Patent Application
20160358298
This document generally relates to digital watermark.
Digital watermarking may be used on identification documents, such as digital identification documents, as a security feature to prevent fraud.
In one aspect, some implementations provide a computer-assisted method for applying at least two digital watermarks to a digital document. The method includes: receiving a digital document comprising visual contents; generating a first digital watermark to be visually presented at a first time point; generating a second digital watermark to be visually presented at a second time point, the second digital watermark being different from the first digital watermark and the second time point being different from the first time point; and applying both the first digital watermark and second digital watermark to the digital document to provide validation of the digital document.
Implementations may include one or more of the following features. The method may further include applying both the first digital watermark and the second digital watermark to form a sequence of digital watermarks capable of providing validation of the digital document. The method may also include: applying the first digital watermark and second digital watermark to the digital document to provide authentication of a person holding the digital document. The method may additionally include: linking the sequence of digital watermarks to an entity issuing the digital document. The method may further additionally include: configuring the sequence of digital watermarks such that the sequence of digital watermarks identify a person holding the digital document.
The method may further include generating a third digital watermark to be visually presented at a third time point, the third digital watermark being different from the first and second digital watermark, and the third time point being different from the first and second digital watermark.
The method may further include applying the first digital watermark such that the first digital watermark is visually presented intermittently according to a first temporal pattern. The method may additionally include configuring the first temporal pattern to encode information linking an entity issuing the digital document with at least two digital watermarks. The method may further include configuring the first temporal pattern to encode information linking a person holding the generated digital document with at least two digital watermarks. The method may additionally further include applying the second digital watermark such that the second digital watermark is visually presented intermittently according to a second temporal pattern. The method may further additionally include configuring the second temporal pattern to encode information linking an entity issuing the digital document with at least two digital watermarks. The method may also additionally include configuring the second temporal pattern to encode information linking a person holding the generated digital document with at least two digital watermarks.
The method may further include applying the first digital watermark and the second digital watermark to the digital document such that the first time point differs from the second time point by an mount shorter than a retina dwell time.
Generating the first digital watermark may further include generating the first digital watermark to encode information correlatable with data encoded by the second digital watermark. Generating the second digital watermark further include generating the second digital watermark to encode information correlatable with data encoded by the first digital watermark.
In another aspect, some implementations provide a a system for digitizing an identification document, the system comprising at least one computer processor configured to perform the operations of: receiving a digital document comprising visual contents; generating a first digital watermark to be visually presented at a first time point; generating a second digital watermark to be visually presented at a second time point, the second digital watermark being different from the first digital watermark and the second time point being different from the first time point; and applying both the first digital watermark and second digital watermark to the digital document to provide validation of the digital document.
Implementations may include one or more of the following features. The operations may further include applying both the first digital watermark and the second digital watermark to form a sequence of digital watermarks capable of providing validation of the digital document. The operations may additionally include applying the first digital watermark and second digital watermark to the digital document to provide authentication of a person holding the digital document. The operations may further additionally include linking the sequence of digital watermarks to an entity issuing the digital document. The operations may additionally further include configuring the sequence of digital watermarks such that the sequence of digital watermarks identifies a person holding the digital document.
The operations may additionally include generating a third digital watermark to be visually presented at a third time point, the third digital watermark being different from the first and second digital watermark, and the third time point being different from the first and second digital watermark.
The operations may further include applying the first digital watermark such that the first digital watermark is visually presented intermittently according to a first temporal pattern. The operations may additionally include configuring the first temporal pattern to encode information linking an entity issuing the digital document with at least two digital watermarks. The operations may further include configuring the first temporal pattern to encode information linking a person holding the generated digital document with at least two digital watermarks.
The operations may further include applying the second digital watermark such that the second digital watermark is visually presented intermittently according to a second temporal pattern. The operations may further include configuring the second temporal pattern to encode information linking an entity issuing the digital document with at least two digital watermarks. The operations may further include configuring the second temporal pattern to encode information linking a person holding the generated digital document with at least two digital watermarks. The operations further include applying the first digital watermark and the second digital watermark to the digital document such that the first time point differs from the second time point by an mount shorter than a retina dwell time.
Generating the first digital watermark may further include generating the first digital watermark to encode information correlatable with data encoded by the second digital watermark. Generating the second digital watermark may further include generating the second digital watermark to encode information correlatable with data encoded by the first digital watermark.
In yet another aspect, some implementations provide a computer-readable medium, comprising software instructions that, when executed by a processor, causes the processor to perform the operations of: receiving a digital document comprising visual contents; generating a first digital watermark to be visually presented at a first time point; generating a second digital watermark to be visually presented at a second time point, the second digital watermark being different from the first digital watermark and the second time point being different from the first time point; and applying both the first digital watermark and second digital watermark to the digital document to provide validation of the digital document.]
In still another aspect, some implementations provide a computer-implemented method for validating a digital document, the method including: receiving, at a mobile device, the digital document comprising at least two digital watermarks, the digital document issued by a central entity; retrieving a first digital watermark from the digital document, the first digital watermark visually presented at a first time point; retrieving a second digital watermark from the digital document, the second digital watermark visually presented at a second time point, the second digital watermark being different from the first digital watermark and the second time point being different from the first time point; and validating the digital document based on the retrieved first and second digital watermarks.
