Why it's secure
A security model you can interrogate: every threat mapped to its defense, including the honest limits.
The system stays secure because forging a product requires defeating three independent mechanisms at once: extracting a private key that never leaves an HSM, physically reproducing random micro-structure, and evading server-side scan analytics.
Threat → defense
| Attack | Defense |
|---|---|
| Photocopying or reprinting a genuine label | The PUF micro-structure does not survive reproduction; the copy fails physical matching and is flagged as a suspected copy. |
| Fabricating a new token and code | Tokens are signed inside an HSM; without the non-exportable private key, no fabricated identity verifies. |
| Mass-scanning one stolen valid label | Scan intelligence detects repetition, velocity and geographic spread and downgrades or blocks the identity. |
| Compromising the verification app | The verdict is computed server-side only. A tampered client cannot mint an 'original' result. |
| Replay of captured scan data | Each verification is a fresh challenge; captures are bound to the session and cannot be replayed. |
| Insider abuse at the enrollment station | The honest limit — see below. Controls: authenticated stations, signed audit logs, rate and batch limits, anomaly review. |
The honest part: enrollment is the critical link
Any authentication system is anchored where identities are born. If an attacker controls a legitimate enrollment station, they can enroll products that verify as genuine. We do not pretend otherwise. Instead, the design constrains that link: stations authenticate with hardware-bound credentials, every enrollment is logged in a tamper-evident audit trail, batch volumes are bounded and monitored, and anomalies at enrollment trigger review before products ship.
Compliance & data protection
Consumer verification requires no account and no personal data. Geo signals are used in aggregate for anomaly detection. The platform is designed for GDPR and KVKK compliance, and cryptographic keys are managed in certified HSMs.