Methods and devices for monitoring the integrity of an article during transporting said article

• US 9,294,283 B2
• Filed: 08/27/2012
• Issued: 03/22/2016
• Est. Priority Date: 08/31/2011
• Status: Active Grant

• Current Assignee: Berlinger & Co. AG
• Original Assignee: Q-Tag, AG
• Inventors: Oertli, Christian
• Primary Examiner(s): Jhaveri, Jayesh
• Application Number:
  US13/595,535
• Publication Number:
  US 20130080784A1
• Time in Patent Office: 1,303 Days
• Field of Search: 713/175, 713/176
• US Class Current: 1/1
• CPC Class Codes: G06F 21/55 Detecting local intrusion or implementing counter-measures
• CPC Class Codes: G06F 21/56 Computer malware detection or handling, e.g. anti-virus arrangements
• CPC Class Codes: G06F 21/566 Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06F 2221/2135 Metering
• CPC Class Codes: G06Q 10/08 Logistics, e.g. warehousing, loading or distribution; Inventory or stock management
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

The method for obtaining information relating to the integrity of an article (2) as assessed from an exposure of said article (2) to physical or environmental conditions during a time span during which said article (2) is transported comprises

• a) providing a device (1) to be located in proximity to said article (2) during said transport, digital certificate data (C) and first digital private key data (K1*) being stored in said device (1);
• d) storing in said device (1) data (I) related to said physical or environmental conditions, said data being referred to as integrity data (I);
• e) creating within said device (1) first digitally signed data (DS1) by digitally signing data comprising said integrity data (I) and said digital certificate data (C), using said first digital private key data (K1*);
• f) storing said first digitally signed data (DS1) in said device (1).

A high degree of security against malpractice and data falsification can be achieved. A corresponding device (1) is also presented.

Claims

1. A method for obtaining information relating to an integrity of an article as assessed from an exposure of said article to physical or environmental conditions during a time span during which said article is transported, said method comprising the steps of:

a) providing a device to be located in proximity to said article during said transport, digital certificate data and first digital private key data being stored in said device;

d) storing in said device data related to said physical or environmental conditions, said data being referred to as integrity data;

e) creating within said device first digitally signed data by digitally signing data comprising said integrity data and said digital certificate data, using said first digital private key data, by;

e1) creating first hash data by applying a first hash function to data comprising said integrity data and said digital certificate data;

e2) creating first signature data by encrypting said first hash data by means of said first digital private key data; and

e3) obtaining said first digitally signed data by joining said data comprising said integrity data and said digital certificate data with said first signature data;

f) storing said first digitally signed data in said device;

g) by means of at least one sensor, creating data representative of said physical or environmental conditions at various times during said time span, and a data set comprising said data being referred to as environmental data;

h) obtaining said integrity data from said environmental data, by;

h1) obtaining data referred to as integrity raw data by processing said environmental data; and

h2) obtaining said integrity data from said integrity raw data;

i) receiving in said device an indication that an end of said time span is reached, wherein the step h2) is carried out in reaction to said receiving of said indication;

j) obtaining said integrity data in dependence of predescribed limitations for the exposure of said article to said physical or environmental conditions; and

p) digitally verifying said integrity data comprised in said first digitally signed data using first digital public key data, said first digital public key data being associated with said first digital private key data.

2. The method according to claim 1, wherein said integrity data is text-representing data.

3. The method according to claim 1, wherein said integrity data is identical with or different from said environmental data.

4. The method according to claim 1, wherein the step h1) is carried out during said time span.

5. The method according to claim 1, wherein the processing mentioned in the step h1) is carried out in dependence of predescribed limitations for the exposure of said article to said physical or environmental conditions.

6. The method according to claim 1, wherein said digital certificate data comprises second digitally signed data created by digitally signing first content data using second digital private key data.

7. The method according to claim 6, wherein said digitally signing said first content data comprises the steps of:

x1) creating second hash data by applying a second hash function to said first content data;

x2) creating second signature data by encrypting said second hash data by means of said second digital private key data; and

x3) obtaining said second digitally signed data by joining said first content data with said second signature data.

8. The method according to claim 6, further comprising the step of:

n) digitally verifying said first content data comprised in said first digitally signed data using second digital public key data, said second digital public key data being associated with said second digital private key data.

9. The method according to claim 6, wherein said first content data comprises first digital public key data, said first digital public key data being associated with said first digital private key data.

