WORKFLOW ASSURANCE AND AUTHENTICATION SYSTEM

• US 20100114780A1
• Filed: 08/03/2007
• Published: 05/06/2010
• Est. Priority Date: 08/03/2006
• Status: Abandoned Application

• Current Assignee: ITI Scotland Limited (Scottish Government)
• Original Assignee: ITI Scotland Limited (Scottish Government)
• Inventors: Winter, Mark, Winnington-Ingram, Peter, Freeman, Paul, Frey, Colin, Tribe, Raglan, McSpadden, Stephen, MacLauchlan, Ken
• Application Number:
  US12/375,201
• Publication Number:
  US 20100114780A1
• Time in Patent Office: Days
• US Class Current: 705/50
• CPC Class Codes: G06Q 10/06375 Prediction of business process outcome or impact based on a proposed change
• CPC Class Codes: G06Q 10/10 Office automation; Time management

Abstract

A method for authenticating a workflow that has one or more designated steps that require authentication of associated resources, the method comprising: using a reader instrument to read at least one security feature uniquely associated resources involved in the workflow; authenticating the security feature, thereby to authenticate its associated resource, and recording authentication information for each designated workflow step.

Claims

1. A method for authenticating a workflow that has one or more designated steps that require authentication of associated resources, the method comprising:

using a reader instrument to read at least one security feature uniquely associated resources involved in the workflow;

authenticating the security feature, thereby to authenticate its associated resource, and

recording authentication information for each designated workflow step.

2. A method as claimed in claim 1 comprising identifying the resource using a resource identifier.

3. A method as claimed in claim 2 wherein the security feature is included within the resource identifier.

4. A method as claimed in claim 2 wherein the resource identifier is unique to the resource with which it is associated.

5. A method as claimed in claim 2 wherein the resource identifier comprises at least one of a bar code;

an RFID tag;

a light sensitive tag;

a fluorescent tag;

or a unique number.

6. A method as claimed in claim 2 wherein the reader instrument is operable to read both the security feature and the resource identifier.

7. A method as claimed in claim 1 wherein the resource includes at least one of a user, a location, an item or an apparatus.

8. A method as claimed in claim 1 wherein the security feature includes an encryption key for use in the step of authenticating.

9. A method as claimed in claim 8 wherein the encryption key is one key of a public/private pair.

10. A method as claimed in claim 1 comprising authenticating the security feature using cryptographic coupling with one or more other security features.

11. A method as claimed in claim 2 comprising authenticating the security feature using cryptographic coupling with the resource identifier.

12. A method as claimed in claim 1 wherein the security feature is covert.

13. A method as claimed in claim 1 wherein the security feature is overt.

14. A method as claimed in claim 1 wherein two or more security features are provided for each resource.

15. A method as claimed in claim 1 wherein at least one security feature is provided on or at the resource and/or at least one security feature is provided remotely, for example at a remote server.

16. A method as claimed in claim 1 comprising issuing a certificate certifying that at least one workflow requirement has been met.

17. A method as claimed in claim 16 wherein the certificate is electronic and/or physical.

18. A method as claimed in claim 1 comprising allowing authentication of at least one of the designated steps only on completion of one or more preceding authentication steps.

19. A method as claimed in claim 1 comprising authenticating the security feature at the reader instrument.

20. A method as claimed in claim 1 comprising sending data captured by the reader instrument from the security feature to a remote location for authentication.

21. A system for authenticating a workflow that has one or more designated steps involving a plurality of resources, the system comprising:

means for reading a security feature uniquely associated with each resource involved in the workflow,

means for authenticating each security feature, thereby to authenticate its associated resource, and

means for recording authentication information for each designated workflow step.

22. A system as claimed in claim 21 comprising means for identifying the resource using a resource identifier associated with the resource.

23. A system as claimed in claim 22 wherein the resource identifier is unique to the resource with which it is associated.

24. A system as claimed in claim 21 wherein the resource identifier comprises at least one of a bar code;

an RFID tag;

a light sensitive tag;

a fluorescent tag;

or a unique number.

25. A system as claimed in claim 21 wherein the resource includes at least one of a user, a location, an item or an apparatus.

26. A system as claimed in claim 21 wherein the security feature includes an encryption key for use in authenticating the security feature.

27. A system as claimed in claim 21 wherein the resource identifier includes an encryption key for use in authenticating the security feature.

28. A system as claimed in claim 21 comprising a workflow authentication store for storing all recorded authentication information for the workflow.

29. A system as claimed in claim 21 wherein the means for reading the security feature comprise a reader instrument.

30. A system as claimed in claim 29 wherein the means for authenticating the security feature are in the reader instrument.

31. A system as claimed in claim 29 wherein the results of the authentication are stored remotely from the reader instrument.

32. A system as claimed in claim 29 wherein the reader instrument is operable to receive a workflow from a remote location.

33. A system as claimed in claim 21 comprising means for registering a new resource for use within the workflow system.

34. A system as claimed in claim 33 comprising means for applying one or more security features to a tag or marker associated with the resource being registered.

35. A system as claimed in claim 21 wherein the one or more security features are overt and/or covert.

36. A system as claimed as claimed in claim 21 wherein the or each security feature is machine-readable.

37. A system as claimed as claimed in claim 21 comprising means for issuing a secure certificate to indicate that one or more designated workflow steps are completed.

38. A system as claimed in claim 37 wherein the certificate is a digital certificate.

39. A system as claimed in claim 37 wherein the certificate is issued as an electronic and/or physical certificate.

40. A workflow authentication system configured to:

provide one or more workflows to a plurality of workflow stations, each workflow having one or more designated steps requiring authentication;

receive authentication information that has been captured from a security feature associated with a resource specified in at least one of the workflows, and

record authentication information for each designated workflow step.

41. A system as claimed in claim 40 wherein a plurality of workflow stations is provided and at least two of the workflows provided are sub-sets of another larger workflow.

42. A system as claimed in claim 40 wherein different workflows are provided to different workflow stations.

43. A system as claimed in claim 40 wherein the authentication information provided by a workflow station indicates that the workflow is authenticated.

44. A system as claimed in claim 40 wherein the authentication information provided by a workflow station is used together with other information to identify whether the workflow is authenticated.

45. A system as claimed in claim 40 wherein the or each workflow is downloaded to the reader instruments from a remote location.

46. A system as claimed in claim 40 wherein the or each workflow is digitally signed or encrypted.