Abstract: Objects are identified by authentication tags, each configured with an authentication key that includes a first dataset comprised of a random distribution of three-dimensional elements, and with a second dataset comprised of machine-readable data elements. The authentication keys are readable by image capture and/or RFID reading devices, at least one of which is authorized to read at least one of the keys under predetermined conditions. An object is deemed genuine when the device reading a key has been authorized, and when the reading is performed when the conditions have been met.