10. The method according to claim 7, further comprising the step of:

n) digitally verifying said first content data comprised in said first digitally signed data using second digital public key data, said second digital public key data being associated with said second digital private key data;

wherein the step n) comprises the steps of;

n1) obtaining further hash data by applying said second hash function to said first content data;

n2) obtaining decrypted data by decrypting said second signature data using said second digital public key data; and

n3) comparing said further hash data with said decrypted data.

11. The method according to claim 1, wherein said physical or environmental conditions comprise a temperature.

12. The method according to claim 1, wherein said digital certificate data is digitally signed data.

13. A device for obtaining information relating to an integrity of an article as assessed from an exposure of said article to physical or environmental conditions during a time span during which said article is transported, said device comprising a programmed microprocessor, and a storage unit in which

digital certificate data

first digital private key data;

and

first digitally signed data

are stored, wherein said first digitally signed data is obtained by digitally signing data comprising integrity data and said digital certificate data, using said first digital private key data, wherein said integrity data is data related to said physical or environmental conditions, the storage unit structured and configured to store a set of instructions, which when executed by the programmed microprocessor, causes the device to perform;

creating within said device said first digitally signed data by digitally signing data comprising said integrity data and said digital certificate data, using said first digital private key data, by;

creating first hash data by applying a first hash function to data comprising

said integrity data and said digital certificate data;

creating first signature data by encrypting said first hash data by means of said first digital private key data;

obtaining said first digitally signed data by joining said data comprising said integrity data and said digital certificate data with said first signature data;

receiving, from at least one sensor, data representative of said physical or environmental conditions at various times during said time span, and a data set comprising said data being referred to as environmental data;

obtaining said integrity data from said environmental data, by;

obtaining data referred to as integrity raw data by processing said environmental data;

obtaining said integrity data from said integrity raw data;

receiving in said device an indication that an end of said time span is reached, wherein the obtaining said integrity data from said integrity raw data is carried out in reaction to said receiving of said indication; and

obtaining said integrity data in dependence of predescribed limitations for the exposure of said article to said physical or environmental conditions.

14. The device according to claim 13, wherein said digital certificate data comprises second digitally signed data created by digitally signing data comprising first digital public key data using second digital private key data, said first digital public key data being associated with said first digital private key data.

15. The device according to claim 13, wherein said device comprises the at least one sensor for sensing said physical or environmental conditions.

16. The device according to claim 13, wherein said device comprises a control unit structured and configured for digitally signing data.

17. The device according to claim 13, wherein in said storage unit, predescribed limitations for the exposure of said article to said physical or environmental conditions are stored.

18. The device according to claim 13, wherein said digital certificate data is digitally signed data.

19. A device for obtaining information relating to an integrity of an article as assessed from an exposure of said article to physical or environmental conditions during a time span during which said article is transported, said device comprising:

a control unit structured and configured for;

digitally signing data comprising integrity data and digital certificate data using first digital private key data, wherein said integrity data is data related to said physical or environmental conditions;

creating within said device first digitally signed data by digitally signing data comprising said integrity data and said digital certificate data, using said first digital private key data, by;

creating first hash data by applying a first hash function to data comprising said integrity data and said digital certificate data;

creating first signature data by encrypting said first hash data by means of said first digital private key data;

obtaining said first digitally signed data by joining said data comprising said integrity data and said digital certificate data with said first signature data;

storing said first digitally signed data in said device;

a storage unit configured for storing the digital certificate data and the first digital private key data, wherein the device is located in proximity to said article during said transport; and

at least one sensor for sensing said physical or environmental conditions configured to create data representative of said physical or environmental conditions at various times during said time span, and a data set comprising said data being referred to as environmental data,

wherein said control unit is further structured and configured for;

obtaining said integrity data from said environmental data, by;

obtaining data referred to as integrity raw data by processing said environmental data; and

obtaining said integrity data from said integrity raw data;

receiving in said device an indication that an end of said time span is reached, wherein the obtaining said integrity data from said integrity raw data is carried out in reaction to said receiving of said indication; and

obtaining said integrity data in dependence of predescribed limitations for the exposure of said article to said physical or environmental conditions.

20. The device according to claim 19, wherein said control unit is structured and configured for carrying out said digitally signing of data in reaction to receiving said indication that the end of said time span is reached.

21. The device according to claim 19, wherein said integrity data is text-representing data related to said physical or environmental conditions, and wherein said integrity data is different from said environmental data.

22. The device according to claim 19, wherein said digital certificate data is digitally signed data.