Merchandise-integral transaction receipt

• US 8,258,924 B2
• Filed: 03/13/2007
• Issued: 09/04/2012
• Est. Priority Date: 11/21/2003
• Status: Active Grant

• Current Assignee: Toshiba Global Commerce Solutions Holdings Corporation (Toshiba Corporation)
• Original Assignee: International Business Machines Corporation
• Inventors: Hind, John R., Stockton, Marcia L.
• Primary Examiner(s): Khan, Omer S
• Application Number:
  US11/685,514
• Publication Number:
  US 20070152033A1
• Time in Patent Office: 2,002 Days
• Field of Search: 340/10.1, 705/30, 705/50, 235/376
• US Class Current: 340/10.1
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 30/00 Commerce
• CPC Class Codes: G06Q 40/12 Accounting

Abstract

Techniques are disclosed for writing data directly onto a product to record each ownership transfer. As a result, the product itself now carries a traceable, auditable, non-forgeable, non-repudiable proof of ownership (and, optionally, ownership history) that can be used in a variety of ways. This recorded ownership transfer information provides an electronic receipt, which may be used by the present owner to prove his or her ownership. (Optionally, other types of transfers may be recorded in addition to, or instead of, ownership transfers.) A transfer agent or registrar creates a unique transaction identifier to represent the transfer, and preferably creates a cryptographic signature over fields representing the transfer. This information is then recorded in a repository that is external from the product.

Claims

1. A system for establishing a secure electronic transaction receipt for a product, comprising:

a computer comprising a processor; and

instructions which are executable, using the processor, to implement functions comprising;

accessing a product-integral ownership record stored in a memory on the product;

providing at least a portion of the accessed ownership record, and information pertaining to a current transfer of the product, to a registrar for identifying, from the provided at least a portion, a current owner of the product;

receiving, from the registrar responsive to successful validation of the current owner, ownership information for the current transfer of the product, the received ownership information reflecting a new owner of the product as the current owner and specifying a non-changeable globally-unique identifier computed by the registrar to represent the current transfer, the received ownership information comprising a cryptographic signature computed over data pertaining to the current transfer, the data including the globally-unique identifier representing the current transfer, and the data pertaining to the current transfer;

securely revising the product-integral ownership record to reflect the new owner of the product, pursuant to the current transfer of the product, comprising appending the non-changeable globally-unique identifier computed by the registrar to represent the current transfer to the product-integral ownership record stored in the memory on the product; and

logging a record of the current transfer in an audit repository, wherein;

the record comprises the cryptographic signature computed over the data pertaining to the current transfer, the data including the globally-unique identifier representing the current transfer, and the data pertaining to the current transfer; and

the globally-unique identifier is used as an index for logging the record in the audit repository, in addition to being appended to the product-integral ownership record stored in the memory on the product.

2. The system according to claim 1, wherein the product-integral ownership record is access-protected using control fields stored therein to dictate, for a plurality of fields of the product-integral ownership record, which of the fields are updateable and which of the fields are not.

3. The system according to claim 1, wherein the memory is contained in a radio-frequency identification device which is integral to the product.

10. The system according to claim 1, wherein:

the globally-unique identifier is computed from values comprising a unique identifier of the registrar, a date of the current transfer, and a time of the current transfer; and

the date and the time are provided to the registrar in the information pertaining to the current transfer.

4. A computer-implemented method for establishing a secure electronic transaction receipt for a product, comprising using a processor of a computer for:

accessing a product-integral ownership record stored in a memory on the product;

providing at least a portion of the accessed ownership record, and information pertaining to a current transfer of the product, to a registrar for identifying, from the provided at least a portion, a current owner of the product;

receiving, from the registrar responsive to successful validation of the current owner, ownership information for the current transfer of the product, the received ownership information reflecting a new owner of the product as the current owner and specifying a non-changeable globally-unique identifier computed by the registrar to represent the current transfer, the received ownership information comprising a cryptographic signature computed over data pertaining to the current transfer, the data including the globally-unique identifier representing the current transfer, and the data pertaining to the current transfer;