Implementations may include one or more of the following features. Validating the digital document may further include: retrieving a sequence of digital watermarks comprising the first digital watermark and the second digital watermark, wherein the sequence of digital watermarks is capable of validating that the digital document is authentic. Retrieving the sequence of digital watermarks may include retrieving a sequence of digital watermarks comprising the first digital watermark, the second digital watermark, and a third digital watermark, the third digital watermark being different from the first digital watermark and the second digital watermark. The method may further include analyzing the sequence of digital watermarks to confirm that the digital document is issued by the central entity. The method may additionally include: analyzing the sequence of digital watermarks to confirm that a person holding the digital document is the person identified by the sequence of digital watermarks.
The method may further include detecting a first temporal pattern in which the first digital watermark is visually presented intermittently. The method may additionally include: decoding, from the first temporal pattern, information linking an entity who has generated the digital document; and determining whether the linked entity is the central entity. The method may further include decoding, from the first temporal pattern, information linking a holder of the digital document; and determining whether the linked holder is the person presenting the digital document.
The method may further include detecting a second temporal pattern in which the second digital watermark is visually presented intermittently. The method may additionally include decoding, from the second temporal pattern, information linking an entity who has generated the digital document; and determining whether the linked entity is the central entity. The method may further include decoding, from the second temporal pattern, information linking a holder of the digital document; and determining whether the linked holder is the person presenting the digital document.
The method may further include extracting information from the first digital watermark, the information correlatable with data encoded by the second digital watermark; correlating the extracted information with data encoded by the second digital watermark; and determining whether the digital document is authentic based on the correlation results.
The method may further include extracting information from the second digital watermark, the information correlable with data encoded by the first digital watermark; correlating the extracted information with data encoded by the first digital watermark; and determining whether the digital document is authentic based on the correlation results.
In yet still another aspect, some implementations provide a mobile computing device for authenticating a person, the mobile computing device comprising at least one processor configured to perform operations comprising: receiving, at a mobile device, the digital document comprising at least two digital watermarks, the digital document issued by a central entity; retrieving a first digital watermark from the digital document, the first digital watermark visually presented at a first time point; retrieving a second digital watermark from the digital document, the second digital watermark visually presented at a second time point, the second digital watermark being different from the first digital watermark and the second time point being different from the first time point; and validating the digital document based on the retrieved first and second digital watermarks.
Implementations may include one or more of the following features. Validating the digital document may further include retrieving a sequence of digital watermarks comprising the first digital watermark and the second digital watermark, wherein the sequence of digital watermarks is capable of validating that the digital document is authentic. Retrieving the sequence of digital watermarks may include retrieving a sequence of digital watermarks comprising the first digital watermark, the second digital watermark, and a third digital watermark, the third digital watermark being different from the first digital watermark and the second digital watermark.
The operations may further include analyzing the sequence of digital watermarks to confirm that the digital document is issued by the central entity. The operations may additionally include analyzing the sequence of digital watermarks to confirm that a person holding the digital document is the person identified by the sequence of digital watermarks. The operations may additionally include detecting a first temporal pattern in which the first digital watermark is visually presented intermittently. The operations may further include decoding, from the first temporal pattern, information linking an entity who has generated the digital document; and determining whether the linked entity is the central entity. The operations may further include decoding, from the first temporal pattern, information linking a holder of the digital document; and determining whether the linked holder is the person presenting the digital document.
The operations may further include detecting a second temporal pattern in which the second digital watermark is visually presented intermittently. The operations may further include: decoding, from the second temporal pattern, information linking an entity who has generated the digital document; and determining whether the linked entity is the central entity. The operations may further include decoding, from the second temporal pattern, information linking a holder of the digital document; and determining whether the linked holder is the person presenting the digital document.
The operations may additionally include extracting information from the first digital watermark, the information correlatable with data encoded by the second digital watermark; correlating the extracted information with data encoded by the second digital watermark; and determining whether the digital document is authentic based on the correlation results.
In yet another aspect, some implementations may provide a computer-readable medium, comprising software instructions that, when executed by a computer processor, causes the computer processor to perform the operations of: receiving, at a mobile device, the digital document comprising at least two digital watermarks, the digital document issued by a central entity; retrieving a first digital watermark from the digital document, the first digital watermark visually presented at a first time point; retrieving a second digital watermark from the digital document, the second digital watermark visually presented at a second time point, the second digital watermark being different from the first digital watermark and the second time point being different from the first time point; and validating the digital document based on the retrieved first and second digital watermarks.
Implementations of the above techniques include a method, computer program product and a system. The computer program product is suitably embodied in a non-transitory machine-readable medium and includes instructions executable by one or more processors. The instructions are configured to cause the one or more processors to perform the above described actions.
The system includes one or more processors and instructions embedded in a non-transitory machine-readable medium that are executable by the one or more processors. The instructions, when executed, are configured to cause the one or more processors to perform the above described actions. The default position is not to use any external databases, but the system could be configured to perform a database check if needed.
