IDeTRUST DigSig Verifier

The Tönnjes DigSig Verifier App is a standards compliant (ISO/IEC 20248) item/product/document identifier, attributes and information verifier. It verifies data contained in ISO and GS1 barcodes, NFC, and RAIN RFID. It operates offline to ensure data privacy and counters online spoofing attacks. It uses X.509 digital signatures and certificates.

ISO/IEC 20248 DigSig provides a method to specify and verify item/product/document identifier data structures for barcode, NFC, and RAIN RFID. The purpose of a DigSig is to make counterfeit barcodes, NFC, and RAIN RFID item identifiers detectable, i.e., it provides for the verification of barcodes, NFC, and RAIN RFID data, as applied to items, products and documents.

This aligns with the EU Digital Product Passport regulations, and GS1 has adopted DigSigs to complement their product identifiers in global trade. DigSigs also detect copies by creating a verifiable link between the identifier in the barcode/RFID and the item/product/document:

• For barcodes: By including unique item characteristics (like natural variations in package weight) and security marks (like a holographic serial number) in the digital signature.

• For RFID (NFC and RAIN): By including the chip identifier (RAIN TID and NFC UID) in the digital signature.

As an example, DigSigs are successfully used in the securitization of vehicle license plates throughout the plate lifecycle, from manufacturing, through issuing and use, to return and recycling. A vehicle license plate serves as both a regulatory security document (the vehicle's passport) and a trusted vehicle identifier for many vehicle-related applications.

Other applications include degrees, certificates of completion and compliance, tokens, and permits in various industries where a DigSig's ability to authenticate the identifier, the data, and the issuer of the data in an interoperable, open way is crucial.