System and method for controlling access to digital twinning of chemical products
By employing distributed data in a distributed network to provide network nodes with digital twin access to chemical products, and utilizing distributed digital twin identifiers and authorization rules, the efficiency and security issues of existing chemical product data exchange and sharing systems are resolved, achieving efficient and secure data sharing and access control.
Patent Information
- Application Number
- CN202480024651.6
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Priority Date
- 2023-04-12
- Filing Date
- 2024-03-28
- Publication Date
- 2025-11-14
AI Technical Summary
Existing chemical product data exchange and sharing systems, such as IMDS, suffer from static data, are prone to errors, and are cumbersome to process, making it difficult to efficiently and securely share and control data access in the chemical industry and supply chain.
The distributed data provision network nodes in the distributed network control the access of digital twins. Access control of digital twins is achieved through distributed digital twin identifiers and authorization rules. This includes a distributed digital twin identifier providing unit, a mapping data providing unit, and an access data generation unit, ensuring the secure exchange and sharing of data.
It enables efficient and secure sharing and control of chemical product data in a distributed network, allowing different participants to access digital twins at different granular levels, ensuring data owners' sovereign control over their data, and preventing unwanted access.
Smart Images

Figure CN120958773A_ABST
Abstract
Description
Technical Field
[0001] This disclosure relates to an apparatus and system for controlling access to a digital twin of a physical entity of a chemical product produced from one or more chemical input materials, and corresponding computer program elements; a computer-implemented method for controlling access to a digital twin of a physical entity of a chemical product produced from one or more chemical input materials, and corresponding computer program elements; a computer-implemented method for authorizing distributed data providing network nodes to access a digital twin of a physical entity of a chemical product, and corresponding apparatus and corresponding computer program elements; a computer-implemented method for processing a digital twin or a portion thereof of a physical entity of a chemical product, and corresponding computer program elements; and a computer-implemented method for authorizing distributed data consuming network nodes to access a digital twin or a portion thereof of a physical entity of a chemical product using a digital access element associated with the chemical product, and corresponding computer program elements. Background Technology
[0002] The supply of chemical products involves meeting a variety of regulatory requirements, which vary depending on the chemical. For example, in the automotive supply chain, chemical companies use the International Chemical Products Data System (IMDS) to provide standardized information. This system allows for the collection of data across the entire automotive supply chain. Participants in the automotive supply chain register for the IMDS service and maintain product entries in a central database provided and hosted by a third-party provider.
[0003] Data from systems like IMDS is static, error-prone, and cumbersome to process and maintain. Due to the highly specific and centralized setup of such systems, the exchange and sharing of chemical data is extremely difficult. Therefore, there is a need to simplify and / or customize the sharing or exchange of chemical product data from the chemical industry to participants in the chemical supply chain, while allowing data owners to control access to the data. Summary of the Invention
[0004] In one aspect, this disclosure relates to an apparatus for controlling access to a digital twin of a physical entity of a chemical product produced from one or more chemical input materials, wherein access to the digital twin by one or more distributed data consuming network nodes in a distributed network is controlled by a distributed data providing network node associated with the digital twin, and wherein the digital twin includes a distributed digital twin identifier and at least one measured physical and / or chemical property of the chemical product and / or at least one physical and / or chemical property determined based on collected data associated with the production and / or use of the chemical product, the apparatus comprising:
[0005] - At least one distributed digital twin identifier providing unit, the at least one distributed digital twin identifier providing unit being configured to provide the distributed digital twin identifier,
[0006] - At least one mapping data providing unit, configured to provide mapping data including data related to chemical products produced from the one or more chemical input materials, the data being associated with corresponding decentralized participant(s) identifiers associated with the decentralized participant(s)(s), wherein the mapping data is generated based on the data related to the chemical products produced from the one or more chemical input materials and the data related to the decentralized participant(s)(s).
[0007] - At least one access data generation unit, configured to generate access data for at least a portion of the digital twin based on the mapping data, wherein the access data includes the distributed digital twin identifier and one or more authorization rules associated with the distributed digital twin identifier, wherein the one or more authorization rules define the access and / or use of the digital twin by distributed data consuming network nodes associated with the distributed participant(s)(s) identifier(s) included in the mapping data for at least a portion of the digital twin.
[0008] - The distributed data providing network node associated with the digital twin, wherein the distributed data providing network node is configured to control access to at least a portion of the digital twin by one or more distributed data consuming network nodes based on generated access data.