The details of one or more aspects of the subject matter described in this specification are set forth in the accompanying drawings and the description below. Other features, aspects, and advantages of the subject matter will become apparent from the description, the drawings, and the claims.
Like reference symbols in the various drawings indicate like elements.
Digital watermarks may be embedded in a digital document as a security feature. Two or more digital watermarks may be embedded in a digital document and the digital watermarks may be presented at different times, thus providing a sequence of digital watermarks. The sequence of digital watermarks may provide validation that a digital document is authentic. In some implementations, the sequence of digital watermarks may provide a “video signature” linking the digital document to the entity that has generated the digital document. In other implementations, the digital watermarks may be presented intermittently according to respective temporal patterns. The respective temporal patterns may encode information in addition to the payload data of each digital watermark. The encoded information may be linked to either the entity that has generated the digital document or the person holding the digital document.
Portrait 102 may include a facial portrait of the holder of the identification document. The facial portrait may identify the person holding the identification document. The facial portrait may be 2×2 in and showing the front face of the holder. In some implementations, portrait 102 may include a facial biometric of the document holder. In some implementations, portrait 102 may manifest as other forms of biometrics, such as, for example, a finger-print, a palm-print, a retina scan, a iris scan, a pupil scan, etc.
Personally identifiable information 104 may include name (including full name, first name, last name, middle/initials), residential address, gender, nationality, occupation, marital status, eye color, hair color, blood type etc. Personally identifiable information 104 may also include numerical terms such as date of birth, height, weight, election zone, document number, issue date, etc. Portions of personally identifiable information may be printed on the identification document.
Identification document 100 may be verified by reader 106. Reader 106 may represent a human inspector, for example, a cashier at a liquor store, a security guard at a building, etc. In some implementations, the human inspector may be assisted by a reader device. The identification document may be analyzed by reader 106 to verify that (i) the identification document is authentic and has not been forged or altered; (ii) the person presenting the identification document is the person identified by the identification document.
To prove the source of an identification document, digital watermark(s) may be embedded into an identification document. Additionally, digital watermark(s) may carry personally identifiable information about the holder. Thus, digital watermark(s) can be used on an identification document to authenticate the identification document and carry information about the identity of the holder
Digital watermark(s) may be secure, covert and machine-readable. Digital watermark(s) may be generally imperceptible to naked eyes. In fact, digital watermark(s) may generally appear as noise, for example, added to a background noise. However, altering a digital watermark may be virtually impossible, and the mere lack of presence of a digital watermark can immediately indicate tampering and likely counterfeiting. Hence, digital watermark(s) used in an identification document may provide strong and effective deterrence to counterfeit.
To validate an identification document, steganography may analyze the digital watermark to identify the source and reveal the information identifying the holder. In some implementations, data contents encoded by the digital watermarks may be encrypted so that the encoded data contents may remain secure, as an additional security mechanism. Such encrypted data contents may be decrypted first. In some implementations, the digital watermark may be initially analyzed to extract frequency domain information. The frequency domain information may include spectrum information manifested by, for example, the digital cosine transforms (DCT) coefficients in a particular spatial frequency range. In contrast to spatial domain information, such frequency domain information may be robust to cropping or translation of the original document. Hence, the frequency domain information may be more tamper-proof and more resilient to artifacts during field use. Likewise, mixed-domain information, i.e., information from both spatial domain and frequency domain may provide similar degree of robustness against tampering and artifacts. However, the implementations disclosed herein are not limited to the use of frequency domain information alone or the use of mixed-domain information. Spatial domain information may be used according to the same scheme as disclosed herein.
On the same identification document, a spatial chrominance distribution associated with a second digital watermark may be modulated (204). The chrominance pattern may refer to a color map. Color maps may be indexed in a multi-dimensional color space. For example, an RGB space may be based on the primary colors of red, green, and blue. An example color space may also be based on the three primary colors of cyan, magenta, and yellow. In some implementations, the chrominance pattern may also use a color map indexed by two components, for example, based on the U and V components of the YUV model, or based on the Cb and Cr components of the YCbCr model, or based on the Pb and Pr components of the YPbPr model. The encoded information may manifest as color smear patterns showing numbers, alphabetical letters, or symbols. The encoded information may appear as color aberration noise unperceivable to naked eyes. Similar to the first digital watermark with modulated spatial luminance pattern, the second modulated spatial chrominance distribution may carry encrypted information.
In some implementations, the first digital watermark with the modulated spatial luminance pattern and the second digital watermark with the modulated spatial chrominance distribution may be applied to the same identification document (206). The two digital watermarks may be applied to different sides of the identification document, for example, the front and back of a driver license, front and back of any given page of a passport, etc. The two digital watermarks may be applied to different regions on the same side of the identification document. The two regions where each digital watermark has been applied may share a common region. The two digital watermarks may also be applied to the same region on the same side of the identification document. The two digital watermarks may be applied to different grating structures underneath the same page of the identification document such that only one digital watermark is detectable from a given viewing angle or a particular viewing direction. In other words, detection of the given digital watermark may be viewing-angle dependent or viewing-direction dependent.
