify the authenticity of the document and facilitate the traceability of it. The combination of these various security means that encompass both hardware and software components thus provides a more reliable method of securing than known methods.

As has been described above, the security means can be directly integrated into the original document or they can be integrated into an accompanying document separate from the original document, or be a new document, strictly identical to the original document. original document but without the coded content 2 readable only by the defined people. This alternative makes it possible to manage various security aspects such as the authentication of the original document, the management of the rights of access to the content of the original document and / or the traceability of the routing of the original document along a transmission chain.

For example, in some cases where the disclosure of the information contained in the original document is not necessarily detrimental, it can be envisaged that it is the original document itself, secured using the security method according to the invention and thus comprising the three security means described above, or the original document related to the accompanying document comprising the three security means that is transmitted to the recipient. On the basis of these documents, the recipient can immediately check whether the information provided by the security means corresponds to the information visible on the original document. This makes it possible to verify the authenticity of the content of the secure document.

In another case, for example in the case where the disclosure of the contents of the original document is undesirable, it is possible that only the accompanying document is transmitted to the recipients. Thus, only the recipients holding the specific key necessary for the decoding of the coded content 2 can reconstruct and thus determine the content of the original document. In this case, the method of securing according to the invention also makes it possible to ensure that only authorized recipients can access the contents of the original document. This allows a certain way to manage the access rights to the contents of the original document by being sure that only the authorized recipients are able to determine it. According to another embodiment, it is also conceivable that the recipients are not necessarily holders of the specific key needed to decode the encoded content 2. The recipients must then identify with a centralized computer system so that it gives them the specific key that allows to reconstruct the original document based on the coded content 2. Only an authorized user of the centralized system can receive the specific key and thus reconstruct the contents of the original document. We can thus control the identity of recipients who want to access the content of the document. It is also possible to determine a chronology of access to the content of the original document and thus ensure the traceability in time and space of the path of the original secure document or the accompanying document along a distribution chain. These aspects can for example advantageously be used to ensure the traceability of products that accompany the secure document or the accompanying document along a distribution chain between the producer and the end consumer. The method and the security system according to the invention can advantageously apply in the context of a customs infrastructure and thus facilitate a more reliable authentication of travel documents. The method can also be applied in an administrative framework by providing means to reliably ensure the distribution of administrative documents (birth certificate, notarial deeds, etc.). This will prevent the use of certification bodies (eg apostille). The method according to the invention can also advantageously be applied in the context of commercial transactions by enabling authentication of the documents that accompany products along a distribution chain thus making it possible to ensure the traceability of products, to control who are recipients who are involved throughout the distribution chain, managing access to information, etc. The security method according to the invention may for this purpose advantageously be implemented by carriers, certification bodies, control bodies, administrations, etc.

The security method according to the invention advantageously secures any type of printed document comprising one or more pages. [0040] Figure 2 schematically illustrates the other aspect of the invention which relates to a system for implementing the security method as described above. The security system according to the invention comprises all the components of a distributed computer system comprising user interfaces (computer, tablet / PDA, smartphone) communicating by means of a computer network (for example the Internet), with one or more servers central offices that can store one or more databases.

The system according to the invention comprises in particular, at the level of sender / authors of original documents, hardware and software means for implementing certain steps of the method. These hardware and software means include, among others, scanners or other devices for determining the content of an original document, optical character recognition means, software interfaces for entering information, interfaces with one or more ) public key infrastructure (PKI), encryption means (digital signature, digital certificates, etc.), contactless read / write devices (RFID marker reader) and printing or writing means of third parties security means 4 possibly allowing to integrate therein one or more elements of nanotechnology.

At the recipient level, the hardware and software means allow a recipient to decode the encoded content if he is the holder of the specific key or to access remote computer services to identify the recipient and ensure the possible transfer of the elements necessary for the decoding of the coded content 2. These hardware and software means may also comprise dedicated terminals for reading and / or writing information stored in the second security means (for example RFID tag readers), hardware and software to determine whether the wavelength of the hue of the ink used to print the contents of the third security means 4 corresponds to the expected wavelength or to read the information contained in the nanotechnology element. The method and the security system according to the invention are applicable in the context of commercial transactions, in the context of customs infrastructure, administrative, etc..

Claims

1. Method for securing an original document, characterized in that the method comprises the following steps:

- affix on the original document and / or on an accompanying document separate from the original document the first means of securing, determined using the content of the original document, comprising at least one coded content unreadable by a human and only decodable using a specific key;

- affix on the original document and / or on the accompanying document second security means that deteriorate irretrievably when we try to remove them and are able to store information and interact with a contactless reader,

characterized in that at least a portion of said encoded content is printed on at least a portion of the second securing means.

2. Method according to claim 1, characterized in that the method comprises a step of affixing on the original document and / or the accompanying document third security means comprising a printed content or a handwritten signature using an ink containing an element having a specific wavelength.

3. Method according to one of the preceding claims, characterized in that the encoded content contains a digital signature determined on the basis of the content of the original document using the specific key.

4. Method according to one of the preceding claims, characterized in that the encoded content allows, using the specific key, to determine the content and / or format of the original document.

5. Method according to one of the preceding claims, characterized in that the specific key is contained in the information stored in the second security means.

6. Method according to one of the preceding claims, characterized in that the second security means comprise at least one RFID tag.

7. Method according to one of the preceding claims, characterized in that the coded content comprises at least a portion in the form of a bar code.

8. Method according to one of the preceding claims, characterized in that the original document comprises one or more pages.

9. Method according to one of the preceding claims, characterized in that the original document is a printed document.

10. Method according to one of the preceding claims, characterized in that the method comprises a step of scanning the original document.

1 1. Method according to one of the preceding claims, characterized in that the method comprises a step of recording information in the second securing means by means of a contactless reader.

12. Method according to one of the preceding claims, characterized in that the information stored in the second securing means comprise information for identifying the original document.

13. Method according to one of the preceding claims, characterized in that the method comprises a step of linking the accompanying document and the original document.

14. System for securing an original document, characterized in that the system comprises hardware and software means for implementing the method according to one of the preceding claims.