System and a method for validating an identification token

Abstract

An Identification Device ( 10 ) for providing validation information comprising: a Token ( 11 ) and a Validator ( 20 ); wherein the display ( 17 ) is adapted to display, during an Operational Phase, a first security code ( 15 ), referred to as the Indicator-of-Clearance code or IoC code ( 15 ), indicating the Clearance Status ( 46 ) of the Token, whereby the first security code ( 15 ) is generated by an Indicator-of-Clearance Function ( 23 ), such as a digital signature or hash function, programmed on the processor unit ( 21 ) based on the Clearance Status ( 46 ) and the Validator Clock ( 28 ).

1 - 36 . (canceled) 
     
     
         37 . A plurality of identification devices, each of the identification devices including a memory, a display, a processor unit, and a communication interface,
 the memory storing identification information uniquely identifying a person or an object and representing security clearance data used to indicate that the person or object is allowed to perform a valid action or obtain a valid status,   the processor unit being programmed to generate security codes based on at least a clock synchronization signal received via the communication interface synchronized to a centralized system clock of a centralized system that is remote from the devices, wherein at least some of the generated security codes are also based on clearance rules specifying whether the person or object is allowed to perform a valid action or obtain a valid status based on the security clearance data; and   the display being configured to display a visible element upon generation of a security code of the security codes by the programming unit,   wherein all of the respective displays of the identification devices display simultaneously the same visible element and simultaneously change to display the same next visible element upon generation of another security code by the processor unit based on at least the clock synchronization signal.   
     
     
         38 . The identification devices according to  claim 37 , wherein the visible element includes static or moving coloured blocks or symbols or is indicated by one or more light sources. 
     
     
         39 - 42 . (canceled) 
     
     
         43 . The identification devices according to  claim 37 , wherein the communication interface of each of the identification devices is configured to receive clearance rules specifying whether the person or object is allowed to perform a valid action or obtain a valid status based on the security clearance data, and wherein the security codes are also based on the received security rules. 
     
     
         44 . The identification devices according to  claim 37 , wherein the security codes are generated by a digital signature or hash function programmed on the processor unit based on the security clearance data and the centralized system clock. 
     
     
         45 . The identification devices according to  claim 37 , wherein the communication interface of each of the identification devices is configured to receive a set of time rules that cause the processor unit to calculate a set of time intervals such that the security codes are generated for each of the calculated time intervals. 
     
     
         46 . A system, comprising:
 one or more memory devices storing a plurality of identification data each uniquely identifying a person or an object and including security clearance data representing that the person or object is allowed to perform a valid action or obtain a valid status;   one or more processor units each programmed to receive clearance rules specifying whether the person or object is allowed to perform a valid action or obtain a valid status based on the security clearance data;   the one or more processor units each being programmed to generate security codes based on (a) a clock synchronization signal synchronized to a centralized system clock of a centralized system and (b) the clearance rules, and   at least one of the one or more processor units being programmed to cause the same first visible element to be displayed simultaneously on corresponding displays of a plurality of electronic devices upon generation of a first security code of the security codes and to change each of the displays simultaneously to display the same second visible element upon generation of a second security code of the security codes.   
     
     
         47 . The system of  claim 46 , wherein each of the identification devices is configured to receive a set of time rules causing the one or more processor units to calculate a set of time intervals such that each of the security codes is generated for each of the calculated time intervals. 
     
     
         48 - 49 . (canceled) 
     
     
         50 . The system of  claim 46 , wherein the centralized system is remote from all of the electronic devices, wherein each of the electronic devices includes a respective communication interface configured to receive the clock synchronization signal from the centralized system. 
     
     
         51 . The system of  claim 46 , wherein at least one of the first visible element or the second visible element includes static, moving, or flashing coloured blocks or symbols, or wherein at least one of the first visible element or the second visible element is indicated by one or more coloured diodes or light emitting diodes. 
     
     
         52 . The system of  claim 46 , wherein at least one of the one or more processor units generate the security codes by a digital signature or hash function programmed on the processor unit based on the security clearance data and the centralized system clock. 
     
     
         53 . A method, comprising:
 storing, for each of a plurality of persons or objects, respective identification information uniquely identifying each of the persons or objects and representing security clearance data used to indicate that the respective person or object is allowed to perform a valid action or obtain a valid status;   storing clearance rules each specifying whether each of at least some of the respective persons or objects is allowed to perform a valid action or obtain a valid status based on the corresponding security clearance data associated with the respective person or object;   storing security codes based on at least the security rules and a clock synchronization signal synchronized to a centralized system clock of a centralized system;   causing each of a plurality of electronic displays to (a) display simultaneously the same visible element upon generation of a security code of the security codes based on the clock synchronization signal and one of the security rules and (b) simultaneously change to display another same visible element upon generation of another security code of the security codes based on at least the clock synchronization signal.   
     
     
         54 . The method of  claim 53 , further comprising receiving, at each of a plurality of electronic devices, the security rules and the clock synchronization signal. 
     
     
         55 . The method of  claim 54 , wherein each of the plurality of electronic devices includes a processor unit configured to generate corresponding ones of the security codes based on at least the received security rule and the received clock synchronization signal, and wherein each of the plurality of electronic devices includes a corresponding one of the plurality of electronic displays. 
     
     
         56 . The method of  claim 54 , further comprising receiving, at each of the plurality of electronic devices corresponding ones of the security codes generated at a centralized system remote from all of the electronic devices. 
     
     
         57 . The method of  claim 53 , further comprising:
 transmitting, to each of a plurality of electronic devices, a corresponding one of the security rules; and   transmitting, to each of the plurality of electronic devices, the clock synchronization signal.   
     
     
         58 . The method of  claim 57 , further comprising receiving, from each of the plurality of electronic devices, a request to transmit one of the security rules or the clock synchronization signal. 
     
     
         59 . The method of  claim 53 , further comprising storing a set of time rules used to calculate a set of time intervals such that the security codes are generated for each of the calculated time intervals. 
     
     
         60 . The method of  claim 59 , further comprising:
 receiving, at each of a plurality of electronic devices, the set of time rules;   calculating, by each of the plurality of electronic devices, the set of time intervals; and   generating, by each of the plurality of electronic devices, the security codes for each of the calculated time intervals.   
     
     
         61 . The method of  claim 59 , further comprising:
 transmitting, from a centralized system to each of a plurality of electronic devices remote from the centralized system, the set of time rules; and   transmitting, from the centralized system, the calculated time intervals.   
     
     
         62 . The method of  claim 53 , wherein at least one of the visible element or the other visible element includes static, moving, or flashing coloured blocks or symbols, or wherein at least one of the visible element or the other visible element is indicated by one or more coloured diodes or light emitting diodes. 
     
     
         63 - 65 . (canceled)