[0009] On another front, this disclosure relates to a system for controlling access to a digital twin of a physical entity of a chemical product produced from one or more chemical input materials, wherein access to the digital twin by one or more distributed data consuming network nodes in a distributed network is controlled by a distributed data providing network node associated with the digital twin, and wherein the digital twin includes a distributed digital twin identifier and at least one measured physical and / or chemical property of the chemical product and / or at least one physical and / or chemical property determined based on collected data associated with the production and / or use of the chemical product, the system comprising:
[0010] - Optionally, a digital twin provider layer is configured to provide a digital twin of the physical entity of the chemical product.
[0011] - Access provider layer, which is configured as follows:
[0012] • Provide a distributed digital twin identifier included in the digital twin.
[0013] • Provide mapping data, which includes data related to chemical products produced from the one or more chemical input materials, and this data is associated with corresponding decentralized participant(s) identifiers associated with the decentralized participant(s)(s), wherein the mapping data is generated based on the data related to the chemical products produced from the one or more chemical input materials and the data related to the decentralized participant(s)(s).
[0014] • Based on the mapping data, access data for at least a portion of the digital twin is generated, wherein the access data includes the distributed digital twin identifier and one or more authorization rules associated with the distributed digital twin identifier, wherein the one or more authorization rules define the access and / or use of at least a portion of the digital twin by distributed data consuming network nodes associated with the distributed participant(s)(s) identifier(s) included in the mapping data, and
[0015] • The distributed data providing network nodes control access to at least a portion of the digital twin by one or more distributed data consuming network nodes based on the generated access data.
[0016] In one aspect, this disclosure relates to a computer-implemented method for controlling access to a digital twin of a physical entity of a chemical product produced from one or more chemical input materials, wherein access to the digital twin by one or more distributed data consuming network nodes in a distributed network is controlled by a distributed data providing network node associated with the digital twin, and wherein the digital twin includes a distributed digital twin identifier and at least one measured physical and / or chemical property of the chemical product and / or at least one physical and / or chemical property determined based on collected data associated with the production and / or use of the chemical product, the method comprising:
[0017] - Provide this decentralized digital twin identifier,
[0018] - Provide mapping data, which includes data related to chemical products produced from the one or more chemical input materials, and this data is associated with corresponding decentralized participant(s) identifiers associated with the decentralized participant(s)(s), wherein the mapping data is generated based on the data related to the chemical products produced from the one or more chemical input materials and the data related to the decentralized participant(s)(s).
[0019] - Based on the mapping data, access data for at least a portion of the digital twin is generated, wherein the access data includes the distributed digital twin identifier and one or more authorization rules associated with the distributed digital twin identifier, wherein the one or more authorization rules define the access and / or use of at least a portion of the digital twin by distributed data consuming network nodes associated with the distributed participant(s)(s) identifier(s) included in the mapping data.
[0020] - Provide the generated access data to the distributed data providing network node to control the access of the one or more distributed data consuming network nodes to at least a portion of the digital twin based on the access data.
[0021] In another aspect, this disclosure relates to a computer-implemented method for authorizing a distributed data provider network node to access a digital twin of a physical entity of a chemical product, wherein the digital twin includes a distributed digital twin identifier and at least one measured physical and / or chemical property of the chemical product and / or at least one physical and / or chemical property determined based on collected data associated with the production and / or use of the chemical product, and wherein at least a portion of access data for the digital twin has been generated by an apparatus or system for controlling access to the digital twin or by a computer-implemented method for controlling access to the digital twin and provided to the distributed data provider network node, the method comprising:
[0022] • At the distributed data providing network node, a request for access to the digital twin or a portion thereof is received from the distributed data consuming network node. This request includes the distributed digital twin identifier and a distributed participant identifier associated with the distributed data consuming node.
[0023] • Access to data is determined based on the received distributed digital twin identifier.
[0024] • The request is verified by applying at least a portion of the determined access data to the received request based on the received distributed participant identifier.
[0025] • If the request is verified, the digital twin or a portion thereof is provided based on the received distributed digital twin identifier; at least a portion of the determined access data is applied to the provided digital twin or a portion thereof; and the digital twin or a portion thereof is provided to the distributed data consumption network node according to the applied access data, or
[0026] • If the request fails to be validated, access to the digital twin or a portion thereof is denied based on the access data applied.
[0027] In another aspect, this disclosure relates to an apparatus for authorizing distributed data provision network nodes to access a digital twin of a physical entity of a chemical product, wherein the digital twin includes a distributed digital twin identifier and at least one measured physical and / or chemical property of the chemical product and / or at least one physical and / or chemical property determined based on collected data associated with the production and / or use of the chemical product, and wherein at least a portion of access data for the digital twin has been generated by an apparatus or system for controlling access to the digital twin or by a method implemented by a computer for controlling access to the digital twin and provided to the distributed data provision network node, the apparatus comprising:
[0028] - A digital twin provider configured to provide a digital twin of the physical entity of the chemical product.
