Enterprise-based access to shared RFID data

• US 8,639,825 B2
• Filed: 12/29/2006
• Issued: 01/28/2014
• Est. Priority Date: 12/29/2006
• Status: Active Grant

• Current Assignee: SAP SE
• Original Assignee: SAP AG (SAP SE)
• Inventors: Winkler, Steve
• Primary Examiner(s): Burgess, Glenton B.
• Application Number:
  US11/647,143
• Publication Number:
  US 20080157931A1
• Time in Patent Office: 2,587 Days
• Field of Search: 709/200, 709/217, 709/229, 705/22, 705/28, 707/736, 707/754, 707/757, 726/26, 726/27
• US Class Current: 709/229
• CPC Class Codes: G06Q 10/06 Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling

Abstract

An electronic product code information service (EPCIS) interface is provided, where the EPCIS interface is capable of allowing one or more accessing applications residing on a variety of systems and associated with a plurality of enterprises to receive EPC-related data. Also provided is an enterprise profile for each enterprise that is allowed to receive the EPC-related data. An enterprise is authenticated based on its enterprise profile. A query is performed to generate a result set that is within an extent permitted by access authorization associated with the authenticated enterprise. The result set is then provided to the EPCIS accessing application of that enterprise.

Claims

1. A method for providing enterprise-based data access to Electronic Product Code (EPC)-related data, comprising:

providing an Electronic Product Code Information Service (EPCIS) interface that allows one or more accessing applications residing on a variety of systems and associated with a plurality of enterprises to receive EPC-related data;

providing an enterprise profile for each enterprise allowed to receive the EPC-related data, wherein each enterprise profile describes a different enterprise and each enterprise is described by only one enterprise profile, such that there is a one-to-one correspondence between enterprises and enterprise profiles, and further wherein each enterprise profile identifies an enterprise name, at least one authorized user, and all available EPC-related data associated with the enterprise;

receiving, from one of the accessing applications of a requesting enterprise of the plurality of enterprises, a request for EPC-related data;

authenticating the requesting enterprise based on its enterprise profile, wherein authenticating comprises determining an access authorization level based on the enterprise profile associated with the requesting enterprise, wherein the access authorization level is modifiable by at least one of the plurality of enterprises that grants the requesting enterprise permission to access its data;

generating a result set including a subset of the available EPC-related data identified in the enterprise profile within an extent permitted by the access authorization level associated with the requesting enterprise by at least one of;

querying the EPC-related data after determining the access authorization level, wherein the query is based on the determined access authorization level; and

querying the EPC-related data before determining the access authorization level and then filtering the result of the query based on the access authorization level; and

providing, via the EPCIS interface, the result set to the accessing application.

2. The method of claim 1, wherein filtering the result of the query comprises redacting at least a portion of the result set.

3. The method of claim 1, wherein filtering the result of the query comprises removing at least a portion of the result set.

4. The method of claim 1, wherein filtering the result of the query comprises making the result set more high level than the result of the query.

5. The method of claim 1, wherein the method further comprises providing the accessing application with a discovery service configured to locate at least one source of EPC-related data relevant to the request from the accessing application.

6. The method of claim 1, wherein the method further comprises implementing a push model, wherein providing the result set responds to a standing query associated with the accessing application.

7. A system for providing enterprise-based data access to Electronic Product Code (EPC)-related data, comprising:

a memory; and

a computer processor programmed to;

provide an Electronic Product Code Information Service (EPCIS) interface that allows one or more accessing applications residing on a variety of systems and associated with a plurality of enterprises to receive EPC-related data;

provide an enterprise profile for each enterprise allowed to receive the EPC-related data, wherein each enterprise profile describes a different enterprise and each enterprise is described by only one enterprise profile, such that there is a one-to-one correspondence between enterprises and enterprise profiles, and further wherein each enterprise profile identifies an enterprise name, at least one authorized user, and all available EPC-related data associated with the enterprise;

receive, from one of the accessing applications of a requesting enterprise of the plurality of enterprises, a request for EPC-related data;

authenticate the requesting enterprise based on its enterprise profile, wherein authenticating comprises determining an access authorization level based on the enterprise profile associated with the requesting enterprise, wherein the access authorization level is modifiable by at least one of the plurality of enterprises that grants the requesting enterprise permission to access its data;

generate a result set including a subset of the available EPC-related data identified in the enterprise profile within an extent permitted by the access authorization level associated with the requesting enterprise by at least one of;

querying the EPC-related data after determining the access authorization level, wherein the query is based on the determined access authorization level; and

querying the EPC-related data before determining the access authorization level and then filtering the result of the query based on the access authorization level; and

provide, via the EPCIS interface, the result set to the accessing application.

8. The system of claim 7, wherein filtering the result of the query comprises redacting at least a portion of the result set.

9. The system of claim 7, wherein filtering the result of the query comprises removing at least a portion of the result set.

10. The system of claim 7, wherein filtering the result of the query comprises making the result set more high level than the result of the query.

11. The system of claim 7, wherein the processor is further configured to provide the accessing application with a discovery service configured to locate at least one source of EPC-related data relevant to the request from the accessing application.

12. The system of claim 7, wherein the processor is further configured to implement a push model, wherein providing the result set responds to a standing query associated with the accessing application.

17. The non-transitory computer-readable medium of claim 9, wherein the method further comprises providing the accessing application with a discovery service configured to locate at least one source of EPC-related data relevant to the request from the accessing application.

13. A non-transitory computer-readable medium including instructions for performing, when executed by a processor, a method for providing enterprise-based data access to Electronic Product Code (EPC)-related data, the method comprising:

providing an Electronic Product Code Information Service (EPCIS) interface that allows one or more accessing applications residing on a variety of systems and associated with a plurality of enterprises to receive EPC-related data;

providing an enterprise profile for each enterprise allowed to receive the EPC-related data, wherein each enterprise profile describes a different enterprise and each enterprise is described by only one enterprise profile, such that there is a one-to-one correspondence between enterprises and enterprise profiles, and further wherein each enterprise profile identifies an enterprise name, at least one authorized user, and all available EPC-related data associated with the enterprise;

receiving, from one of the accessing applications of a requesting enterprise of the plurality of enterprises, a request for EPC-related data;

authenticating the requesting enterprise based on its enterprise profile, wherein authenticating comprises determining an access authorization level based on the enterprise profile associated with the requesting enterprise, wherein the access authorization level is modifiable by at least one of the plurality of enterprises that grants the requesting enterprise permission to access its data;

generating a result set including a subset of the available EPC-related data identified in the enterprise profile within an extent permitted by the access authorization level associated with the requesting enterprise by at least one of;

querying the EPC-related data after determining the access authorization level, wherein the query is based on the determined access authorization level; and

querying the EPC-related data before determining the access authorization level and then filtering the result of the query based on the access authorization level; and

providing, via the EPCIS interface, the result set to the accessing application.

14. The non-transitory computer-readable medium of claim 13, wherein the method further comprises filtering the result of the query comprises redacting at least a portion of the result set.

15. The non-transitory computer-readable medium of claim 13, wherein the method further comprises filtering the result of the query comprises removing at least a portion of the result set.

16. The non-transitory computer-readable medium of claim 13, wherein the method further comprises filtering the result of the query comprises making the result set more high level than the result of the query.