Security and Privacy Enforcement for Discovery Services in a Network of Electronic Product Code Information Repositories

• US 20080120725A1
• Filed: 11/21/2006
• Published: 05/22/2008
• Est. Priority Date: 11/21/2006
• Status: Active Grant

• Current Assignee: rfXcel Corporation (Antares Vision S.p.A.)
• Original Assignee: International Business Machines Corporation
• Inventors: Grandison, Tyrone W. A., Robinson, Gary, Rantzau, Ralf, Asher, Anthony C., Clauss, Christian C., Kailing, Karin, Beier, Steven P.
• Granted Patent: US 7,866,543 B2
• Time in Patent Office: Days
• US Class Current: 726/27
• CPC Class Codes: G06Q 10/087 Inventory or stock management, e.g. order filling, procurement or balancing against orders
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 4/00 Services specially adapted for wireless communication networks; Facilities therefor
• CPC Class Codes: H04W 8/26 Network addressing or numbering for mobility support

Abstract

Methods and apparatus, including computer program products, implementing and using techniques for managing security and privacy associations between an electronic product code value and an address of a repository containing information about an item represented by the electronic product code. A security certificate is issued to each of one or more parties that are authorized to use the repository. In response to a party among the one or more parties sensing the electronic product code, a record is created in the repository. The record represents the sensing of the electronic product code and includes a security certificate belonging to the party that sensed the electronic product code.

Claims

1. A computer-implemented method for managing security and privacy associations between an electronic product code value and an address of a repository containing information about an item represented by the electronic product code, the method comprising:

issuing a security certificate to each of one or more parties that are authorized to use the repository; and

in response to a party among the one or more parties sensing the electronic product code, creating a record in the repository, the record representing the sensing of the electronic product code and including a security certificate belonging to the party that sensed the electronic product code.

2. The method of claim 1, further comprising:

storing a data sharing attribute with each record in the repository, the data sharing attribute specifying a subset of parties among the one or more parties that has permission to access the record.

3. The method of claim 1, wherein sensing the electronic product code includes sensing the electronic product code with a radio frequency identification sensor.

4. The method of claim 1, wherein the one or more parties are represented by electronic product code information services.

5. The method of claim 1, wherein creating a record includes creating a record immediately upon a party among the one or more parties sensing an electronic product code for the first time.

6. The method of claim 1, wherein the subset of parties specified by the data sharing attribute includes all parties authorized to use the repository.

7. The method of claim 1, wherein the subset of parties specified by the data sharing attribute includes parties authorized to use the repository and which have sensed the electronic product code associated with the record.

8. A computer program product comprising a computer useable medium including a computer readable program, for managing security and privacy associations between an electronic product code value and an address of a repository containing information about an item represented by the electronic product code, wherein the computer readable program when executed on a computer causes the computer to:

issue a security certificate to each of one or more parties that are authorized to use the repository; and

in response to a party among the one or more parties sensing the electronic product code, create a record in the repository, the record representing the sensing of the electronic product code and including a security certificate belonging to the party that sensed the electronic product code.

9. The computer program product of claim 8, wherein the computer readable program when executed on a computer further causes the computer to:

store a data sharing attribute with each record in the repository, the data sharing attribute specifying a subset of parties among the one or more parties that has permission to access the record.

10. The computer program product of claim 8, wherein creating a record includes creating a record immediately upon a party among the one or more parties sensing an electronic product code for the first time.

11. The computer program product of claim 8, wherein the subset of parties specified by the data sharing attribute includes all parties authorized to use the repository.

12. The computer program product of claim 8, wherein the subset of parties specified by the data sharing attribute includes parties authorized to use the repository and which have sensed the electronic product code associated with the record.

13. A computer-implemented method for managing security and privacy associations between an electronic product code value and an address of a repository containing information about an item represented by the electronic product code, the method comprising:

providing a service interface that includes a plurality of services enabling secure traceability of the item represented by the electronic product code, the service interface further defining mechanisms for secure and privacy-preserving network access to the records in the repository by one or more querying parties.