[0029] - This distributed data provider network node is configured as follows:
[0030] • Receive a request from a distributed data consumer network node for accessing the digital twin or a portion thereof, the request including a distributed digital twin identifier associated with the digital twin and a distributed participant identifier associated with the distributed data consumer node.
[0031] • Collect the digital twin or a portion thereof from the digital twin provider based on the received distributed digital twin identifier.
[0032] • Based on the received distributed digital twin identifier and distributed participant identifier, access data is determined and the determined access data is applied to the collected digital twin or a portion thereof.
[0033] • Provide the digital twin or a portion thereof to the distributed data consumption network node based on the access data applied, or deny access to the digital twin or a portion thereof based on the access data applied.
[0034] In another aspect, this disclosure relates to a computer-implemented method for processing a digital twin or a portion thereof of a physical entity of a chemical product, wherein the digital twin includes a distributed digital twin identifier and at least one measured physical and / or chemical property of the chemical product and / or at least one physical and / or chemical property determined based on collected data associated with the production and / or use of the chemical product, the method comprising the following steps:
[0035] • A digital twin or a portion thereof is provided to nodes of a distributed data consumption network by means of an apparatus for authorized access or by a method implemented via a computer for authorized access as disclosed herein.
[0036] • Process the provided digital twin or a portion thereof, and
[0037] • Output is provided based on this processing.
[0038] In another aspect, this disclosure relates to a computer-implemented method for authorizing distributed data consumption network nodes to access a digital twin or a portion thereof of the physical entity of a chemical product using a digital access element associated with the chemical product, wherein the digital twin includes a distributed digital twin identifier and at least one measured physical and / or chemical property of the chemical product and / or at least one physical and / or chemical property determined based on collected data associated with the production and / or use of the chemical product, the method comprising the following steps:
[0039] • Provides digital access elements including a distributed pass identifier and digital twin location data, wherein the distributed pass identifier is or is associated with the distributed digital twin identifier.
[0040] • Access to the digital twin, authorized by the apparatus disclosed herein or by the methods implemented via the computer disclosed herein, is provided based on the provided digital access element, the decentralized digital twin identifier, and the decentralized participant identifier associated with the decentralized data consuming network node requesting access to the digital twin.
[0041] On the other hand, this disclosure relates to a computer element, such as a computer-readable storage medium, a computer program, or a computer program product, which includes instructions that, when executed by a computing node or computing system, direct the computing node or computing system to perform the steps of the computer-implemented methods disclosed herein.
[0042] On the other hand, this disclosure relates to a computer element, such as a computer-readable storage medium, a computer program, or a computer program product, which includes instructions that, when executed by the apparatus or system disclosed herein, direct such apparatus or system to perform the steps configured to be performed by the apparatus or system disclosed herein.
[0043] Any disclosures, embodiments, and examples described herein relate to the methods, systems, apparatus, and computer elements listed above and below. Advantageously, the benefits provided by any embodiments and examples also apply to all other embodiments and examples. Example
[0044] The methods, apparatus, systems, and computer elements disclosed herein provide an efficient, secure, and robust manner for sharing or exchanging data associated with chemical products across different decentralized network nodes associated with different participants in a chemical value chain, under the control of a decentralized data providing network node associated with the data owner of the digital twin. Specifically, access to the digital twin is controlled by the decentralized data providing network node based on a unique relationship between a decentralized digital twin identifier and one or more authorization rules. The authorization rules define the access and / or use of at least a portion of the digital twin by the decentralized data consuming network node associated with the corresponding decentralized participant identifier, and can therefore be used to filter the requests for access to the digital twin or a portion thereof by the decentralized participant identifier associated with the decentralized participant node and the decentralized digital twin identifier associated with the digital twin to be accessed. Therefore, a party controlling the distributed data providing network nodes (such as the data owner of the digital twin) can control access to the digital twin or a portion thereof via the distributed data providing network nodes using access data based on a distributed participant identifier associated with a distributed data consuming network node requesting access to the digital twin or a portion thereof, and a distributed digital twin identifier associated with the digital twin to be accessed. By filtering the distributed data consuming network nodes(s) requesting access to the digital twin based on access data, the digital twin or a portion thereof can be securely exchanged and shared under the sovereignty of the data owner of the digital twin, and unwanted access to the digital twin by distributed network participants via associated distributed data consuming network nodes can be prevented. This allows controlled access to the digital twin or a portion thereof by other upstream participants in the chemical supply chain. Furthermore, access to the digital twin or a portion thereof by multiple distributed data consuming network nodes associated with different consumers of different chemical products produced through chemical production and / or different participants in the chemical supply chain can be controlled via distributed data services using access data and distributed digital twin identifiers. Different access data can be generated for different parts of a digital twin (such as different datasets contained in a digital twin), thus allowing for more granular control over access to the digital twin.
