AUDITABLE AUTHENTICATION OF EVENT HISTORIES FOR SHIPPED AND STORED OBJECTS

• US 20060293977A1
• Filed: 11/15/2005
• Published: 12/28/2006
• Est. Priority Date: 11/15/2004
• Status: Active Grant

• Current Assignee: Visible Assets Incorporated (NOV, Inc.)
• Original Assignee: Visible Assets Incorporated (NOV, Inc.)
• Inventors: Stevens, John K, Waterhouse, Paul, August, Jason
• Granted Patent: US 7,564,353 B2
• Time in Patent Office: Days
• US Class Current: 705/28
• CPC Class Codes: G06Q 10/08 Logistics, e.g. warehousing, loading or distribution; Inventory or stock management
• CPC Class Codes: G06Q 10/087 Inventory or stock management, e.g. order filling, procurement or balancing against orders

Abstract

This invention relates to a method and system for auditably authenticating the histories of events (e.g. temperature levels) experienced by objects (e.g. pharmaceutical products, foodstuffs, etc.) during storage in repositories such as warehouses and movable shipping vehicles. The method involves a) sensing an event experienced by an object; b) recording an event signal that defines the sensed event; c) transmitting a temporally ordered series of said event signals to a data storage apparatus, said data storage apparatus being operable to store said temporally ordered series of said event signals; and d) safeguarding the aforesaid data storage apparatus against alteration of said stored series of event signals. The safeguarding may be done by selecting a data storage apparatus which is unalterable, such as a write-once-only CD-R disc. Such use of an unalterable medium (e.g. CD-R) is especially appropriate where the repository is movable, such as a truck or railway car, since a CD-R drive can easily be located within the movable repository during shipment of the goods which are sensitive to temperature or other environmental events. Alternatively, safeguarding can be achieved by locating the aforesaid data storage apparatus at a secure location (e.g. KPMG or other auditor'"'"'s offices) distant from the stored/shipped drugs to prevent data tampering. Moreover, the event data can be transmitted (wirelessly for movable repositories, by wired connection for a stationary repository such as a warehouse) to the distant location immediately, as the events occur (i.e. in “real time”), so that the event data is in secure hands (e.g. an independent auditor'"'"'s) before it could possibly be altered. Furthermore, safeguarding may utilize a selected algorithm to calculate a pair of checksums based on a selected sequence of event signals, said pair of checksums having a selected relationship (e.g. being identical) in the event of data integrity, one of the two checksums being calculated from event signals generated at the repository (e.g. at a warehouse), the other checksum being calculated from event signals that have already been transmitted to the aforesaid data storage apparatus. Moreover, corresponding temporal (e.g. date/time) data may be stored together with each event signal, the temporal data being obtained from an independent source (e.g. National Institute of Standards and Technology (NIST) or a GPS satellite).

Claims

1. A method for preventing alteration of event histories for objects held in a repository (e.g. a fixed warehouse or a movable vehicle) for a period of time, said objects (e.g. pharmaceutical materials) being sensitive to events (e.g. temperature levels) experienced thereby, said method comprising:

a) sensing an event experienced by a said object;

b) recording an event signal that defines the sensed event;

c) transmitting a temporally ordered series of said event signals to a data storage apparatus, said data storage apparatus being operable to store said temporally ordered series of said event signals; and

d) safeguarding said data storage apparatus against alteration of said stored series of event signals.

2. A method as set forth in claim 1, wherein safeguarding step (d) is carried out by selecting a data storage apparatus which is operable to store said series of event signals upon a medium that cannot be readily altered without detection.

3. A method as set forth in claim 2, wherein said repository is a vehicle operable for delivery of said objects, and wherein said medium is a write-once-only CD-Recordable (CD-R) disc.

4. A method as set forth in claim 1, wherein safeguarding step (d) is carried out by disposing said data storage apparatus at a secure location (e.g. KPMG or other auditor'"'"'s offices) distant from said object.

5. A method as set forth in claim 4, wherein said safeguarding step (d) utilizes a selected algorithm to calculate a pair of checksums based on a selected sequence of event signals, said pair of checksums having a selected relationship (e.g. being identical) in the event of data integrity, one of said checksums being calculated from event signals generated at said repository (e.g. at a warehouse), the other checksum being calculated from event signals transmitted to said data storage apparatus.

6. A method as set forth in claim 4, wherein transmitting step (c) is carried out by transmitting said event signals to said data storage apparatus immediately upon recording thereof (i.e. in real time) in accordance with step (b).

7. A method as set forth in claim 1, wherein safeguarding step (d) comprises storage of corresponding temporal (e.g. date/time) data together with each said event signal, said temporal data being obtained from an independent source (e.g. National Institute of Standards and Technology (NIST).

8. A method as set forth in claim 7, wherein said repository is a vehicle operable for delivery of said objects, wherein said medium is a write-once-only CD-Recordable (CD-R) disc, and wherein said independent source is a global positioning system (GPS) satellite.

