Role-based access to shared RFID data

• US 20080157933A1
• Filed: 12/29/2006
• Published: 07/03/2008
• Est. Priority Date: 12/29/2006
• Status: Active Grant

• Current Assignee: SAP SE
• Original Assignee: SAP AG (SAP SE)
• Inventors: Winkler, Steve
• Granted Patent: US 8,555,398 B2
• Time in Patent Office: Days
• US Class Current: 340/10.6
• CPC Class Codes: G06Q 10/08 Logistics, e.g. warehousing, loading or distribution; Inventory or stock management
• CPC Class Codes: G06Q 10/087 Inventory or stock management, e.g. order filling, procurement or balancing against orders
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 50/04 Manufacturing
• CPC Class Codes: Y02P 90/30 Computing systems specially adapted for manufacturing

Abstract

An electronic product code information service (EPCIS) interface is provided, where the EPCIS interface is capable of allowing one or more accessing applications residing on a variety of systems and associated with a plurality of enterprises/organizations to receive EPC-related data. One or more roles of an entity attempting to receive EPC-related data through the interface may be identified. A query may be performed to generate a result set within an extent permitted by access authorization associated with the identified roles of the entity.

Claims

1. A method for providing role-based data access to sensor-related data, comprising:

providing an interface capable of allowing one or more accessing applications residing on a variety of systems and associated with a plurality of enterprises/organizations to receive sensor-related data;

identifying one or more roles of an entity attempting to receive sensor-related data generate by a query through the interface using an accessing application;

performing the query to generate a result set within an extent permitted by access authorization associated with the identified one or more roles of the entity; and

providing the result set to the accessing application through the interface.

2. The method of claim 1, wherein the entity is an enterprise/organization.

3. The method of claim 1, wherein the entity is an individual associated with an enterprise/organization.

4. The method of claim 1, wherein the entity is a sub-organization associated with an enterprise/organization.

5. The method of claim 1, wherein the one or more roles associated with the entity is defined in relation to other entities from whom the entity is to receive sensor-related data.

6. The method of claim 1, wherein the result set provided to the accessing application through the interface is redacted based on the access authorization associated with the identified one or more roles.

7. The method of claim 1, wherein a portion of the result set provided to the accessing application through the interface is removed based on the access authorization associated with the identified one or more roles.

8. A system for providing role-based data access to sensor-related data, comprising:

a processor configured to;

providing an interface capable of allowing one or more accessing applications residing on a variety of systems and associated with a plurality of enterprises/organizations to receive sensor-related data;

identifying one or more roles of an entity attempting to receive sensor-related data generate by a query through the interface using an accessing application;

performing the query to generate a result set within an extent permitted by access authorization associated with the identified one or more roles of the entity; and

providing the result set to the accessing application through the interface.

9. The system of claim 8, wherein the entity is an enterprise/organization.

10. The system of claim 8, wherein the entity is an individual associated with an enterprise/organization.

11. The system of claim 8, wherein the entity is a sub-organization associated with an enterprise/organization.

12. The system of claim 8, wherein the one or more roles associated with the entity is defined in relation to other entities from whom the entity is to receive EPC-related data.

13. The system of claim 8, wherein the result set provided to the accessing application through the interface is redacted based on the access authorization associated with the identified one or more roles.

14. The system of claim 8, wherein a portion of the result set provided to the accessing application through the interface is removed based on the access authorization associated with the identified one or more roles.

15. A computer-readable medium including instructions for performing, when executed by a processor, a method for providing role-based data access to sensor-related data, the method comprising:

providing an interface capable of allowing one or more accessing applications residing on a variety of systems and associated with a plurality of enterprises/organizations to receive sensor-related data;

identifying one or more roles of an entity attempting to receive sensor-related data generate by a query through the interface using an accessing application;

performing the query to generate a result set within an extent permitted by access authorization associated with the identified one or more roles of the entity; and

providing the result set to the accessing application through the EPCIS interface.

16. The computer-readable medium of claim 15, wherein the entity is an enterprise/organization.

17. The computer-readable medium of claim 15, wherein the entity is an individual associated with an enterprise/organization.

18. The computer-readable medium of claim 15, wherein the entity is a sub-organization associated with an enterprise/organization.

19. The computer-readable medium of claim 15, wherein the one or more roles associated with the entity is defined in relation to other entities from whom the entity is to receive sensor-related data.

20. The computer-readable medium of claim 15, wherein the result set provided to the accessing application through the interface is redacted based on the access authorization associated with the identified one or more roles.

21. The computer-readable medium of claim 15, wherein a portion of the result set provided to the accessing application through the interface is removed based on the access authorization associated with the identified one or more roles.