Consumer-controlled data access to shared RFID data

• US 8,555,397 B2
• Filed: 12/29/2006
• Issued: 10/08/2013
• Est. Priority Date: 12/29/2006
• Status: Active Grant

• Current Assignee: SAP SE
• Original Assignee: SAP AG (SAP SE)
• Inventors: Winkler, Steve
• Primary Examiner(s): Arani, Taghi
• Assistant Examiner(s): LEE, JASON T
• Application Number:
  US11/647,193
• Publication Number:
  US 20080157932A1
• Time in Patent Office: 2,475 Days
• Field of Search: 726/4, 726/26, 705/22, 705/26, 340/10.6
• US Class Current: 726/26
• CPC Class Codes: G06Q 10/06 Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling

Abstract

An electronic product code information service (EPCIS) interface is provided, where the EPCIS interface allows accessing applications residing on a variety of systems and associated with a plurality of enterprises/organizations to receive EPC-related data. Also provided is a consumer security profile in which access authorization governing the extent of data collection and/or access by an entity to EPC-related consumer data is specified. Access by an accessing application may be allowed within an extent permitted by access authorization specified in the consumer security profile.

Claims

1. A method for providing restricted data collection and access to sensor-related data with respect to a consumer, comprising:

providing an interface allowing one or more accessing applications residing on a variety of systems and associated with a plurality of enterprises/organizations to receive sensor-related data;

receiving sensor-related data associated with a consumer;

determining whether a consumer security profile exists for the consumer;

based on a determination that no consumer security profile exists for the consumer, automatically establishing a new consumer security profile that specifies access authorization with regard to collection and access of sensor-related data associated with the consumer, wherein the consumer is distinct from the plurality of enterprises/organizations associated with the one or more accessing applications, and further wherein the access authorization is specified based on a role of an entity using the accessing application to collect and access the sensor-related data associated with the consumer;

allowing the consumer to modify the new consumer security profile; and

allowing an accessing application to collect and access the sensor-related data associated with the consumer through the interface within an extent permitted by the access authorization specified in the new consumer security profile.

2. The method of claim 1, wherein the new consumer security profile is modified by the consumer through a website.

3. The method of claim 1, wherein the new consumer security profile is managed by a central consumer security profile directory.

4. The method of claim 1, wherein the accessing authorization is specified based on default security levels.

5. A system for providing restricted data collection and access to sensor-related data with respect to a consumer, comprising:

a memory; and

a processor configured to;

provide an interface allowing one or more accessing applications residing on a variety of systems and associated with a plurality of enterprises/organizations to receive sensor-related data;

receive sensor-related data associated with a consumer;

determine whether a consumer security profile exists for the consumer;

based on a determination that no consumer security profile exists for the consumer, automatically establish a new consumer security profile that specifies access authorization with regard to collection and access of sensor-related data associated with the consumer, wherein the consumer is distinct from the plurality of enterprises/organizations associated with the one or more accessing applications, and further wherein the access authorization is specified based on a role of an entity using the accessing application to collect and access the sensor-related data associated with the consumer;

allow the consumer to modify the new consumer security profile; and

allow an accessing application to collect and access the sensor-related data associated with the consumer through the interface within an extent permitted by the access authorization specified in the new consumer security profile.

6. The system of claim 5, wherein the new consumer security profile is modified by the consumer through a website.

7. The system of claim 5, wherein the new consumer security profile is managed by a central consumer security profile directory.

8. The system of claim 5, wherein the accessing authorization is specified based on default security levels.

9. A non-transitory computer-readable medium including instructions for performing, when executed by a processor, a method for providing restricted data collection and access to sensor-related data with respect to a consumer, the method comprising:

providing an interface allowing one or more accessing applications residing on a variety of systems and associated with a plurality of enterprises/organizations to receive sensor-related data;

receiving sensor-related data associated with a consumer;

determining whether a consumer security profile exists for the consumer;

based on a determination that no consumer security profile exists for the consumer, automatically establishing a new consumer security profile that specifies access authorization with regard to collection and access of sensor-related data associated with the consumer, wherein the consumer is distinct from the plurality of enterprises/organizations associated with the one or more accessing applications, and further wherein the access authorization is specified based on a role of an entity using the accessing application to collect and access the sensor-related data associated with the consumer;

allowing the consumer to modify the new consumer security profile; and

allowing an accessing application to collect and access the sensor-related data associated with the consumer through the interface within an extent permitted by the access authorization specified in the new consumer security profile.

10. The non-transitory computer-readable medium of claim 9, wherein the new consumer security profile is modified by the consumer through a website.

11. The non-transitory computer-readable medium of claim 9, wherein the new consumer security profile is managed by a central consumer security profile directory.

12. The non-transitory computer-readable medium of claim 9, wherein the accessing authorization is specified based on default security levels.