14. The method of claim 13, wherein the service interface includes a Notify service for storing a new record in the repository when a party senses an electronic product code that the party has not sensed before.

15. The method of claim 13, wherein the service interface includes a Get all addresses service for obtaining data about what parties have sensed a particular electronic product code.

16. The method of claim 13, wherein the service interface includes a Get first address service for obtaining data about the first party to notify the repository about the existence of a particular electronic product code.

17. The method of claim 13, wherein the service interface includes a Get last address service for obtaining data about the party that currently has custody of an item with a particular electronic product code.

18. The method of claim 13, wherein the service interface includes a Get my records service for obtaining data about which electronic product codes a querying party has sensed.

19. The method of claim 13, wherein the service interface includes a Get my record service for obtaining data about the record belonging to the querying party for a particular electronic product code, if such a record exists in the repository.

20. The method of claim 13, wherein the service interface includes a Change visibility service for changing a data visibility attribute belonging to the querying party for a particular electronic product code.

21. The method of claim 13, wherein the service interface includes a Delete my record service for removing a record belonging to the querying party for a particular electronic product code.

22. The method of claim 13, wherein the service interface includes a Delete my old records service for removing from the repository any records belonging to the querying party having a timestamp lower than a current timestamp.

23. A computer program product comprising a computer useable medium including a computer readable program, for managing security and privacy associations between an electronic product code value and an address of a repository containing information about an item represented by the electronic product code, wherein the computer readable program when executed on a computer causes the computer to:

provide a service interface that includes a plurality of services enabling secure traceability of the item represented by the electronic product code, the service interface further defining mechanisms for secure and privacy-preserving network access to the records in the repository by one or more querying parties.

24. The method of claim 23, wherein the service interface is a web service interface.

25. The method of claim 23, wherein the service interface is an application programming interface.

26. A discovery service operable to provide a mapping from an electronic product code number to a set of electronic product code information services that include event information and item information about the electronic product code number, the discovery service comprising:

a database containing records that represent a first sensing of the electronic product code by the respective electronic product code information services, each record including a security certificate belonging to the electronic product code information service that sensed the electronic product code, and a data sharing attribute specifying a subset of electronic product code information services that has permission to access the record;

a service interface through which electronic product code information services and applications can access the records in accordance with the specified data sharing attributes in each record, the service interface including plurality of services enabling secure traceability of the item represented by the electronic product code.

27. The discovery service of claim 26, wherein the service interface includes a Notify service for storing a new record in the repository when an electronic product code information service senses an electronic product code that the electronic product code information service has not sensed before.

28. The discovery service of claim 26, wherein the service interface includes a Get all addresses service for obtaining data about what electronic product code information services have sensed a particular electronic product code.

29. The discovery service of claim 26, wherein the service interface includes a Get first address service for obtaining data about the first electronic product code information service to notify the repository about the existence of a particular electronic product code.

30. The discovery service of claim 26, wherein the service interface includes a Get last address service for obtaining data about the electronic product code information service that currently has custody of an item with a particular electronic product code.

31. The discovery service of claim 26, wherein the service interface includes a Get my records service for obtaining data about which electronic product codes a querying electronic product code information service has sensed so far.

32. The discovery service of claim 26, wherein the service interface includes a Get my record service for obtaining data about the record belonging to the querying electronic product code information service for a particular electronic product code, if such a record exists in the repository.

33. The discovery service of claim 26, wherein the service interface includes a Change visibility service for changing the data attribute belonging to the querying electronic product code information service for a particular electronic product code.

34. The discovery service of claim 26, wherein the service interface includes a Delete my record service for removing a record belonging to the querying electronic product code information service for a particular electronic product code.

35. The discovery service of claim 26, wherein the service interface includes a Delete my old records service for removing from the repository any records belonging to the querying electronic product code information service having a timestamp is lower than a current timestamp.