SYSTEMS AND METHODS FOR IMPLEMENTING SUPPLY CHAIN VISIBILITY POLICIES

• US 20100329464A1
• Filed: 06/29/2009
• Published: 12/30/2010
• Est. Priority Date: 06/29/2009
• Status: Active Grant

• Current Assignee: SAP SE
• Original Assignee: SAP AG (SAP SE)
• Inventors: Kerschbaum, Florian
• Granted Patent: US 9,159,046 B2
• Time in Patent Office: Days
• US Class Current: 380/279
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect
• CPC Class Codes: G06F 3/1204 resulting in reduced user or operator actions, e.g. presetting, automatic actions, using hardware token storing data
• CPC Class Codes: G06Q 10/087 Inventory or stock management, e.g. order filling, procurement or balancing against orders

Abstract

Methods, storage medium and systems for implementing visibility policies within a supply chain include storing event data on a computer-readable storage medium of a first partner, the event data corresponding to at least one event associated with an item while the item was in possession of the first partner, the item having traveled through the supply chain, transferring evidence of possession between the plurality of partners as the item travels through the supply chain, and requesting access to the event data by a second partner. Implementations further include determining that the item traveled through a portion of the supply chain based on the evidence, authenticating an identity of the second partner, and authorizing the second partner to access the first event data, when it is determined that the item traveled through the portion of the supply chain and when the identity of the second party is authenticated.

Claims

1. A method for implementing visibility policies within a supply chain that includes a plurality of partners, comprising:

storing event data on a computer-readable storage medium of a first partner, the event data corresponding to at least one event associated with an item while the item was in possession of the first partner, the item having traveled through the supply chain;

transferring evidence of possession of the item between the plurality of partners as the item travels through the supply chain;

requesting access to the event data by a second partner;

determining that the item traveled through a portion of the supply chain associated with at least the first partner and the second partner, based on the evidence;

authenticating an identity of the second partner; and

authorizing the second partner to access the first event data from the computer-readable storage medium, when determining that the item traveled through the portion of the supply chain and when the identity of the second party is authenticated.

2. The method of claim 1, wherein the evidence includes proofs of possession corresponding to the second partner and any intermediate partners between the first partner and the second partner along the portion of the supply chain.

3. The method of claim 1, wherein determining whether the portion of the supply chain is valid is further based on chaining tokens that are generated by each of the first and second partners, and any intermediate partners between the first partner and the second partner along the portion of the supply chain.

4. The method of claim 1, further comprising generating a proof of possession corresponding to the second partner as one of a signature-based proof of possession, a shared secret proof of possession, a token-based proof of possession and a time-based proof of possession, the evidence comprising the proof of possession.

5. The method of claim 4, wherein the shared secret proof of possession and the time-based proof of possession are generated based on communication between the second partner and a trusted third party.

6. The method of claim 4, wherein the signature-based proof of possession is generated based on a signature generated by a tag associated with the item, the shared secret proof of possession is generated based on a secret that is shared between a tag associated with the item and a first trusted third party, and the time-based proof of possession is generated based on a random challenge sent to a second trusted third party and a timestamp issued by the second trusted third party.

7. The method of claim 1, further comprising:

encrypting the event data by the first partner;

obtaining a decryption key from a trusted third party based on the evidence; and

decrypting the event data using the decryption key by the second partner.

8. A computer-readable storage medium coupled to one or more processors and having instructions stored thereon which, when executed by the one or more processors, cause the one or more processors to perform operations comprising:

storing event data on a computer-readable storage medium of a first partner, the event data corresponding to at least one event associated with an item while the item was in possession of the first partner, the item having traveled through the supply chain;

transferring evidence of possession of the item between the plurality of partners as the item travels through the supply chain;

requesting access to the event data by a second partner;

determining that the item traveled through a portion of the supply chain associated with at least the first partner and the second partner, based on the evidence;

authenticating an identity of the second partner; and

authorizing the second partner to access the first event data from the computer-readable storage medium, when determining that the item traveled through the portion of the supply chain and when the identity of the second party is authenticated.

9. The storage medium of claim 8, wherein the evidence includes proofs of possession corresponding to the second partner and any intermediate partners between the first partner and the second partner along the portion of the supply chain.

10. The storage medium of claim 8, wherein determining whether the portion of the supply chain is valid is further based on chaining tokens that are generated by each of the first and second partners, and any intermediate partners between the first partner and the second partner along the portion of the supply chain.

11. The storage medium of claim 8, further comprising generating a proof of possession corresponding to the second partner as one of a signature-based proof of possession, a shared secret proof of possession, a token-based proof of possession and a time-based proof of possession, the evidence comprising the proof of possession.

12. The storage medium of claim 11, wherein the shared secret proof of possession and the time-based proof of possession are generated based on communication between the second partner and a trusted third party.

13. The storage medium of claim 11, wherein the signature-based proof of possession is generated based on a signature generated by a tag associated with the item, the shared secret proof of possession is generated based on a secret that is shared between a tag associated with the item and a first trusted third party, and the time-based proof of possession is generated based on a random challenge sent to a second trusted third party and a timestamp issued by the second trusted third party.

14. The storage medium of claim 8, further comprising:

encrypting the event data by the first partner;

obtaining a decryption key from a trusted third party based on the evidence; and

decrypting the event data using the decryption key by the second partner.

15. A system for implementing visibility policies within a supply chain that includes a plurality of partners, comprising:

one or more processors; and

a computer-readable storage medium coupled to the one or more processors having instructions stored thereon which, when executed by the one or more processors, cause the one or more processors to perform operations comprising;

storing event data on a computer-readable storage medium of a first partner, the event data corresponding to at least one event associated with an item while the item was in possession of the first partner, the item having traveled through the supply chain;

transferring evidence of possession between the plurality of partners as the item travels through the supply chain;

requesting access to the event data by a second partner;

determining that the item traveled through a portion of the supply chain associated with at least the first partner and the second partner, based on the evidence;

authenticating an identity of the second partner; and

authorizing the second partner to access the first event data from the computer-readable storage medium, when it is determined that the item traveled through the portion of the supply chain and when the identity of the second party is authenticated.

16. The system of claim 15, wherein the evidence includes proofs of possession corresponding to the second partner and any intermediate partners between the first partner and the second partner along the portion of the supply chain.

17. The system of claim 15, wherein determining whether the portion of the supply chain is valid is further based on chaining tokens that are generated by each of the first and second partners, and any intermediate partners between the first partner and the second partner along the portion of the supply chain.

18. The system of claim 15, further comprising generating a proof of possession corresponding to the second partner as one of a signature-based proof of possession, a shared secret proof of possession, a token-based proof of possession and a time-based proof of possession, the evidence comprising the proof of possession.

19. The system of claim 18, wherein the shared secret proof of possession and the time-based proof of possession are generated based on communication between the second partner and a trusted third party.

20. The system of claim 18, wherein the signature-based proof of possession is generated based on a signature generated by a tag associated with the item, the shared secret proof of possession is generated based on a secret that is shared between a tag associated with the item and a first trusted third party, and the time-based proof of possession is generated based on a random challenge sent to a second trusted third party and a timestamp issued by the second trusted third party.