Inside the Engine

How do we take a standard QR code and turn it into an irreversible security tool?
Meet the security architecture of UnisealCR.

The Complete Workflow

From the moment the product is created on the computer until it is scanned by the customer.

1
The Seed

Generation & Identity Creation

Unlike a regular barcode containing just a serial number (like 12345), UnisealCR creates a **unique Cryptographic Key** for every product. The system generates millions of mathematically distinct codes, even if they belong to the same production batch.

  • Creation of a digital "product page" on the secured server for each unit.
  • Smart data compression allowing access to full product history.
  • Data encryption before it moves to printing.
2
The Recipe Patent

Controlled Printing at the Factory

One of the biggest loopholes in the industry is "leakage" from the print house (over-printing). We solve this with an encrypted **Recipe** file.

We don't send an open PDF to the print house. We send a digital "recipe" that connects to the UnisealCR system, allowing the printer to produce **exactly** the defined quantity. Once the job is done – the file locks.

3
Smart Release

Smart Release & Validation

The product is printed? That doesn't mean it's "live" yet. The codes are printed in a **"dormant"** state. To activate them, the production manager performs a "Smart Release" process.

Scanning a sample from the print run, the system verifies the sequence is correct and quality is high, and only then "activates" the series on the server. A code stolen from the print house before release – simply won't work.

4
User Experience

The Scan & Consumer Experience

When the customer scans the product in the store or at home, they receive clear visual feedback within a split second:

Green Screen: Authentic and safe product.
Red Screen: Suspicion of counterfeit/duplicate.

Tough Questions We Love

Dismantling the most common objections.

What happens if someone copies the QR (Copy/Paste)?

Excellent question. The UnisealCR system has an "Anti-Replay" mechanism. Once a specific code is scanned in one location, and then scanned again elsewhere at an illogical time – the system identifies the "duplication" and blocks both or alerts the manufacturer. The counterfeiter cannot generate new codes, they can only copy an existing one – and we catch that immediately.

Do I need a special app to scan?

No. The beauty of our technology is that it works with the standard camera of any smartphone (Native Camera). This ensures 100% of your customers can verify the product without downloading anything.

Is my business data safe?

Absolutely. We use strict encryption standards. Your sensitive business data (like production volumes) remains private, and the consumer sees only what you chose to reveal (production date, batch, expiry, etc.).

How does UnisealCR identify duplicates?

Every label has a cryptographic "fingerprint." Once a product is scanned by an identified user, it is considered "locked." A reappearance of the same identifier elsewhere is reported as an anomaly and flagged as a duplicate.

Is internet required to use UnisealCR?

Not always. Basic information can be displayed without a connection, while in advanced cases, the system provides live data and performs real-time verifications when a connection exists.

Can a voice bot / WhatsApp be integrated?

Yes. Depending on the manufacturer's choice, a phone number and ID can be added below the QR, enabling certificate retrieval and queries via voice call or WhatsApp as well.

See UnisealCR In Action

An interactive walkthrough of the production side, the cryptographic seal lifecycle, batch control, and consumer verification.

Journey of a Single Code

Birth, production, validation, and the journey to the shelf, exactly as in the presentation.

Journey of a code: birth, production, validation, and journey

Automated Load Management

Monitor → Decide → Act: A system that reacts in real-time when demand spikes.

Monitor Decide Act

Global Real-Time Control

See where every product is scanned on the map and get alerts on suspicious activity.

Geographic Monitoring

Smart Hierarchical Management

Define access permissions for factories, distributors, and managers with ease.

Hierarchy Management

Behind the Scenes: The Spector Family

Three bots, three roles. Simple to understand, powerful to operate.

The Spector Family

User Experience That Speaks Your Language

Simple scan, clear message: Valid, Near Expiry, Expired.

User Experience

Under the Hood: Full Project Overview

The complete UnisealCR architecture — from print-time cryptographic identity to logistics-hierarchy validation, tamper-evident event ledgers, and anomaly detection.

UnisealCR creates a cryptographically generated QR identity for each physical item, produced mathematically at the moment of printing. The sensitive cryptographic seed is not retained after generation — only non-sensitive identifiers, verification metadata, and event records are kept. This reduces the risk of database-based code theft and makes unauthorized regeneration or mass duplication operationally detectable through the validation network.

1.Focus & Goal of the Project

The project develops UnisealCR (“Hotam”), a multi-layer product authentication and supply-chain integrity platform designed to protect physical products against counterfeiting, unauthorized production overruns, certificate fraud, and supply-chain manipulation.