9. A method as set forth in claim 1, wherein said sensing step (a) and recording step (b) are carried out by associating (e.g. attaching to) a tag with a said object, said tag comprising an event sensor operable to record an event signal for describing an event experienced by said object, a data storage device operable to store data comprising identification data for identifying said radio frequency tag, said tag being operable to provide data signals comprising said event signal and an identification signal based upon said identification data, and an energy source for activating said event sensor and said data storage device.

10. A method as set forth in claim 8, wherein said sensing step (a) and recording step (b) are carried out by associating (e.g. attaching to) a tag with a said object, said tag comprising an event sensor operable to record an event signal for describing an event experienced by said object, a data storage device operable to store data comprising identification data for identifying said radio frequency tag, said tag being operable to provide data signals comprising said event signal and an identification signal based upon said identification data, and an energy source for activating said event sensor and said data storage device.

11. A method as set forth in claim 10, a plurality of said tags being disposed in different areas of said vehicle to sense different events (e.g. different temperatures) experienced in said different areas.

12. A method for preventing alteration of event histories for objects held in a repository (e.g. warehouse or movable vehicle) for a period of time, said objects (e.g. pharmaceutical materials) being sensitive to events (e.g. temperature levels) experienced thereby, said method comprising:

a) associating (e.g. attaching to) a radio frequency (RF) tag with a said object, said tag comprising an event sensor operable to record an event signal for describing an event experienced by said object, a data storage device operable to store data comprising identification data for identifying said radio frequency tag, a tag antenna operable at a radio frequency, a tag transmitter operatively connected to said tag antenna, said tag transmitter being operable at said radio frequency to transmit data signals comprising said event signal and an identification signal based upon said identification data, and an energy source for activating said event sensor and said tag transmitter;

b) reading said data signals, which comprise said event signal and said identification signal, from said tag transmitter of said RF tag; and

c) transmitting said data signals to a data storage apparatus, said data storage apparatus being operable to store a temporally ordered sequence of said event signals from said RF tag upon a medium which cannot be readily altered without detection.

13. A method as set forth in claim 12, said data storage apparatus being disposed at a secure location distant from said object, said transmitting step (c) further comprising:

transmitting said sequence of event signals together with corresponding identification signals to said data storage apparatus.

14. A method as set forth in claim 12, said method comprising a step of utilizing a selected algorithm to calculate a pair of checksums based on a selected sequence of event signals, said pair of checksums having a selected relationship (e.g. being identical) in the event of data integrity, one of said checksums being calculated from event signals generated at said repository (e.g. at said tag), the other checksum being calculated from event signals transmitted to said data storage apparatus.

15. A system for preventing alteration of event histories for objects held in a repository (e.g. warehouse or movable vehicle) for a period of time, said objects (e.g. pharmaceutical materials) being sensitive to events (e.g. temperature levels) experienced thereby, said system comprising:

a) a tag carried by a said object, said tag comprising an event sensor operable to record an event signal for describing an event experienced by said object, a data storage device operable to store data comprising identification data for identifying said tag, a tag transmitter operable to transmit data signals comprising said event signal and an identification signal based upon said identification data, and an energy source for activating said event sensor and said data storage device; and

b) a data storage apparatus in operative communication with said tag, said data storage apparatus being operable to store a temporally ordered sequence of said event signals upon a medium which cannot be readily altered without detection.

16. A system as set forth in claim 15, and further comprising a central data processor, each tag being connected by cable to said central data processor.

17. A system for preventing alteration of event histories for objects held in a repository (e.g. warehouse or movable vehicle) for a period of time, said objects (e.g. pharmaceutical materials) being sensitive to events (e.g. temperature levels) experienced thereby, said system comprising:

a) a radio frequency (RF) tag carried by a said object, said tag comprising an event sensor operable to record an event signal for describing an event experienced by said object, a data storage device operable to store data comprising identification data for identifying said radio frequency tag, a tag antenna operable at a radio frequency, a tag transmitter operatively connected to said tag antenna, said tag transmitter being operable at said radio frequency to transmit data signals comprising said event signal and an identification signal based upon said identification data, and an energy source for activating said event sensor and said tag transmitter;

b) at least one field antenna disposed at an orientation and within a distance from said object that permit effective communication with said RF tag at said radio frequency;

c) a reader in operative communication with said field antenna, said reader being operable to receive data signals from said RF tag; and

d) a data storage apparatus in operative communication with said reader, said data storage apparatus being operable to store a temporally ordered sequence of said event signals upon a medium which cannot be readily altered without detection.

18. A system as set forth in claim 17, said data storage apparatus being disposed at a secure location distant from said object, said system further comprising:

e) a field transmitter disposed at said repository and operable to transmit said event signals and corresponding location signals to said data storage apparatus.

19. A system as set forth in claim 17, said system comprising a pair of checking devices for utilizing a selected algorithm to calculate a corresponding pair of checksums based on a selected sequence of event signals, the pair of checksums having a selected relationship (e.g. being identical) in the event of data integrity, one of said checking devices being disposed at said repository (e.g. at said tag), the other checking device being disposed at said data storage apparatus.

