Item tracing with supply chain secrecy using RFID tags and an identity-based encryption scheme

• US 8,060,758 B2
• Filed: 06/30/2008
• Issued: 11/15/2011
• Est. Priority Date: 06/30/2008
• Status: Active Grant

• Current Assignee: SAP SE
• Original Assignee: SAP AG (SAP SE)
• Inventors: Kerschbaum, Florian, Chaves, Leonardo Weiss Ferreira
• Primary Examiner(s): Barron, Jr.; Gilberto
• Assistant Examiner(s): Cribbs; Malcolm
• Application Number:
  US12/164,589
• Publication Number:
  US 20090323928A1
• Time in Patent Office: 1,233 Days
• Field of Search: 726/34, 726/35, 713/194, 380/202, 705 56- 58, 235/375, 235/376, 235383-385
• US Class Current: 713/194
• CPC Class Codes: G06Q 10/06 Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling

Abstract

A method for tracing an item may include encrypting item information using an identity-based encryption scheme with a batch number for an item as an encryption key and communicating the encrypted item information for storage on a radio frequency identification (RFID) tag for attachment to the item.

Claims

1. A method for tracing an item, the method comprising:

encrypting item information using an identity-based encryption scheme with a batch number for an item as a private encryption key; and

communicating the encrypted item information for storage on a radio frequency identification (RFID) tag for attachment to the item, wherein;

the RFID tag includes multiple different pieces of encrypted item information from multiple different producers, wherein each of the producers uses their own batch number as a private encryption key to encrypt the item information using the identity-based encryption scheme, and

each of the multiple different pieces of encrypted item information is independently accessible and decryptable.

2. The method as in claim 1 further comprising re-encrypting the encrypted item information using the identity-based encryption scheme to re-randomize the encrypted item information.

3. The method as in claim 1 wherein the encrypted item information includes item recall information.

4. The method as in claim 1 wherein the identity-based encryption scheme includes a Boneh-Franklin encryption scheme.

5. The method as in claim 1 wherein the identity-based encryption scheme includes a Boneh-Boyen-Goh encryption scheme.

6. The method as in claim 1 further comprising communicating the batch number to a trusted third party.

7. The method as in claim 1 further comprising generating a decryption key using the batch number.

8. The method as in claim 1 further comprising issuing a recall of the item by generating a decryption key using the batch number and making the decryption key available to users of the item.

9. A method for re-encrypting item information, the method comprising:

receiving encrypted item information;

re-encrypting the encrypted item information using an identity-based encryption scheme to re-randomize the encrypted item information;

communicating the re-encrypted item information for storage on a radio frequency identification (RFID) tag;

encrypting new item information using the identity-based encryption scheme with a batch number for a new item as a private encryption key; and

communicating the encrypted new item information to the RFID tag.

10. The method as in claim 9 the identity-based encryption scheme includes a Boneh-Franklin encryption scheme.

11. The method as in claim 9 wherein the identity-based encryption scheme includes a Boneh-Boyen-Goh encryption scheme.

12. The method as in claim 9 wherein:

the RFID tag includes multiple different pieces of encrypted item information; and

each of the multiple different pieces of encrypted item information is independently accessible and decryptable.

13. A radio frequency identification (RFID) tag, comprising:

a receiver module that is arranged and configured to receive multiple different pieces of encrypted item information from multiple different producers, wherein each of the producers uses their own batch number as a private encryption key to encrypt the item information; and

a storage module that is arranged and configured to store the multiple different pieces of encrypted item information, wherein each of the multiple different pieces of encrypted item information is independently accessible and decryptable.

14. The RFID tag of claim 13 wherein each of the multiple different pieces of encrypted item information is re-encrypted using an identity-based encryption scheme to re-randomize the pieces of encrypted item information.

15. The RFID tag of claim 13 wherein the RFID tag is a passive RFID tag.

16. The RFID tag of claim 13 wherein the RFID tag is an active RFID tag.

17. A computer program product for encrypting item information, the computer program product being tangibly embodied on a non-transitory computer-readable medium and including executable code that, when executed, is configured to cause at least one data processing apparatus to execute an encryption module, the encryption module configured to:

encrypt item information using an identity-based encryption scheme with a batch number for an item as a private encryption key; and

communicate the encrypted item information for storage on a radio frequency identification (RFID) tag for attachment to the item, wherein;

the RFID tag includes multiple different pieces of encrypted item information from multiple different producers, wherein each of the producers uses their own batch number as a private encryption key to encrypt the item information using the identity-based encryption scheme, and

each of the multiple different pieces of encrypted item information is independently accessible and decryptable.

18. The computer program product of claim 17 wherein the computer program product further includes executable code that, when executed, is configured to cause the at least one data processing apparatus to execute a re-encryption module, the re-encryption module configured to:

re-encrypt the encrypted item information using the identity-based encryption scheme to re-randomize the encrypted item information.