Abstract: Value based tokens are generated for inclusion on a data carrier which may be applied to a media such as a coupon, bank note etc. The tokens are generated by a core system which communicates with application specific wrappers. The wrappers supply token parameters to the core that are specific to the application and the core generates the tokens, and stores them for later authentication. The core then encodes the tokens onto a data carrier under the control of the wrapper and distributes the tokens under the control of the wrapper. When a token is presented for validation, for example by a customer in a shop, the encoded data carrier is scanned and the token retrieved. It is passed back to the core by the wrapper for validation of its identification number and other parameters.

Abstract: Items that require authentication, such as coupons or tickets are printed with a data carrier such as a data matrix or an RFID device. Encoded on the data carrier is a value based token, which comprises a header, a payload and a security portion. The header identifies the token type and also includes a unique identification of the token. A PIN flag may also be included. The payload may be encrypted and contain data which gives an authorised party access to a portion of a databases that stores information corresponding to the token identifier. The security portion may comprise a hash or a digital signature.

Abstract: Personalised money may be produced on-line and carry an identifier having at least a first and a second data set. The first data set may represent a unique item identifier and the second data set other item related information. Both data sets are encrypted and printed on the money, for example encoded in a data matrix symbol. The user may present the printed money for redemption at which point the data matrix symbol is scanned to retrieve the encrypted data sets. The data set including the unique identifier may be sent to a remote location for decryption and comparison against a stored identifier. The second data set may be decrypted and compared locally. Different encryption may be used for the two data sets.