Abstract: A brand protection feature/taggant reader and/or writer instrument comprising a secure processing environment and a non-secure processing environment, the instrument being operable to execute a process that is split between the secure and non-secure environments in accordance with pre-defined criteria.

Abstract: A brand protection feature reader and/or writer instrument (6) that is adapted to perform a pre-determined number of operations, for example authentication of a brand protection feature, and prevent subsequent operations from being performed if the pre-determined number of operations is exceeded. A counter (70) may be provided for counting the number of operations performed, thereby to determine if the pre-determined number of operations is exceeded.

Abstract: A method for authenticating a workflow that has one or more designated steps that require authentication of associated resources, the method comprising: using a reader instrument to read at least one security feature uniquely associated resources involved in the workflow; authenticating the security feature, thereby to authenticate its associated resource, and recording authentication information for each designated workflow step.

Abstract: A system for authenticating articles comprising: an authentication manager for managing authentication information associated with the articles; a plurality of secure taggant reader instruments for reading machine readable taggants associated with the articles, the taggants including the authentication or related information, and an instrument configuration manager for secure on-line configuration of the instruments. Each taggant reader instrument is operable to securely process and send authentication information derived from a taggant to the authentication manager. The authentication manager uses the received authentication information to identify suspicious events. When suspicious events are detected, the instrument configuration manager is able to reconfigure at least some of the taggant reader instruments. Reconfiguration may also happen in the event of a product recall and/or taggant security compromise.