This invention relates generally to electronic product codes (“EPCs”). More particularly, this invention relates to the use of EPCs to establish Electronic Pedigree (“ePedigree”) for products in a supply chain.
Certifying a product's chain of custody is becoming a requirement for distributing many health-related products, such as pharmaceuticals. For example, Florida law requires a paper-based chain of custody. Electronic-based chain of custody systems are being proposed.
Proof of chain of custody can be an unwieldy process for pharmaceutical wholesalers and distributors. One of the difficulties in implementing the law, and achieving a real improvement in product safety from counterfeits, is dealing with the common case where a full shipment arrives with an overall bulk pedigree, but the shipment is subsequently divided for shipment to multiple downstream parties. Any pedigree provided for the downstream customers would have to include the full upstream pedigree. This is an invitation to subvert the system because there is no way to prove whether any individual product was part of the original bulk shipment. In effect, the incoming pedigree could be duplicated to cover not only legitimate downstream shipments but also large numbers of non-compliant products entered into the legitimate supply chain. In addition, even for legitimate businesses, passing a bulk pedigree discloses otherwise private business information.
One approach to solving issues regarding ePedigree deployment is to employ stand-alone ePedigree servers at individual product distributors. A drawback of this approach is that a standards-compliant network would likely have to be established to support pedigree across the many stand-alone ePedigree servers. The cost to implement a network of stand-alone ePedigree servers is prohibitive.
In view of the foregoing, it would be desirable to provide a reliable technique for electronically certifying and securing custody in product supply chains.
The invention includes a method of defining custody information for a product. The method includes generating a pedigree element, combining the pedigree element with a signature to produce an Advanced Pedigree Notice (APN) message, incorporating the pedigree element into an Electronic Product Code (EPC) tag, and applying the EPC tag to a product. The APN message and the product are routed to a distributor. The distributor compares the EPC tag to the APN message to verify the product.
The invention also includes a method of certifying custody of a product. The method includes receiving an Advanced Pedigree Notice (APN) message including a signature and a global identifier via a computer network. A shipment of a plurality of products each having a specific global identifier in an Electronic Product Code (EPC) tag is received. The global identifier from the APN message is matched with the specific global identifier, thereby certifying receipt of at least one of the products from an originator.
The invention is more fully appreciated in connection with the following detailed description taken in conjunction with the accompanying drawings, in which:
Like reference numerals refer to corresponding parts throughout the several views of the drawings. Note that most of the reference numerals include one or two left-most digits that generally identify the figure that first introduces that reference number.
Various embodiments of the invention implement some or all of the requirements of the emerging Electronic Product Code Information Service (EPCIS) standard, which is a specification for a standard interface for accessing EPC related information. The EPCIS standard will be adopted by many trading parties in many industries. Therefore, the development and deployment costs will be spread widely. As such, specifications and standards of EPCglobal, Inc., which is a joint venture between EAN International and the Uniform Code Council, Inc. can be applicable.
In a specific embodiment, each serialized item is associated with an EPC tag (e.g., an RFID or barcode), which has a cryptographically signed ePedigree segment for each change in custody. Advantageously, secure and individualized (“SAI”) ePedigrees of various embodiments cannot be simply duplicated as they are linked to a specific (i.e., individualized) serial number for the product. A suitable serial number is the serialized global trade identification number (“SGTIN”). In at least one embodiment, the ePedigree carries the full custody history of the item but is not required to disclose information about other products contained in the same shipment(s), thereby maintaining privacy of the sender. In one embodiment, ePedigree information is encapsulated in a message, such as an “Advanced Pedigree Notice” (“APN message”), which can be carried in an EPCIS event in a standard way. No additional networks or protocols need be built for ePedigree server communication. Further, ePedigree field in the EPCIS event carries sufficient, cryptographically certified, information to reconstruct a full chain of paper pedigrees. Each digital signature encompasses both the shipper and the recipient of each custody change. In this formulation, both the shipper and receiver independently sign. This gives a cryptographically secured “double-linked chain” from the originator through each stage of distribution to the last point in the chain.