27. A system as set forth in claim 17, said tag further comprising a tag receiver operable to receive an RF interrogation signal from said field antenna, said RF interrogation signal being operable to cause said tag to emit an event signal.

20. A system for preventing alteration of event histories for objects held in a movable repository (e.g. vehicle) for a period of time, said objects (e.g. pharmaceutical materials) being sensitive to events (e.g. temperature levels) experienced thereby, said system comprising:

a) a radio frequency (RF) tag carried by a said object, said tag comprising an event sensor operable to record an event signal for describing an event experienced by said object, a data storage device operable to store data comprising identification data for identifying said radio frequency tag, a tag antenna operable at a radio frequency, a tag transmitter operatively connected to said tag antenna, said tag transmitter being operable at said radio frequency to transmit data signals comprising said event signal and an identification signal based upon said identification data, and an energy source for activating said event sensor and said tag transmitter;

b) at least one field antenna disposed at an orientation and within a distance from said object that permit effective communication with said RF tag at said radio frequency;

c) a reader in operative communication with said field antenna, said reader being operable to receive data signals from said frequency tag;

d) a geographic position sensing (GPS) detector operable to record a location signal defining a geographic position of said movable repository (e.g. vehicle), and

d) a data storage apparatus in operative communication with said reader and said GPS detector, said data storage apparatus being operable to store a temporally ordered sequence of said event signals and corresponding location signals upon a medium which cannot be readily altered without detection.

21. A system as set forth in claim 20, said data storage apparatus being disposed at a secure location distant from said object, said system further comprising:

e) a field transmitter disposed at said movable repository (e.g. vehicle) and operable to transmit said event signals and corresponding location signals to said data storage apparatus.

22. A system as set forth in claim 21, said system further comprising a clock operable to generate time signals for transmittal to said data storage apparatus and for storage thereat in correspondence with said event signals.

23. A system as set forth in claim 22, said clock being disposed at said RF tag.

24. A system as set forth in claim 22, said clock being disposed at said data storage apparatus.

25. A system as set forth in claim 20, said system comprising a pair of checking devices for utilizing a selected algorithm to calculate a corresponding pair of checksums based on a selected sequence of event signals, the pair of checksums having a selected relationship (e.g. being identical) in the event of data integrity, one of said checking devices being disposed at said movable repository, the other checking device being disposed at a secure location distant from said movable repository.

26. A system as set forth in claim 25, said one checking device being disposed on said RF tag.

28. A system as set forth in claim 20, said movable repository (e.g. vehicle) further comprising a central data processor in operative communication with said field antenna, said tag further comprising a tag receiver operable to receive an RF interrogation signal from said field antenna, said RF interrogation signal being operable to cause said tag to emit an event signal.

29. A system as set forth in claim 28, wherein said identification data comprises an internet protocol (IP) address, and wherein said central data processor is operable for communication with an internet router.

30. A system as set forth in claim 25, said tag further comprising a display (e.g. LCD) operable to display visible data relating to said event sensor of said tag.

31. A system as set forth in claim 30, said visible data comprising one of said checksums.

32. A system as set forth in claim 20, said system comprising a plurality of said low frequency (e.g. not exceeding 300 KHz) RF tags and a plurality of low frequency field antennas disposed in different areas of said movable repository and operable to enable discrimination of event signals received from RF tags disposed in different areas.

33. A system as set forth in claim 22, said data storage apparatus comprising a write-only-once device (e.g. CD-R (or CD-Recordable), PROM) to assure integrity of data relating to events (e.g. high temperature levels) experienced by objects (e.g. packages of pharmaceutical materials).

34. A method for preventing alteration of event histories for objects held in a repository (e.g. a fixed warehouse or a movable vehicle) for a period of time, said objects (e.g. pharmaceutical materials) being sensitive to events (e.g. temperature levels) experienced thereby, said method comprising:

a) sensing an event experienced by a said object upon a tag associated therewith;

b) unalterably recording an event signal that defines the sensed event upon a write-once-only data storage device (e.g. PROM) comprised by said tag;

c) transmitting a temporally ordered series of said event signals to a data storage apparatus, said data storage apparatus being operable to store said temporally ordered series of said event signals; and

d) safeguarding said data storage apparatus against alteration of said stored series of event signals.

35. A tag for use in system for preventing alteration of event histories for objects held in a repository (e.g. warehouse or movable vehicle) for a period of time, said objects (e.g. pharmaceutical materials) being sensitive to events (e.g. temperature levels) experienced thereby, said tag being adapted for association with (e.g. attachment to) a said object, said tag comprising an event sensor operable to record an event signal for describing an event experienced by said object, a write-once-only data storage device (e.g. PROM) operable to store, in an unalterable manner, data comprising said event signal, a tag transmitter operable to transmit data signals comprising said event signal, and an energy source for activating said event sensor and said write-once-only data storage device.

36. A tag as set forth in claim 35, said write-once-only data storage device being operable to store identification data for identifying said tag.

37. A tag as set forth in claim 36, said tag further comprising a clock operable to generate time signals for storage at said write-once-only data storage device in correspondence with said event signals.