DSR Protocol · Resolver-first demonstration

Grey-market & anti-counterfeit — proven live on the Resolver

Every tap below is minted and verified inside this resolver using real NTAG 424 DNA cryptography (AES-CMAC). No third-party service is contacted — verification is zero-egress. Watch the wire bytes change on every tap.

Zero-egress · verified in-resolver · no external call

Tap a tag

Pick a tier, choose the boutique region, then run a scenario. The verdict on the right updates live.

Bound unit
Maison Vermeil — Éclat de Rivoli pendant
GTIN 09506000134376 · RIV-24-0917
Trust tier
Boutique region for the next genuine tap
Authenticity scenarios
Back to pitch hub

Resolver verdict

The decision, the reasons, and the exact bytes verified.

Run a scenario to see a live verdict.

Scan history for this serial

No scans yet.

Distribution map

Authenticated scans plotted by region. When the same serial appears in two places too far apart to be one physical unit, the resolver draws the impossible-travel line — the fingerprint of a diverted, grey-market piece.

Authorised region Not authorised Impossible-travel jump

Right-sized trust — 424 DNA vs 213/215

Match the tag to the risk. Cryptographic proof where value is high; detection-grade where an affordable, high-volume experience is enough.

NTAG 424 DNACryptographic · high-value pieces
NTAG 213/215Detection-grade · entry-tier, high volume
Per-tap signature
Yes — fresh AES-CMAC each tap
No — stable UID only
Clone / replay
Blocked by signature + monotonic counter
Detectable via counter/velocity heuristics
Forged code
Fails closed — no key, no valid signature
Not distinguishable at this tier
Transplant (UID ↔ product)
Blocked by binding
Blocked by binding
Grey-market / diversion
Flagged by zero-egress telemetry
Flagged by zero-egress telemetry
Relative unit cost
Higher — justified on fine, high-value pieces
Entry-tier — affordable at high volume
Verification cost per scan
None — standard AES in your resolver
None — lookup in your resolver

One physical GS1 Digital Link code · one resolver · promotion, authentication & DPP from the same tap. Resolver vs legacy brief →