[0045] The following examples will outline embodiments of this disclosure. It should be understood that this disclosure is not limited to the embodiments and / or examples described.
[0046] In an embodiment, a digital twin of a chemical product can be a digital representation of the physical entity of the chemical product, accompanied by a semantic description defining the physical entity. Therefore, the digital twin of the physical entity of the chemical product is a digital version of the physical entity. Once created, the digital twin can be used to represent the physical entity of the chemical product in a digital representation of a real-world system. The digital twin can be uniquely linked to the physical chemical product, at least via a distributed digital twin identifier. The digital twin can be created to be identical in form and behavior to the corresponding chemical product. Furthermore, the digital twin can reflect the characteristics of the chemical product throughout its lifespan. For example, a sensor can capture real-time (or near real-time) data from the physical chemical product, such as transmitting or using data, to relay it back to a remote digital twin. The digital twin can then be updated to maintain its correspondence with the physical entity of the chemical product. Therefore, the digital twin can represent the current state of the physical entity of the chemical product at any given time. The digital twin can include a distributed digital twin identifier. The distributed digital twin identifier can be associated with the physical entity of the chemical product to which the digital twin is associated. Distributed digital twin identifiers can be associated with the physical entity for which the chemical product for which the digital twin is generated. Distributed digital twin identifiers can be associated with distributed identifiers of the chemical materials used to produce the chemical product. Distributed identifiers can be associated with products, components, component assemblies, and / or final products produced using the chemical product. This allows for the tracking of chemical products within the value chain. Distributed digital twin identifiers can or may be assigned to physical identifiers linked to the chemical product. Physical identifiers can be any identifier used for the produced chemical product, such as batch numbers or part numbers. Physical identifiers can include passive or active elements, such as barcodes, QR codes, RFID tags, but are not limited to these. Physical identifiers can include markings embedded in materials or similar physical arrangements that allow for the digital identification of the chemical product. The digital twin may further include chemical product identifiers.
[0047] Digital twins can be generated by distributed participating nodes. Distributed participating nodes can communicate with distributed data providing network nodes. Distributed participating nodes can be associated with distributed data providing network nodes. Digital twins can be generated by: collecting data containing at least one measured and / or determined physical and / or chemical property; providing a distributed digital twin identifier associated with the collected data; generating digital twin data by applying at least one aspect model associated with a chemical product to the collected data; and generating a digital twin including the provided distributed digital twin identifier and digital twin data. The aspect model can contain a semantic description of the corresponding dataset. The semantic description can include the structure and / or characteristics of at least a portion of the corresponding dataset. The characteristics of the corresponding dataset can include data types. The characteristics of the corresponding dataset can include possible or allowed values and / or value ranges. The characteristics of the corresponding dataset can be physical units of parameters(s) described by values contained in the corresponding dataset. At least one aspect model can be associated with(s) environmental properties(s) related to the chemical product. Multiple environmental attributes can involve the recyclable content of a chemical product, its recyclable content, its bio-based content, emissions data associated with the chemical product, and / or certificates associated with the chemical product. Using aspect models associated with multiple environmental attributes allows for the generation of digital twin data reflecting the corresponding multiple environmental attributes of the chemical product, thereby allowing the secure and efficient sharing of said attributes via the generated digital twin data. An aspect model may be associated with exactly one environmental attribute. This allows for a higher level of granularity in access to environmental attributes associated with the chemical product, allowing for the definition of separate authorization rules for each environmental attribute (e.g., via its corresponding dataset). An aspect model may be associated with at least two different environmental attributes. This allows for a reduction in the number of datasets that need to be generated.
[0048] Data can be collected based on a chemical product identifier associated with the chemical product. Data collection may include retrieving or receiving data. For example, data may be received or retrieved based on a chemical product identifier. This data may be collected from one or more distributed data sources, wherein at least one of these distributed data sources contains data instances relating to the data. Data instances include at least one measured physical and / or chemical property of the chemical product and / or at least one physical and / or chemical property determined based on collected data associated with the production of the chemical product. The measured physical and / or chemical properties may be measured after the production of the chemical product. The determined physical and / or chemical properties may be determined based on data collected before, during, and / or after the production of the chemical product.