The first digital watermark with luminance modulations and the second digital watermark with chrominance modulations may encode a common piece of information based on which the two digital watermarks may mutually authenticate each other. The process may be known as a cross-correlation. To cross-correlate the information encoded by the two digital watermarks, a correlatable portion of information may be determined for the correlation purpose. The determination may take place when the digital watermarks are being applied to the identification document. The digital watermarks on an identification document may encode information identifying the issuing entity, such as, for example, the DMV, the state department, the employer. The digital watermarks on an identification document may encode personally identifiable information about the holder of the identification document. As discussed above, personally identifiable information may include name (including full name, first name, last name, middle/initials), date of birth, height, weight, residential address, gender, nationality, occupation, marital status, eye color, hair color, blood type election zone, document number, issue date, etc.
The digital watermark with luminance modulation and the digital watermark with chrominance modulation may be applied to the same identification document. The two distinct digital watermarking mechanisms may be applied either a physical identification document or a digital identification document.
To valid the identification document, the two digital watermarks may be analyzed and the information encoded by each digital watermark may be compared against each other.
The match may not be perfect. In some implementations, for example, the frequency domain information encoded by the two digital watermarks may be incomplete due to losses in the scanning process. In some implementations, the degree of match may depend on the context of the application. For example, for applications involving mobile transactions with a financial sum of under $500, a lower degree of match level may be sufficient. While for applications involving accessing high security facilities such as nuclear plant to military installation, a higher degree of match may be adopted. In some implementations, the matching process may depend on jurisdiction. For example, in some states which adopted a less sophisticated digital watermark, a more primitive match procedure may be performed. Even in states that have adopted a more sophisticated digital watermark, a legacy digital identification document may still use the old and less sophisticated digital watermarking. The legacy identification document may still be honored by a more primitive matching procedure. In some implementations, ascertaining whether there is a substantial match may further factor in usage history of the holder of the identification document. For example, if the person requesting access at the building has frequently gained access to the building in the past, then the degree of match may be lessened to simplify the process. In a similar vein, a trusted visitor database can be set up to track such visitors and potentially speed up the validation process.
If substantial match has been found between the encoded data from the first and second portions of identification document, then the authenticity of the identification document may be confirmed (324). Conversely, if substantial match has not been found between the encoded data from the first and second portions of identification document, then the authenticity of the identification document may not be confirmed. In some implementations, the holder of the identification document may be alerted if the authenticity of the identification document cannot be established. The alert may sent through email, automatic voicemail, short message service (SMS) message, etc., to a registered account of the holder of the identification document.
The server may compare the received personally identifiable information with a record stored in the database. In comparing the received personally identifiable information against the database, the server may implement different levels of matching depending on the context of the application, as discussed above. If an adequate match has been identified, the server may notify the scanning device of the match. If, however, no adequate match can be identified, the server may alert the scanning device of the lack of match. Therefore, the scanning device may receive validation results from the server (334), according to some implementations.
In some implementations, the digital watermark(s) may be combined with a digital biometric to provide a digital identification document for secure authentication.
Characteristics may be extracted from the digital biometric (404). For example, a facial recognition software may extract facial characteristics from a digital portrait of the subject. In some implementations, an analytical algorithm may extract characteristics from a finger-print, for example, by decomposing the finger-print pattern into principal components (also known as singular value decomposition). In some implementations, an analytic algorithm may extract characteristics from a finger-print based on coefficients from edge preserving transformations such as wavelet transforms, Hough transforms, etc. Similar analytical algorithms may be applied to extract characteristics from a palm-print, an iris pattern, a retina pattern, a pupil pattern, etc.
The extracted characteristics may serve as a compressed representation of the digital biometric. The extracted characteristics may then be stored at a searchable database (406). Using the extracted characteristics, rather than the full digital biometric may reduce storage space requirement or enhance search speed. In some implementations, the extracted characteristics may be stored at a central server managed by the entity issuing the identification document. In some implementations, a copy of the extracted characteristics may be stored on a mobile device of the subject, i.e., the person from whom the digital biometric was taken.
Next, a digital watermark may be applied to the digital biometric of the subject (408). In some implementations, the digital watermark may be applied to an area other than the digital biometric on the digital identification document. The digital watermark may be applied to encode any number, letter, or symbology in accordance with the description herein. In some implementations, digital watermarks including both luminance and chrominance modulations may be applied, as described above. In some implementations, the encoded information may be encrypted, as disclosed above. In some implementations, the digital watermarks may encode personally identifiable information of the subject. As discussed herein, the personally identifiable information may include name (including full name, first name, last name, middle/initials), date of birth, height, weight, residential address, gender, nationality, occupation, marital status, eye color, hair color, blood type election zone, document number, issue date, etc. In some implementations, the digital watermarks may encode information indicating the source or the issuing entity of the digital identification document.
Thereafter, a digital identification document may be issued (410). The digital identification document may include both the digital biometric and the digital watermark. In some implementations, the digital identification document may include a digitally watermarked digital biometric. The digital identification document may be issued to a mobile device of the subject. Example mobile devices may include smart phones, such as, for example, an iPhone, a Samsung smart phone, a HTC smart phone, an Android smart phone, a Windows smart phone, etc. In addition, mobile device may include a tablet device, for example, an iPad, a Samsung Note device, a Microsoft touch device, etc. Further, mobile device may also include a laptop device, or even a desktop computer at home. The digital identification document may be issued in the form of a digital file stored on the mobile device.
