Crystal Key - An Unforgeable Unclonable Personal Verfication System

水晶钥匙-一种不可伪造的不可克隆的个人验证系统AlphaFox系统有限公司提案的核心是开发一种不可克隆的（即不可伪造的）和唯一的物理光学“个人识别标签”，称为水晶钥匙，消费者将其携带在他们的钥匙环、钱包、皮夹或类似的个人物品上。这种标签将是一条塑料带，大小与超市钥匙圈忠诚卡差不多，将由一种特殊的新材料组成，其中随机分布着一系列“晶体”，并带有集成光源。当在进行移动商务交易期间验证个人身份时，移动的电话应用程序将要求消费者按下灯按钮并将水晶钥匙举到手机摄像头上，手机摄像头将自动拍摄水晶钥匙的照片并将随机水晶阵列/图案的图像与存储在该消费者的支付验证数据库中的图像进行比较。如果两个图像之间不匹配，则交易将被拒绝。因此，只有合法的交易才能进行，互联网和越来越多的（移动的电话）移动商务正在成为商业和零售业的驱动力，甚至使最小和最新的公司也能进行国际贸易。同样，越来越多的消费者将在他们不熟悉的网站上进行交易。这为寻求利用交易安全和认证漏洞的欺诈者提供了额外的机会：例如，支付网站是否真实？付款人是他们所说的那个人吗现在，除了所购买的物品和供应商的身份/合法性之外，交易系统还能够验证购买者的真实性是至关重要的。对单个物品或标签进行唯一编码的最常见方式是为其分配打印的编号或QR条形码等，这是可追踪的。不幸的是，随着低成本计算能力和数字印刷的广泛使用，这种选择不再适用，因为数字和条形码可以很容易地被复制或推断。现代RFID芯片可以提供标签的基础，但大多数移动的手机不包含RFID阅读器。所需要的是一种利用移动终端的当前传感器技术范围的系统。我们建议使用随机产生的“可复制”光学特征（“标签”），这些特征对每个用户都是唯一的，并且不能复制。这些标签需要低成本和灵活，并利用容易获得且成本低的验证设备。任何试图复制这些特征的人都将失败，因为可能存在大量的数学变量（数十亿）。Crystal Key通过为每个消费者提供独特的“标签”来满足所有这些需求，并且可以使用任何智能手机摄像头读取。它的包容性在于，包括技术恐惧症在内的各种“IT通”水平的人都应该能够使用它。它也适用于灵活性和视力有限的人，以及来自不同文化的人，因为这个简单的“自动摄影”步骤不涉及阅读、打字或说话。

Crystal Key – An Unforgeable Unclonable Personal Verification SystemThe core of the AlphaFox Systems Ltd proposal is the development of a non-clonable (i.e. non-forgeable) and unique physical optical ‘personal identification tag’, called Crystal Key, that the consumer carries with them on their key-ring, purse, wallet, or similar personal item. The tag will be a strip of plastic about the size of supermarket key-ring loyalty cards and will comprise a special new material with a randomly-distributed array of ‘crystals’ in it with integrated light source. When verifying personal identity during making an m-commerce transaction, the mobile phone application would ask the consumer to press on the light button and hold the Crystal Key up to the phone camera which would automatically take a photograph of the Crystal Key and compare the image of the random crystal array/pattern with that stored on a payment verification database for that consumer. If there is not a match between the two images, then the transaction will be denied. Hence only legitimate transactions can take place.The Internet and, increasingly, (mobile phone) m-commerce are becoming the driving force behind commerce and retailing, allowing even the smallest and newest of companies to trade internationally. Similarly, an increasing number of consumers will carry out transactions on sites that they are not familiar with. This is providing additional opportunities to fraudsters looking to exploit loopholes in the security and authentication of transactions: e.g. is the payment site genuine?, is the payer who they say they are?, etc. It is now essential that transaction systems are able to verify the veracity of the purchaser in addition to the item being bought and the identity/legitimacy of the vendor.The most common way to uniquely code an individual item or tag is to assign it a printed number or QR barcode etc., that is trackable. Unfortunately, with the widespread use of low cost computing power and digital printing, this option is no longer adequate as numbers and barcodes can easily be copied or deduced. Modern RFID chips could provide the basis of the tag, but most mobile phones do not contain RFID readers. What is required is a system that exploits a mobile device's current range of sensor technologies. We propose to use randomly produced 'photographable' optical features ('tags') that are unique to each user and that cannot be copied. These tags need to be low cost and flexible and utilise verification equipment that is readily available and also low cost. Anyone attempting to copy the features will fail due to the vast number of mathematical variants that are possible (billions).Crystal Key meets all of these needs by providing a ‘tag’ that is unique to each individual consumer and which can be read using any smart phone camera. It will be inclusive in that those with a wide range of ‘IT savvy’ levels including technophobes should be able to use it. It will also work for people of limited dexterity and sightedness, and people from different cultures, since this simple ‘automatic photography’ step does not involve reading, typing, or speaking.