Home / Projects / DSPIP
DSPIP
Digital Signing of Physical Items Protocol — Internet-Draft: draft-midwestcyber-dspip-01
A cryptographic protocol for authenticating packages using digitally signed QR codes. Privacy-preserving delivery, anti-cloning protection, and cryptographic proof of delivery for shipping and logistics.
Built on Established Standards With Shipping-Specific Innovations
Cryptographic Auth
Verify package origin through digital signatures.
Privacy Preservation
Encrypted recipient info during transit.
Anti-Cloning
Physical binding prevents QR duplication.
Decentralized
No central authority for validation.
Offline Capable
Verify without network connectivity.
Delivery Confirmation
Cryptographic proof of successful delivery.
Four Steps From Label to Proof of Delivery
Create & Sign
Sender creates shipping payload, encrypts recipient info, and signs with private key to generate QR code.
Transit Scanning
Carriers scan QR at each custody transfer, verifying signatures via DNS-based public key lookup.
Privacy Decryption
Last mile provider decrypts recipient info using their private key for final delivery.
Delivery Proof
Challenge-response protocol provides cryptographic confirmation of successful delivery.
Choose the Right Level of Security for Your Shipping Needs
📦 Standard
Legacy Compatibility. Full recipient info visible for traditional shipping workflows. Ideal for business-to-business shipments.
🔐 Encrypted
Privacy-Preserving. Recipient encrypted with ECIES. Only the last mile provider can decrypt. Built for consumer privacy protection.
🛡️ Split-Key
Maximum Security. Physical anti-cloning labels with Ed25519 key pairs in scratch-off zones. For high-value shipments requiring offline verification.
Under the Hood
| Standard Curve | secp256k1 |
|---|---|
| Split-Key Curve | Ed25519 |
| Signature | ECDSA + SHA-256 |
| Encryption | ECIES + AES-256-GCM |
| Key Distribution | DNS TXT Records |
| Encoding | QR Code (ISO 18004) |
Explore the DSPIP Protocol
Review the full specification, try the online tools, or contribute to the project.
Visit DSPIP.io