A digital identification document can lead to increased ease in document renewal or replacement.
Similar ease may be observed in the replacement process (for example, when the subject lost the digital identification document due to storage failure).
Likewise, revocation or suspension of a digital identification document may be accomplished without a physical trip to the issuing entity or the destruction of a physical document. In some implementations, a revocation request may be submitted on-line to a server at the issuing entity. After verifying the revocation request, the server may revoke the digital identification document by removing the digital identification document from the storage medium on the mobile device of the document holder. In some implementations, the server may issue a revoked digital identification document to over-write the original digital identification document. In so doing, the server may keep a version number of the digital identification document issued. The version number may be checked when the holder attempts to validate the digital identification document on the holder's mobile device.
Once the reading device receives the digital identification document, both the digital biometric (502) and the digital watermark (512) may be received at the reading device. The reading device may retrieve a first portion of personally identifiable information associated with the digital biometric (504). In some implementations, characteristics may be extracted from the digital biometric. As described above, these characteristics may include, for example, principal component values from a singular value decomposition, wavelet coefficients from a wavelet transform, etc. In some implementations, the extracted characteristics may be generated by facial recognition software on the reading device. In some implementations, the extracted characteristics may be compared against a searchable database at the point of service. In some implementations, the extracted characteristics may be transmitted to a central server. Referring to
Returning to
To prove identity at a point of service, a digitally watermarked portrait may be used a personalized QR code in some implementations.
Thereafter, at least one digital watermark may be applied to the digital facial portrait of the subject (408). The applied digital watermark may identify payload data associated with the subject. In some implementations, a digital watermark may be applied to carry payload data encoding a portion of personally identifiable information of the subject. For example, the digital watermark may include modulated Moire's pattern to carry the payload data. In some implementations, the digital watermark may be linked to personally identifiable information. For example, the digital watermark may include symbology marks identifying the subject being portrayed. In some implementations, digital watermarks including both luminance and chrominance modulations may be applied, as described above. In some implementations, the encoded information may be encrypted, as disclosed above. As discussed herein, the personally identifiable information may include name (including full name, first name, last name, middle/initials), date of birth, height, weight, residential address, gender, nationality, occupation, marital status, eye color, hair color, blood type election zone, document number, issue date, etc. In some implementations, the digital watermarks may encode information indicating the source or the issuing entity of the digital identification document.
Subsequently, the digitally watermarked digital portrait may be issued as a machine-readable code (606). In some implementations, the digitally watermarked digital portrait may be issued to a mobile device of the subject, for example, in the form of a digital file stored on the mobile device, as discussed above.
The digitally watermarked digital portrait may lead to increased ease in document management.
Similar ease may be observed in the replacement process of the digitally watermarked digital portrait.
The digitally watermarked digital portrait may be displayed on, for example, a touch screen of the mobile device.
In some implementations, the entire inspection may be performed by a reading device. The reading device may be any computing device with a processor and a transceiver as a data communications interface. The digitally watermarked digital portrait may be received at a reading device (702). For example, the reading device may receive the digitally watermarked digital portrait by scanning the touch screen of a mobile device. The reading device may receive the digitally watermarked digital portrait via a communication link so that data encoding the digitally watermarked digital portrait may be transmitted to the reading device. The transmission of the data encoding the digital identification document may be wireless. In other words, the digital identification document may be beamed to the reading device. Thus, the reading device may obtain data encoding the digitally watermarked digital portrait (704). In some implementations, the reading device may be configured to take a photo portrait of the presenter and then automatically compare the photo portrait with the digital portrait using facial recognition. The reading device may then receive results of comparison between the digital facial portrait and the presenter (706). The results may indicate whether the digital facial portrait matches the presenter (708). If the digital facial portrait does not match the presenter, the reading device may provide instructions to the human inspector to reject all identity claims by the presenter (710). If the digital facial portrait matches the presenter, the reading device may then confirm the presenter as the holder of the digitally watermarked digital portrait (712).
The reading device may then retrieve payload data from the digital watermark (714) in accordance with descriptions herein. The reading device may then receive results of verifying the contents of the payload data (716). As discussed above, the verification may include correlating two portions of personally identifiable information encoded by respective digital watermarks. The respective digital watermarks may incorporate separate modulation mechanism including luminance and chrominance. In some implementations, the verification may include correlating the personally identifiable information extracted from the digital watermark with records at a searchable database on a server.
Referring to
Returning to
Digital document 802 may be presented on a mobile computing device of a user. For example,
Digital document 802 may include two digital watermarks 804 and 806. In one configuration, digital watermarks 804 and 806 may both include modulations of spatial luminance patterns. In another configuration, digital watermarks 804 and 806 may both include modulations of spatial chrominance distributions. In yet another configuration, digital watermarks 804 may include either a modulation of spatial luminance pattern or spatial chrominance distribution while digital watermark 806 may include the other. In still another configuration, digital watermarks 804 and 806 may be embedded at different locations on the digital document but may be linked to identical payload data. In yet still another configuration, digital document 802 may include more than two different digital watermarks. The additional digital watermark may be embedded on digital document 802 in a manner consistent with the descriptions herein.