The core innovation is the creation of a cryptographically generated QR identity for each physical item, generated mathematically at the moment of printing. The sensitive cryptographic seed is not stored after generation, while only non-sensitive identifiers, verification metadata, and event records are retained.

Full logistics-hierarchy coverage — six label types

A
Item label
B
Box label (optional RFID/NFC)
C
Pallet label
D
Container label
E
Shipping-document label
F
Emergency / multi-purpose

This enables item-level traceability while maintaining the ability to validate larger logistics units such as boxes, pallets, containers, and shipping documents. Box-level labels may optionally integrate RFID or NFC capabilities for remote cargo-integrity scanning.

Figure 1 — Factory management & validated-rolls dashboard
Factory management page
The factory dashboard: product galleries, token & invoicing, and a 7-level validated-rolls hierarchy (year → month → recipient → shipping document → pallet → box → item).

A two-layer, tamper-evident event ledger

Each product is connected to a hash-linked event ledger with two data layers:

  • Public layer — a consumer-facing “Display Window” providing authenticity status, product information, scan history where applicable, and a downloadable digital certificate.
  • Private layer — a restricted operational layer containing sensitive data such as ownership identity, GPS evidence, validation decisions, internal audit records, and anomaly-investigation details.
Public display window
Public “Display Window” — authenticity status, validity timeline, event history, and certificate download, accessible to any consumer.
Digital certificate
Downloadable digital certificate — product details, blockchain event chain, authorized signatory, and revocable certification bodies.

A dedicated Validity Engine manages product states — valid, grace-period, expired, and invalid/suspicious. The system supports transparent retroactive validation outside the factory geofence when necessary; such actions are permanently recorded in the public or audit layer, creating transparency rather than silently blocking legitimate operational exceptions.

The platform also includes anomaly detection based on a combination of active ownership declarations, passive scan-pattern analysis, GPS evidence, and logistics-chain consistency checks — designed to detect unauthorized identifier reuse, abnormal geographic movement, duplicate scans, factory overruns, and potential label leakage.

In addition, UnisealCR supports real-time revocable certification documents (kosher, quality, compliance, or shipment certificates) linked directly to product identity. A robot-character UX layer (“Spektor”) and multilingual support make complex product states understandable to non-technical users.

Goal

To create a scalable digital-trust infrastructure for physical products, enabling manufacturers, regulators, certification bodies, distributors, retailers, and consumers to verify product authenticity and supply-chain integrity in real time.

2.Technical & Scientific Challenge

The project involves significant R&D challenges and development risks across six areas:

1

Print-time cryptographic generation at industrial speed

Embedding mathematical cryptographic-identity generation into industrial printing workflows — secure generation, controlled print authorization, verification, and post-print seed destruction — without slowing high-speed production lines.

2

Tamper-evident per-product event ledger at scale

Maintaining millions of lightweight, hash-linked event ledgers where each event links to the previous one, making retroactive manipulation detectable while remaining efficient for large-scale deployment.

3

Dual-layer data architecture

Separating public consumer-facing information from private operational and regulatory data, requiring robust role-based access, auditability, and secure handling of ownership, location, and validation data.

4

Geofencing and anomaly fusion

Combining GPS location, scan timing, declared ownership, logistics hierarchy, and passive behavioral patterns to generate reliable anomaly alerts while minimizing false positives.

5

Race-condition-proof state transitions

Synchronizing product-state changes across decentralized scans (consumer, factory, regulator, shipping), grace periods, retroactive validation, and revocation — preventing replay attacks and race-condition exploits.

6

Unauthorized overrun detection

Detecting cases where a contracted factory or printing provider attempts to produce additional unauthorized batches, via secure print-order control, event reconciliation, and serial-range monitoring.

Figure 2 — Cryptographic QR generation & the automatic-kit wizard
QR generator hub
The QR generation hub — entry point to both automatic (hierarchy-driven) and manual (per-type) kit creation.
Automatic kit wizard
The guided automatic-kit wizard computes the full A–F label hierarchy from a single set of inputs, with live per-type quantity preview.

3.Differentiation from the State of the Art

Existing serialization and QR-based traceability solutions generally rely on codes stored in databases, leaving them vulnerable to copying, database leakage, unauthorized reuse, and weak linkage between the physical product and its digital identity. UnisealCR differs by combining several mechanisms into one integrated product-trust infrastructure:

1

Print-time cryptographic identity generation

The sensitive seed is generated at print time and not retained, reducing reliance on a stored database of reusable codes and limiting unauthorized regeneration or mass production.