securely revising the product-integral ownership record to reflect the new owner of the product, pursuant to the current transfer of the product, comprising appending the non-changeable globally-unique identifier computed by the registrar to represent the current transfer to the product-integral ownership record stored in the memory on the product; and

logging a record of the current transfer in an audit repository, wherein;

the record comprises the cryptographic signature computed over the data pertaining to the current transfer, the data including the globally-unique identifier representing the current transfer, and the data pertaining to the current transfer; and

the globally-unique identifier is used as an index for logging the record in the audit repository, in addition to being appended to the product-integral ownership record stored in the memory on the product.

5. The computer-implemented method according to claim 4, wherein the product-integral ownership record is access-protected using control fields stored therein to dictate, for a plurality of fields of the product-integral ownership record, which of the fields are updateable and which of the fields are not.

6. The computer-implemented method according to claim 4, wherein the memory is contained in a radio-frequency identification device which is integral to the product.

7. A computer program product for establishing a secure electronic transaction receipt for a product, the computer program product comprising:

a non-transitory computer readable storage medium having computer readable program code embodied therein, the computer readable program code configured for;

accessing a product-integral ownership record stored in a memory on the product;

providing at least a portion of the accessed ownership record, and information pertaining to a current transfer of the product, to a registrar for identifying, from the provided at least a portion, a current owner of the product;

receiving, from the registrar responsive to successful validation of the current owner, ownership information for the current transfer of the product, the received ownership information reflecting a new owner of the product as the current owner and specifying a non-changeable globally-unique identifier computed by the registrar to represent the current transfer, the received ownership information comprising a cryptographic signature computed over data pertaining to the current transfer, the data including the globally-unique identifier representing the current transfer, and the data pertaining to the current transfer;

securely revising the product-integral ownership record to reflect the new owner of the product, pursuant to the current transfer of the product, comprising appending the non-changeable globally-unique identifier computed by the registrar to represent the current transfer to the product-integral ownership record stored in the memory on the product; and

logging a record of the current transfer in an audit repository, wherein;

the record comprises the cryptographic signature computed over the data pertaining to the current transfer, the data including the globally-unique identifier representing the current transfer, and the data pertaining to the current transfer; and

the globally-unique identifier is used as an index for logging the record in the audit repository, in addition to being appended to the product-integral ownership record stored in the memory on the product.

8. The computer program product according to claim 7, wherein the product-integral ownership record is access-protected using control fields stored therein to dictate, for a plurality of fields of the product-integral ownership record, which of the fields are updateable and which of the fields are not.

9. The computer program product according to claim 7, wherein the memory is contained in a radio-frequency identification device which is integral to the product.

11. A system for establishing a secure electronic transaction receipt for a product, comprising:

means for accessing a product-integral ownership record stored in a memory on the product;

means for providing at least a portion of the accessed ownership record, and information pertaining to a current transfer of the product, to a registrar for identifying, from the provided at least a portion, a current owner of the product;

means for receiving, from the registrar responsive to successful validation of the current owner, ownership information for the current transfer of the product, the received ownership information reflecting a new owner of the product as the current owner and specifying a non-changeable globally-unique identifier computed by the registrar to represent the current transfer, the received ownership information comprising a cryptographic signature computed over data pertaining to the current transfer, the data including the globally-unique identifier representing the current transfer, and the data pertaining to the current transfer;

means for securely revising the product-integral ownership record to reflect the new owner of the product, pursuant to the current transfer of the product, comprising appending the non-changeable globally-unique identifier computed by the registrar to represent the current transfer to the product-integral ownership record stored in the memory on the product; and

means for logging a record of the current transfer in an audit repository, wherein;

the record comprises the cryptographic signature computed over the data pertaining to the current transfer, the data including the globally-unique identifier representing the current transfer, and the data pertaining to the current transfer; and

the globally-unique identifier is used as an index for logging the record in the audit repository, in addition to being appended to the product-integral ownership record stored in the memory on the product.