Notably, the temporal dimension associated with the digital watermarks embedded in digital document 802 may serve as a basis to validate the authenticity of digital document 802. In some implementations, the digital watermarks may be inspected to validate that the digital document was indeed from a central entity that purportedly generated the digital document. In some implementations, the digital watermarks may be used for identification purposes. For example, in one configuration, the visual contents of the digital document may identify the person who holds the digital document. As discussed herein, such digital documents may include, but are not limited to, a digital driver license, a digital passport, a digital identification card, a digital facial portrait, etc. If the authenticity of the digital document can be validated based on the temporal pattern associated with the embedded digital watermarks, then the identity of the holder may be determined by comparing the visual contents of the digital document to the person presenting the digital document.
In certain implementations, the digital watermarks may carry payload data that identifies the person holding the digital document. In one configuration, the payload data may include personally identifiable information pointing to the holder of the digital document. The personally identifiable information may be extracted and then compared to verify the identity of the presenter. The extracted personally identifiable information may also be transmitted to a central server for confirmation. In another configuration, the payload data may also include biometric data that identifies the holder of the digital document. Such biometric data may be extracted and compared with the biometric data of the person presenting the digital document. The extracted biometric data may be transmitted to a central server where the comparison may be conducted. The presenter's identity may be established by an affirmative result of the comparison.
Once the two digital watermarks are generated, the server may apply the two digital watermarks to the digital document to provide validation of the digital document (908). In some implementations, the digital watermarks may be embedded in the background of the digital document, e.g., a digital identification document. The digital watermarks may be imperceptible to naked eyes inspecting the digital document without instrumentations. The digital watermarks also may be visible to naked eyes without further assistance from instrumentations. In some implementations, the digital watermark may appear as additive noise of the discrete cosine transform coefficients (DCT) that encodes the digital identification document. Alternatively or in addition, the digital watermarks may be embedded in data associated with the digital document. The digital watermarks may be embedded in the meta data that describes the digital document. The digital watermarks also may be embedded in a control frame, e.g., the synchronization frame, of a digital video clip. As discussed herein, the embedded digital watermarks may be extracted, and the digital document may be validated based on the extracted digital watermarks.
In some implementations, the digital watermarks may be flashed and the flash trajectory on the digital document 802 may be linked to either the entity that generated the digital document or the person holding the digital document. In one configuration, the flash trajectory may represent the acronym of the organization or the initials of the person holding the digital document. In another configuration, the digital watermarks may encode one symbol and the flashing manner may convey a motion of the same symbol, for example, a rotating motion, a spiraling motion, a dilating motion, a contracting motion, etc. Hence, the sequence of the flashed digital watermarks may become a “video signature” linking the entity that has generated the digital document or the person holding the digital document.
In one configuration, the flash rate may be slow and the gap between the respective presentation time points of each digital watermark may be longer than the dwell time of sensory cells on the human retina. The retina dwell time correspond to the time period that a visual stimulus may reside on the sensory cells in the fovea area in the retina. When the gap time is larger than the dwell time, the later flashes may be distinguished from the earlier flashes and the flash trajectory may be visualized by naked eyes without further instrumentation.
In another configuration the flash rate may be fast and the gap time may be shorter than the dwell time. In such a configuration, the digital watermarks may appear, to the naked eye, as being on continuous display. However, an instrument, such as a video camera with an adequate frame rate, may reveal the temporal sequence in which the digital watermarks are presented. The temporal patterns according to which the digital watermarks are displayed may encode additional information capable of authenticating or validating digital document 802.
The timing diagrams as shown above may encode information in addition to the payload data of the digital watermarks. In some implementations, such additional information may be encoded by digital phase-shift keying (DPSK) techniques. In one configuration, the phase may be determined by the display duration of a particular digital watermark. In another configuration, the rising or falling edges of the presentation window may determine the encoded phase. In some implementations, the encoding scheme may employ a binary phase-shifting keying (BPSK) in which only two states are encoded (on display and not on display). In other implementations, the encoding scheme may use a quadrature phase-shifting keying (QPSK) in which four states may be encoded. The additional keying states may be derived from added states of the presentation timing diagram of one digital watermark. The additional states also may include the combination of states from the presentation timing diagram of other digital watermarks. Hence, the information may be encoded in the temporal presentation sequence of the digital watermarks using any existing or yet to be developed digital communication coding techniques.
Although the timing diagrams correspond to a presentation scheme in which a particular digital watermark is either shown or not shown, some implementations may present the particular digital watermark with varying display intensities at various presentation times. Thus, in these implementations with intensity variations, amplitude modulation may be employed to encode information in addition to the payload data of the particular digital watermark.
When two digital watermarks are embedded on one digital document, the payload data associated with one particular digital watermark may include integrity check information for the other digital watermark. Moreover, the payload data associated with the other digital watermark may include integrity check information for the particular digital watermark. The integrity check information may include, for example, a hash, a check-sum, a cyclic redundancy code (CRC), etc. As discussed herein, the cross-check feature may provide the same additional security mechanism against tampering with or alteration of the digital document (including the embedded digital watermarks).
