Consumer-controlled data access to shared RFID data

• US 20080157932A1
• Filed: 12/29/2006
• Published: 07/03/2008
• Est. Priority Date: 12/29/2006
• Status: Active Grant

• Current Assignee: SAP SE
• Original Assignee: SAP AG (SAP SE)
• Inventors: Winkler, Steve
• Granted Patent: US 8,555,397 B2
• Time in Patent Office: Days
• US Class Current: 340/10.6
• CPC Class Codes: G06Q 10/06 Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling

Abstract

An electronic product code information service (EPCIS) interface is provided, where the EPCIS interface allows accessing applications residing on a variety of systems and associated with a plurality of enterprises/organizations to receive EPC-related data. Also provided is a consumer security profile in which access authorization governing the extent of data collection and/or access by an entity to EPC-related consumer data is specified. Access by an accessing application may be allowed within an extent permitted by access authorization specified in the consumer security profile.

Claims

1. A method for providing restricted data collection and access to sensor-related data with respect to a consumer, comprising:

providing an interface capable of allowing one or more accessing applications residing on a variety of systems and associated with a plurality of enterprises/organizations to receive sensor-related data;

providing a consumer security profile that specifies access authorization with regard to collection and/or access of sensor-related data associated with a consumer; and

allowing an accessing application to collect and/or access the sensor-related data associated with the consumer through the interface within an extent permitted by the access authorization specified in the consumer security profile.

2. The method of claim 1, wherein the consumer security profile is established by the consumer through a website.

3. The method of claim 1, wherein the consumer security profile is managed by a central consumer security profile directory.

4. The method of claim 1, wherein the access authorization is specified based on a role of an entity using the accessing application to collect and/or access the sensor-related data associated with the consumer.

5. The method of claim 1, wherein the accessing authorization is specified based on default security levels.

6. A system for providing restricted data collection and access to sensor-related data with respect to a consumer, comprising:

a processor configured to;

provide an interface capable of allowing one or more accessing applications residing on a variety of systems and associated with a plurality of enterprises/organizations to receive sensor-related data;

provide a consumer security profile that specifies access authorization with regard to collection and/or access of sensor-related data associated with a consumer; and

allow an accessing application to collect and/or access the sensor-related data associated with the consumer through the interface within an extent permitted by the access authorization specified in the consumer security profile.

7. The system of claim 6, wherein the consumer security profile is established by the consumer through a website.

8. The system of claim 6, wherein the consumer security profile is managed by a central consumer security profile directory.

9. The system of claim 6, wherein the access authorization is specified based on a role of an entity using the accessing application to collect and/or access the sensor-related data associated with the consumer.

10. The system of claim 6, wherein the accessing authorization is specified based on default security levels.

11. A computer-readable medium including instructions for performing, when executed by a processor, a method for providing restricted data collection and access to sensor-related data with respect to a consumer, the method comprising:

providing an interface capable of allowing one or more accessing applications residing on a variety of systems and associated with a plurality of enterprises/organizations to receive sensor-related data;

providing a consumer security profile that specifies access authorization with regard to collection and/or access of sensor-related data associated with a consumer; and

allowing an accessing application to collect and/or access the sensor-related data associated with the consumer through the interface within an extent permitted by the access authorization specified in the consumer security profile.

12. The computer-readable medium of claim 11, wherein the consumer security profile is established by the consumer through a website.

13. The computer-readable medium of claim 11, wherein the consumer security profile is managed by a central consumer security profile directory.

14. The computer-readable medium of claim 11, wherein the access authorization is specified based on a role of an entity using the accessing application to collect and/or access the sensor-related data associated with the consumer.

15. The computer-readable medium of claim 11, wherein the accessing authorization is specified based on default security levels.