Traceability verification system, method and program for the same

• US 8,463,712 B2
• Filed: 08/05/2009
• Issued: 06/11/2013
• Est. Priority Date: 07/01/2005
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Saito, Mika, Watanabe, Yuji, Yuriyama, Madoka, Yoshizawa, Takeo
• Primary Examiner(s): Kalinowski, Alexander
• Assistant Examiner(s): DEGA, MURALI K
• Application Number:
  US12/536,483
• Publication Number:
  US 20100010933A1
• Time in Patent Office: 1,406 Days
• Field of Search: 705 1- 45, 705 50- 79
• US Class Current: 705/76
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 9/3255 using group based signatures, e.g. ring or threshold signatures
• CPC Class Codes: H04L 9/3265 using certificate chains, trees or paths; Hierarchical trust model

Abstract

A system for enabling verification in traceability of a supply chain while maintaining confidentiality of private suppliers. A group signature is applied to an undisclosed supplier. The undisclosed supplier previously receives registration to the certificate authority device, and performs a group signature based on the certificate issued by the certificate authority device. A disclosed supplier and the undisclosed supplier sign and generate a signature chain when they ship parts. A verifier device receives a signature chain with products shipped from the supplier manager device, divides a signature of the disclosed supplier from a signature chain, and verifies the undisclosed supplier from the group signature. Identification of the undisclosed supplier is performed by a third-party auditor system requested to do so by the verifier device by using a group private key.

Claims

1. A traceability system for using a certificate issued by a certificate authority device to trace a supply chain by a signature chain, the traceability system comprising at least one computer processor adapted to implement:

a signature chain for the supply chain issued by the certificate authority device, wherein in the supply chain a deliverer receives a supply of parts for products from disclosed suppliers and undisclosed private suppliers to at a delivery destination, the deliverer ships the products comprising the parts to at least one third party, the disclosed suppliers being identified to the third party and the undisclosed private suppliers being unidentified to the third party, the signature chain comprising;

a first signature based on a first individual certificate issued to a disclosed supplier device selected from the disclosed suppliers;

at least one second signature based on a group certificate issued by the certificate authority device, the group certificate being common to a plurality of the undisclosed private suppliers; and

a third signature based on a second individual certificate of a supplier manager after said signature chain is signed by the at least one second signature;

a verifier device configured to verify said signature chain while maintaining confidentiality of said private suppliers, wherein the verifying is based on a group public key received from said certificate authority device.

2. The traceability system according to claim 1, wherein the supplier manager is configured to register said private suppliers in said certificate authority device as a group.

3. The traceability system according to claim 1, further comprising:

wherein said verifier device is configured to verify said supplier manager by using a public key of said supplier manager device from said signature chain; and

wherein said verifier device is configured to request said group public key of said private suppliers from said certificate authority device, to divide signatures of the supplier manager and the disclosed supplier from said signature chain, and to verify said private suppliers as a group by using said public key.

4. The traceability system according to claim 1, wherein the verifier device includes a computer processor.

5. The traceability system according to claim 1, further comprising an auditor device for identifying said private suppliers.

6. The traceability system according to claim 5, wherein the auditor device is configured to identify said private suppliers and a flow between said private suppliers from said signature chain by said auditor device using a group private key of said private suppliers in response to said verifier device requesting said auditor device to identify said private suppliers.