The digital watermarks may be applied to a digital document, which may then be issued to a user on his/her mobile device, for example, an iPhone. At a point of service, the digital document may be displayed on the touch-screen display of the mobile device.
In some implementations, the decoded security check information may be transmitted to a remote central server for verification (1014). The verification results may be received from the remote central server (1016). In other implementations, the verification may be performed locally and without transmitting the security check information to the remote central server. The validity of the digital document, or the identity of the holder, may be determined based on the verification results.
Reading device may include processor 1104 configured to validate the identification document or the digital portrait in accordance with the descriptions above. For example, processor 1104 may be configured to implement facial recognition algorithms to extract characteristics from the portrait on the identification document. Processor 1104 may be configured to implement feature recognition algorithms to extract characteristics from other biometrics such as finger-prints, iris patterns etc. In some implementations, processor 804 may be configured to retrieve personally identifiable information from the payload data associated with the digital watermarks. As discussed above, processor 1104 may be configured to validate an identification document based on portions of personally identifiable information identified by respective digital watermarks using separate mechanisms.
Reading device 1100 may include communication interface 1106 configured to transmit data to a server at the issuing entity. The data may include the extracted characteristics or the retrieved personally identification document. As discussed above, the server may compare the extracted characteristics to records at a searchable database. The server may compare the retrieved personally identifiable information against records at the searchable database. Communication interface 1106 may also be configured to receive verification results from the server. Communication interface 1106 may be built on wired or wireless technologies to transmit data to and receive data from the server.
Reading device 1100 may additionally include feedback device 1108. Feedback device 1108 may be configured to provide instructions to a human inspector. For example, feedback device 1108 may include a graphical interface to display textual messages or iconic indications to the human inspector. In some implementations, feedback device 1108 may additionally include sound devices to alert the human inspector of the verification results, for example, through a text to speech technology.
Implementations of the subject matter and the functional operations described in this specification can be implemented in digital electronic circuitry, in tangibly-implemented computer software or firmware, in computer hardware, including the structures disclosed in this specification and their structural equivalents, or in combinations of one or more of them. Implementations of the subject matter described in this specification can be implemented as one or more computer programs, i.e., one or more modules of computer program instructions encoded on a tangible non transitory program carrier for execution by, or to control the operation of, data processing apparatus. The computer storage medium can be a machine-readable storage device, a machine-readable storage substrate, a random or serial access memory device, or a combination of one or more of them.
The term “data processing apparatus” refers to data processing hardware and encompasses all kinds of apparatus, devices, and machines for processing data, including, by way of example, a programmable processor, a computer, or multiple processors or computers. The apparatus can also be or further include special purpose logic circuitry, e.g., a central processing unit (CPU), a FPGA (field programmable gate array), or an ASIC (application specific integrated circuit). In some implementations, the data processing apparatus and/or special purpose logic circuitry may be hardware-based and/or software-based. The apparatus can optionally include code that creates an execution environment for computer programs, e.g., code that constitutes processor firmware, a protocol stack, a database management system, an operating system, or a combination of one or more of them. The present disclosure contemplates the use of data processing apparatuses with or without conventional operating systems, for example Linux, UNIX, Windows, Mac OS, Android, iOS or any other suitable conventional operating system.
A computer program, which may also be referred to or described as a program, software, a software application, a module, a software module, a script, or code, can be written in any form of programming language, including compiled or interpreted languages, or declarative or procedural languages, and it can be deployed in any form, including as a stand-alone program or as a module, component, subroutine, or other unit suitable for use in a computing environment. A computer program may, but need not, correspond to a file in a file system. A program can be stored in a portion of a file that holds other programs or data, e.g., one or more scripts stored in a markup language document, in a single file dedicated to the program in question, or in multiple coordinated files, e.g., files that store one or more modules, sub programs, or portions of code. A computer program can be deployed to be executed on one computer or on multiple computers that are located at one site or distributed across multiple sites and interconnected by a communication network. While portions of the programs illustrated in the various figures are shown as individual modules that implement the various features and functionality through various objects, methods, or other processes, the programs may instead include a number of sub-modules, third party services, components, libraries, and such, as appropriate. Conversely, the features and functionality of various components can be combined into single components as appropriate.
The processes and logic flows described in this specification can be performed by one or more programmable computers executing one or more computer programs to perform functions by operating on input data and generating output. The processes and logic flows can also be performed by, and apparatus can also be implemented as, special purpose logic circuitry, e.g., a central processing unit (CPU), a FPGA (field programmable gate array), or an ASIC (application specific integrated circuit).
