Merchandise-integral transaction receipt and auditable product ownership trail

• US 7,225,167 B2
• Filed: 11/21/2003
• Issued: 05/29/2007
• Est. Priority Date: 11/21/2003
• Status: Active Grant

• Current Assignee: Toshiba Global Commerce Solutions Holdings Corporation (Toshiba Corporation)
• Original Assignee: International Business Machines Corporation
• Inventors: Hind, John R., Stockton, Marcia L.
• Primary Examiner(s): Worjloh; Jalatee
• Application Number:
  US10/718,942
• Publication Number:
  US 20050114270A1
• Time in Patent Office: 1,285 Days
• Field of Search: 705 50- 79, 380200-203, 726 26- 33
• US Class Current: 705/64
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 30/00 Commerce
• CPC Class Codes: G06Q 40/12 Accounting

Abstract

Techniques are disclosed for writing data directly onto a product to record each ownership transfer. As a result, the product itself now carries a traceable, auditable, non-forgeable, non-repudiable proof of ownership (and, optionally, ownership history) that can be used in a variety of ways. This recorded ownership transfer information provides an electronic receipt, which may be used by the present owner to prove his or her ownership. (Optionally, other types of transfers may be recorded in addition to, or instead of, ownership transfers.) A transfer agent or registrar creates a unique transaction identifier to represent the transfer, and preferably creates a cryptographic signature over fields representing the transfer. This information is then recorded in a repository that is external from the product.

Claims

1. A computer program product for providing an auditable trail of product transfers, the computer program product embodied on one or more computer-readable media and comprising:

computer-readable program code for computing, for each transfer of a particular product, a globally-unique identifier for the transfer and a cryptographic signature over one or more values describing the transfer;

computer-readable program code for recording, for each of the transfers, the cryptographic signature, the globally-unique identifier, and zero or more of the values in an ownership transfer record in a product-integral ownership repository an the particular product, wherein the ownership transfer record is access-protected using control fields to dictate which of the cryptographic signature, the globally-unique identifier, and the zero or more of the values are updateable and which are not;

computer-readable program code for recording an audit record for each of the transfers in an audit repository, wherein the audit record for each of the transfers comprises the cryptographic signature, the globally-unique identifier, and the one or more values describing the transfer; and

computer-readable program code for tracing transfers of the particular product using each of the audit records that pertains to the particular product.

2. The computer program product according to claim 1, wherein each audit record that pertains to the particular product further comprises a second globally-unique identifier which was computed for a most-recent previous transfer of the particular product, and wherein the computer-readable program code for tracing further comprises iteratively using the second globally-unique identifier, when processing the audit record, to locate the audit record which records the most-recent previous transfer.

3. The computer program product according to claim 1, wherein the audit record for each of the transfers further comprises an additional globally-unique identifier that was computed for a most-recent previous transfer of the particular product.

4. The computer program product according to claim 1, wherein the product-integral ownership repository comprises a memory of a radio frequency identification device.

5. The computer program product according to claim 1, wherein the product-integral ownership repository comprises a memory of a machine-readable identification device.

6. The computer program product according to claim 1, wherein the globally-unique identifier computed for each transfer is usable as an index for retrieving the audit record for that transfer from the audit repository.

7. A method for providing an auditable trail of product transfers, comprising steps of:

computing, for each transfer of a particular product, a globally-unique identifier for the transfer and a cryptographic signature over one or more values describing the transfer;

recording, for each of the transfers, the cryptographic signature, the globally-unique identifier, and zero or more of the values in an ownership transfer record in a product-integral ownership repository on the particular product, wherein the ownership transfer record is access-protected using control fields to dictate which of the cryptographic signature, the globally-unique identifier, and the zero or more of the values are updateable and which are not;

recording an audit record for each of the transfers in an audit repository, wherein the audit record for each of the transfers comprises the cryptographic signature, the globally-unique identifier, and the one ore more values describing the transfer; and

tracing transfers of the particular product using each of the audit records that pertains to the particular product.

8. The method according to claim 7, wherein each audit record that pertains to the particular product further comprises a second globally-unique identifier which was computed for a most-recent previous transfer of the particular product, and wherein the tracing step further comprises iteratively using the second globally-unique identifier, when processing the audit record, to locate the audit record which records the most-recent previous transfer.

9. The method according to claim 7, wherein the audit record for each of the transfers further comprises an additional globally-unique identifier that was computed for a most-recent previous transfer of the particular product.

10. The method according to claim 7, wherein the product-integral ownership repository comprises a memory of a radio frequency identification device.

11. The method according to claim 7, wherein the product-integral ownership repository comprises a memory of a machine-readable identification device.

12. The method according to claim 7, wherein the globally-unique identifier computed for each transfer is usable as an index for retrieving the audit record for that transfer from the audit repository.

13. A system an auditable trail of product transfers, comprising:

means for computing, for each transfer of a particular product a globally-unique identifier for the transfer and a cryptographic signature over one or more;

values describing the transfer;

means for recording, for each of the transfers, the cryptographic signature, the globally-unique identifier, and zero or more of the values in an ownership transfer record in a product-integral ownership repository on the particular product, wherein the ownership transfer record is access-protected using control fields to dictate which of the cryptographic signature, the globally-unique identifier, and the zero or more of the values are updateable and which are not;

means for recording an audit record for each of the transfers in an audit repository, wherein the audit record for each of the transfers comprises the cryptographic signature, the globally-unique identifier, and the one or more values describing the transfer; and

means for tracing transfers of the particular product using each of the audit records that pertains to the particular product.

14. The system according to claim 13, wherein each audit record that pertains to the particular product further comprises a second globally-unique identifier which was computed for a most-recent previous transfer of the particular product, and wherein the means for tracing further comprises iteratively using the second globally-unique identifier, when processing the audit record, to locate the audit record which records the most-recent previous transfer.

15. The system according to claim 13, wherein the audit record for each of the transfers further comprises an additional globally-unique identifier that was computed for a most-recent previous transfer of the particular product.

16. The system according to claim 13, wherein the product-integral ownership repository comprises a memory of a radio frequency identification device.

17. The system according to claim 13, wherein the product-integral ownership repository comprises a memory of a machine-readable identification device.

18. The system according to claim 13, wherein the globally-unique identifier computed for each transfer is usable as an index for retrieving the audit record for that transfer from the audit repository.