2

Full logistics-hierarchy coverage

Beyond item-level QR codes — validating individual products and larger logistics structures from item to box, pallet, container, and shipping document.

3

Tamper-evident per-product event ledger

Each product records its operational story over time, making manipulation, missing steps, and suspicious behavior easier to detect.

4

Public and private trust layers

Consumer transparency separated from sensitive operational data, with permissioned access for manufacturers, regulators, and certification bodies.

5

Transparent retroactive validation

Controlled exceptions are permanently recorded rather than silently blocked — balancing operational flexibility with audit transparency.

6

Real-time revocable certification

Certificates linked to a product, batch, shipment, or logistics unit can be updated or revoked in real time — relevant for kosher, quality, pharma, luxury, and controlled distribution.

7

Detection of unauthorized production overruns

Not only detecting copied labels in-market, but identifying patterns indicating unauthorized extra production or label leakage outside approved production orders.

Individual components — QR codes, geofencing, event logs, and blockchain-inspired ledgers — exist in the market. The novelty of UnisealCR lies in the integration of these elements into a single product-level security architecture that links cryptographic identity, logistics hierarchy, geolocation evidence, certification status, and anomaly detection.

Figure 3 — Roll tracking, online printing control & overrun prevention
Rolls list
General rolls view — manual per-type boards and grouped automatic-kit boards, each with print status.
Continue printing
“Smart unload” — continue printing across any approved print house, with a live available-memory cap.
Roll page
Roll detail — per-item serials; codes are generated at print time and deleted immediately after unloading.

4.Economic Impact & Market Value

Beyond anti-counterfeiting and consumer trust, UnisealCR addresses direct, quantifiable revenue and cost drivers for manufacturers, brand owners, and certification-dependent markets:

1

Preventing revenue leakage at the source

Most solutions detect counterfeits only after they reach the market. UnisealCR is designed to detect unauthorized production overruns at the source — contracted factories or printing providers producing beyond the approved order — before goods enter distribution, protecting both revenue and brand equity.

2

Reducing litigation, returns & recall costs

Item-level identity and the A–F hierarchy enable surgical recalls at the level of a specific batch, box, or shipment — instead of withdrawing an entire product line — alongside reduced exposure to counterfeit-related claims, chargebacks, and fraudulent returns.

3

Supply-chain efficiency & loss prevention

Real-time visibility from the individual item up to the container — including optional RFID/NFC remote cargo-integrity scanning — supports bottleneck detection, inventory-loss prevention, and remote verification of shipment completeness.

4

Trust as a commercial asset

The ability to prove authenticity becomes a market differentiator: supporting a verified-brand price premium, compliance with tightening regulatory requirements (pharma, food traceability), and differentiation in certification-dependent markets.

Together, these effects translate the platform's technical architecture into a concrete business case: recovered revenue, avoided costs, leaner logistics, and a defensible competitive position for adopters.

5.Stage of Development (TRL)

4–5
Prototype validated · path to pilot Cryptographic generation model, validity-engine state machine, hierarchy logic, event-ledger architecture, and core UI/UX flows have been designed and validated at prototype level.

The current prototype environment includes

  • Factory-management dashboard & roll-tracking system
  • QR generation hub and kit / label-type workflow
  • Product display window & digital-certificate structure
  • Hebrew RTL interface with a multilingual framework
  • Role-based access concept for manufacturers, regulators, certification bodies, and consumers
Figure 4 — Multilingual framework (Hebrew RTL & English LTR)
English hub
English (LTR) build of the QR generation hub.
English rolls
English (LTR) build of the rolls view with print-status tracking.

The next funded phase will focus on

  • Integration with legacy ERP and factory-management systems
  • Industrial printing-line optimization & secure print-order control
  • Large-scale event-ledger testing & advanced anomaly-detection logic
  • Pilot deployments with selected partners in pharma, luxury goods, certification bodies, food traceability, and ticketing
  • Documentation for commercial rollout and regulatory / certification use cases

The project is best described as experimental development with a clear path toward pilot deployment and close-to-market validation.

Screenshots are rendered from working prototype interfaces (Hebrew RTL and English LTR). Statements describe the system's intended architecture at prototype maturity; certain capabilities (industrial-line integration, large-scale ledger testing, advanced anomaly logic) are targets of the next funded development phase.