Computers suitable for the execution of a computer program include, by way of example, can be based on general or special purpose microprocessors or both, or any other kind of central processing unit. Generally, a central processing unit will receive instructions and data from a read only memory or a random access memory or both. The essential elements of a computer are a central processing unit for performing or executing instructions and one or more memory devices for storing instructions and data. Generally, a computer will also include, or be operatively coupled to receive data from or transfer data to, or both, one or more mass storage devices for storing data, e.g., magnetic, magneto optical disks, or optical disks. However, a computer need not have such devices. Moreover, a computer can be embedded in another device, e.g., a mobile telephone, a personal digital assistant (PDA), a mobile audio or video player, a game console, a Global Positioning System (GPS) receiver, or a portable storage device, e.g., a universal serial bus (USB) flash drive, to name just a few.
Computer readable media (transitory or non-transitory, as appropriate) suitable for storing computer program instructions and data include all forms of non volatile memory, media and memory devices, including by way of example semiconductor memory devices, e.g., EPROM, EEPROM, and flash memory devices; magnetic disks, e.g., internal hard disks or removable disks; magneto optical disks; and CD ROM and DVD-ROM disks. The memory may store various objects or data, including caches, classes, frameworks, applications, backup data, jobs, web pages, web page templates, database tables, repositories storing business and/or dynamic information, and any other appropriate information including any parameters, variables, algorithms, instructions, rules, constraints, or references thereto. Additionally, the memory may include any other appropriate data, such as logs, policies, security or access data, reporting files, as well as others. The processor and the memory can be supplemented by, or incorporated in, special purpose logic circuitry.
To provide for interaction with a user, implementations of the subject matter described in this specification can be implemented on a computer having a display device, e.g., a CRT (cathode ray tube), LCD (liquid crystal display), or plasma monitor, for displaying information to the user and a keyboard and a pointing device, e.g., a mouse or a trackball, by which the user can provide input to the computer. Other kinds of devices can be used to provide for interaction with a user as well; for example, feedback provided to the user can be any form of sensory feedback, e.g., visual feedback, auditory feedback, or tactile feedback; and input from the user can be received in any form, including acoustic, speech, or tactile input. In addition, a computer can interact with a user by sending documents to and receiving documents from a device that is used by the user; for example, by sending web pages to a web browser on a user's client device in response to requests received from the web browser.
The term “graphical user interface,” or GUI, may be used in the singular or the plural to describe one or more graphical user interfaces and each of the displays of a particular graphical user interface. Therefore, a GUI may represent any graphical user interface, including but not limited to, a web browser, a touch screen, or a command line interface (CLI) that processes information and efficiently presents the information results to the user. In general, a GUI may include a plurality of user interface (UI) elements, some or all associated with a web browser, such as interactive fields, pull-down lists, and buttons operable by the business suite user. These and other UI elements may be related to or represent the functions of the web browser.
Implementations of the subject matter described in this specification can be implemented in a computing system that includes a back end component, e.g., as a data server, or that includes a middleware component, e.g., an application server, or that includes a front end component, e.g., a client computer having a graphical user interface or a Web browser through which a user can interact with an implementation of the subject matter described in this specification, or any combination of one or more such back end, middleware, or front end components. The components of the system can be interconnected by any form or medium of digital data communication, e.g., a communication network. Examples of communication networks include a local area network (LAN), a wide area network (WAN), e.g., the Internet, and a wireless local area network (WLAN).
The computing system can include clients and servers. A client and server are generally remote from each other and typically interact through a communication network. The relationship of client and server arises by virtue of computer programs running on the respective computers and having a client-server relationship to each other.
While this specification contains many specific implementation details, these should not be construed as limitations on the scope of any invention or on the scope of what may be claimed, but rather as descriptions of features that may be specific to particular implementations of particular inventions. Certain features that are described in this specification in the context of separate implementations can also be implemented in combination in a single implementation. Conversely, various features that are described in the context of a single implementation can also be implemented in multiple implementations separately or in any suitable sub-combination. Moreover, although features may be described above as acting in certain combinations and even initially claimed as such, one or more features from a claimed combination can in some cases be excised from the combination, and the claimed combination may be directed to a sub-combination or variation of a sub-combinations.
Similarly, while operations are depicted in the drawings in a particular order, this should not be understood as requiring that such operations be performed in the particular order shown or in sequential order, or that all illustrated operations be performed, to achieve desirable results. In certain circumstances, multitasking and parallel processing may be helpful. Moreover, the separation of various system modules and components in the implementations described above should not be understood as requiring such separation in all implementations, and it should be understood that the described program components and systems can generally be integrated together in a single software product or packaged into multiple software products.
Particular implementations of the subject matter have been described. Other implementations, alterations, and permutations of the described implementations are within the scope of the following claims as will be apparent to those skilled in the art. For example, the actions recited in the claims can be performed in a different order and still achieve desirable results.
Accordingly, the above description of example implementations does not define or constrain this disclosure. Other changes, substitutions, and alterations are also possible without departing from the spirit and scope of this disclosure.
This application is a continuation of U.S. Ser. No. 14/470,540 filed Aug. 27, 2014 which claims the benefit of U.S. Provisional Application No. 61/870,903 filed Aug. 28, 2013, which is incorporated by reference in its entirety.
| Number | Date | Country | |
|---|---|---|---|
| 61870903 | Aug 2013 | US |
| Number | Date | Country | |
|---|---|---|---|
| Parent | 14470540 | Aug 2014 | US |
| Child | 15240078 | US |
