Secure sharing of data along supply chains

• US 8,745,370 B2
• Filed: 06/28/2010
• Issued: 06/03/2014
• Est. Priority Date: 06/28/2010
• Status: Active Grant

• Current Assignee: SAP SE
• Original Assignee: SAP AG (SAP SE)
• Inventors: Chaves, Leonardo Weiss F., Bolland, Benjamin, Thies, Hannes, Wichmann, Pascal, Loes, Christian
• Primary Examiner(s): CERVETTI, DAVID GARCIA
• Application Number:
  US12/824,427
• Publication Number:
  US 20110320805A1
• Time in Patent Office: 1,436 Days
• Field of Search: 713/150, 380/283, 380/259
• US Class Current: 713/150
• CPC Class Codes: G06Q 10/087 Inventory or stock management, e.g. order filling, procurement or balancing against orders
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying

Abstract

Implementations of methods of sharing data in a supply chain, the data corresponding to an item having a tag associated therewith, include generating data corresponding to the item, generating a data reference, encrypting the data using an encryption key to provide encrypted data, transmitting the encrypted data over a network for storage in a database based on the data reference, writing the data reference and the encryption key to the tag, and transferring the item to a successor in the supply chain. Implementations include retrieving information electronically stored on the tag, the information comprising a data reference and an encryption key, transmitting a data request over a network for retrieving encrypted data from a database, the data request comprising the data reference, receiving the encrypted data from the database, and decrypting the encrypted data using the encryption key to provide decrypted data.

Claims

1. A computer-implemented method of sharing data in a supply chain, the data corresponding to an item having a tag associated therewith, the method comprising:

generating data comprising historical data associated with the item, the historical data being accumulated and passed on from partner to partner in the supply chain;

generating a data reference;

encrypting the data using an encryption key to provide encrypted data;

transmitting the encrypted data over a network for storage at a location in a database based on the data reference;

writing the data reference and the encryption key to the tag, the encrypted data being absent from the tag; and

transferring the item to a successor in the supply chain.

2. The method of claim 1, wherein generating a data reference comprises linking the encryption key and a tag ID using a reference function.

3. The method of claim 2, wherein generating a data reference further comprises linking a timestamp with the encryption key and the tag ID.

4. The method of claim 1, further comprising:

accessing encrypted data stored in the database; and

decrypting the encrypted data using a decryption key.

5. The method of claim 4, wherein the encryption key is the same as the decryption key.

6. The method of claim 1, wherein writing comprises replacing a previous encryption key with the encryption key.

7. The method of claim 1, wherein writing comprises replacing a previous data reference with the data reference.

8. The method of claim 1, further comprising:

receiving the item from a predecessor in the supply chain;

retrieving information electronically stored on the tag, the information comprising a previous data reference and a previous encryption key;

determining the location of previous encrypted data in the database based on the previous data reference;

transmitting a data request over the network for retrieving the previous encrypted data from the determined location in the database, the data request comprising the previous data reference;

receiving the previous encrypted data from the database;

decrypting the previous encrypted data using the previous encryption key to provide decrypted data; and

adding data associated with a second supply chain process of the item to the decrypted data.

9. A computer-implemented method of sharing data in a supply chain, the data corresponding to an item having a tag associated therewith, the method comprising:

retrieving information electronically stored on the tag, the information comprising a data reference and an encryption key;

transmitting a data request over a network for retrieving encrypted data from a database, the data request comprising the data reference;

receiving the encrypted data from the database, the encrypted data being absent from the tag and comprising historical data associated with the item, the historical data being accumulated and passed on from partner to partner in the supply chain; and

decrypting the encrypted data using the encryption key to provide decrypted data.

10. The method of claim 9, further comprising:

generating additional data corresponding to the item;

appending the additional data to the decrypted data to provide updated data;

generating a second data reference;

encrypting the updated data using a second encryption key to provide second encrypted data;

transmitting the second encrypted data over the network for storage in the database based on the second data reference;

writing the second data reference and the second encryption key to the tag; and

transferring the item to a successor in the supply chain.

11. The method of claim 10, wherein generating a data reference comprises linking the encryption key and a tag ID using a reference function.

12. The method of claim 11, wherein generating a data reference further comprises linking a timestamp with the encryption key and the tag ID.

13. The method of claim 10, further comprising:

accessing encrypted data stored in the database; and

decrypting the encrypted data using a decryption key.

14. The method of claim 13, wherein the encryption key is the same as the decryption key.

15. The method of claim 10, wherein writing comprises replacing a previous encryption key with the encryption key.

16. The method of claim 10, wherein writing comprises replacing a previous data reference with the data reference.

17. A non-transitory computer-readable storage medium coupled to one or more processors having instructions stored thereon which, when executed by the one or more processors, cause the one or more processors to perform operations for sharing data in a supply chain, the data corresponding to an item having a tag associated therewith, the operations comprising:

retrieving information electronically stored on the tag, the information comprising a data reference and an encryption key;

transmitting a data request over a network for retrieving encrypted data from a database, the data request comprising the data reference;

receiving the encrypted data from the database, the encrypted data being absent from the tag and comprising historical data associated with the item, the historical data being accumulated and passed on from partner to partner in the supply chain; and

decrypting the encrypted data using the encryption key to provide decrypted data.

18. The computer-readable storage medium of claim 17, wherein the operations further comprise:

generating additional data corresponding to the item;

appending the additional data to the decrypted data to provide updated data;

generating a second data reference;

encrypting the updated data using a second encryption key to provide second encrypted data;

transmitting the second encrypted data over the network for storage in the database based on the second data reference; and

writing the second data reference and the second encryption key to the tag before the item is transferred to a successor in the supply chain.