In some embodiments, methods of the various embodiments can be extended to interoperate with paper-based pedigree. A new ePedigree variant can be introduced so that a distributor certifies that they had a paper pedigree for a certain step in the chain. Further, a method for using SAI ePedigress in at least one embodiment can be implemented with bulk (non-serialized) shipments. Authentication of a pharmaceutical product is complemented by verification of ePedigree for a comprehensive approach to safe and secure supply chain. Because at least one embodiment of the electronic pedigree can be associated with a single saleable pharmaceutical item, the methods support supply chain operations that are necessary to move homogenous shipments (i.e., shipping container contents originate from a single trading partner) and heterogeneous shipments (i.e., shipping container contents originate from multiple trading partners).
PE generator 100 is configured to generate an “Advanced Pedigree Notice” (“APN message”) 110, which includes a signature 112 (e.g., a digital signature), a GID 114, a number of attributes 116 including product and custody information (e.g., date of certification), and chain of custody information (“custodial chain”) 118. PE generator 100 is also configured to generate an EPC tag 120, which at least includes a GID 114. Generally, the APN message is transmitted over a computer network independent of the product, which includes the EPC tag 120.
Next, a distributor receives APN message 220 and also receives the shipment with the EPC Item at 224. Next, the distributor checks the custody information inside the APN message 220 with the shipment information at 222. That is, the distributor verifies that the GID and the one or more attributes in the pedigree element uniquely identify the product shipment, as described by the EPC tag.
Then, the distributor adds its own custody information at 226 to the pedigree of the EPC Item (which already contains the originator/Manufacturer Custody information) with a Certification Type set to “Receipt Certificate” at 228. When the distributor ships the product, the distributor adds its own Custody information at 226 to the pedigree of the EPC Item with Certification Type set to “Ship Certificate” at 230. The distributor sends an APN message 232 with the above pedigree information tied to the EPC Item. The distributor then adds the ship certificate 230 to the product at 240. The product is then shipped to a target destination, such as a pharmacy.
The target (e.g., the pharmacy) receives the APN message 250 and receives the shipment with the EPC Item at 254. Then, the pharmacy checks the Custody information inside the APN message with the shipment information at 252 to verify and/or match the signature and GID of the APN message to the GID of the EPC on the item. Next, the pharmacy adds its own Custody information at 256 to the pedigree of the EPC Item with Certification Type set to “Receipt Authentication” at 258.
Exemplary XSD Schemas are provided in the Appendices. Appendices A and B are the first two schemas (EPCglobal.xsd and EPCIS.xsd) set forth and are controlled by EPCglobal standards. Appendix C is an example of a schema (HLS.xsd) according to an embodiment of the invention. Appendix D is an example of an SAI pedigree (ePedigree.xml). Those skilled in the art will appreciate that the Appendices facilitate extending EPCglobal specifications to enable SAI ePedigree exchanges across and between partners, vertically in the supply chain as well as horizontally.
The foregoing description, for purposes of explanation, used specific nomenclature to provide a thorough understanding of the invention. However, it will be apparent to one skilled in the art that specific details are not required in order to practice the invention. In fact, this description should not be read to limit any feature or aspect of the invention to any embodiment; rather features and aspects of one embodiment may readily be interchanged with other embodiments. For example, although the above descriptions of the various embodiments relate to pharmaceuticals, it is intended to apply to any product for which certifying a chain of custody is paramount, such as shipping hazardous chemicals and weapons. Also, the various embodiments are applicable to communication signals other than radio frequencies.
Thus, the foregoing descriptions of specific embodiments of the invention are presented for purposes of illustration and description. They are not intended to be exhaustive or to limit the invention to the precise forms disclosed; obviously, many modifications and variations are possible in view of the above teachings. The embodiments were chosen and described in order to best explain the principles of the invention and its practical applications; they thereby enable others skilled in the art to best utilize the invention and various embodiments with various modifications as are suited to the particular use contemplated. Notably, not every benefit described herein need be realized by each embodiment of the invention; rather any specific embodiment can provide one or more of the advantages discussed above. It is intended that the following claims and their equivalents define the scope of the invention.
Appendices A, B, C and D are intended form at least a part of this disclosure.
This application claims the benefit of U.S. Provisional Patent Application No. 60/685,186, filed May 27, 2005, entitled, “Method, Apparatus, System and Computer Readable Medium for Certifying and Securing Custody in Product Supply Chains,” the contents of which are incorporated herein by reference.
Number | Date | Country | |
---|---|---|---|
60685186 | May 2005 | US |