[0049] Digital twin data can be generated by applying the corresponding retrieved aspect models to the collected data. Digital twin data can contain one or more datasets with defined data structures. Each dataset can be generated by applying an aspect model to the collected data. Therefore, the number of retrieved aspect models can be equal to the number of datasets generated by applying the retrieved aspect models. Each generated dataset can contain a data structure and data defined by the corresponding aspect model used for its generation. Using at least one aspect model ensures reliable data transmission and conformity to relevant decentralized data standards, thereby ensuring efficient processing of the transmitted data. Each dataset can be associated with a decentralized digital twin identifier. Each chemical product dataset can be associated with a dataset identifier. The decentralized identifier can include both a digital twin identifier and a chemical product dataset identifier. This allows each dataset contained in the digital twin to be uniquely identified by combining the digital twin identifier with the dataset identifier associated with the dataset.
[0050] Generating a digital twin may include assigning distributed digital twin identifiers to at least a portion of the digital twin data. The distributed digital twin identifiers may be linked to each of at least a portion of the dataset. For example, distributed digital twin identifiers may be associated with each of the datasets. If the distributed digital twin identifiers contain digital twin dataset identifiers, then each digital twin dataset identifier may be linked to a dataset. Therefore, using a combination of distributed digital twin identifiers and digital twin dataset identifiers allows for the definition of authorization rules at the dataset level, thereby allowing for more granular access to the digital twin data.
[0051] Generating a digital twin may include generating digital twin location data and assigning the generated digital twin location data to a distributed digital twin identifier. The digital twin location data may include a digital representation pointing to the digital twin. The digital twin location data may include multiple digital representations pointing to datasets(multiple). The digital representations may directly or indirectly point to the storage location of the digital twin / digital twin data. The digital twin location data may be included within the digital twin. The digital twin location data may be assigned to a distributed digital twin identifier. The digital twin location data may be used in conjunction with the distributed identifier to access the digital twin data. For example, a distributed digital twin identifier and the corresponding digital twin location data may be used by a distributed data consuming network node to request digital twin data, as described later regarding digital access elements. The digital twin location data may correspond to a DID document associated with or including a distributed digital twin identifier (e.g., a DID) and multiple digital representations pointing to the digital twin data. The DID document or a portion thereof may be propagated to a distributed ledger. A DID document or a portion thereof may be used to retrieve (multiple) numeric representations using DID, as described later.
[0052] Digital twins can be generated by the data owner of the digital twin data. The data owner of the digital twin data can be a chemical production entity that manufactures chemical products. The data owner of the digital twin data can be a legal entity operating the chemical production entity that manufactures chemical products. The data owner of the digital twin data can also be a natural person operating the chemical production entity that manufactures chemical products. A digital twin can be generated on behalf of the data owner of the digital twin data. For example, a digital twin can be generated by a third party based on services provided by the third party to the data owner.
[0053] In embodiments, the chemical product may be a chemical product obtained from at least one chemical reaction using one or more chemical input materials. The chemical reaction may include any chemical reaction known in the art, in which reactants are converted into one or more different chemical products. The chemical reaction may involve the use of catalysts, enzymes, bacteria, etc., to achieve the chemical reaction between reactants. The chemical product may include natural chemical products. Natural chemical products may include any chemical product produced in nature without human interaction or intervention, i.e., any unprocessed chemical substance found in nature (such as chemicals from plants, microorganisms, animals, soil, and oceans), or any chemical substance found in nature and extracted using a process that does not alter its chemical composition. Natural chemical products may include biological products such as enzymes, and naturally occurring inorganic or organic chemical products. Natural chemical products may be isolated and purified before use, or they may be used in an unisolated and / or unpurified form. The chemical product may be a synthetic chemical product. Synthetic chemical products may include chemical products produced through human interaction or intervention. Synthetic chemical products may be produced using the same chemical reaction present in nature or using different chemical reactions. The chemical product may include raw materials. Chemical products may include chemical materials produced by reacting at least two raw materials. Chemical products may include components. Chemical products may include component assemblies. Chemical products may include final products.
[0054] Chemical products can be produced by chemical production from one or more chemical input materials. Chemical input materials may include raw materials, intermediate chemical products, or chemical products received from suppliers. Chemical production may be a chemical production network comprising multiple interconnected processing steps. A chemical production network may be an integrated chemical production network with interconnected production chains. A chemical production network may include multiple distinct production chains having at least one common intermediate product. A chemical production network may include multiple stages of a chemical value chain. A chemical production network may include multiple production chains that produce chemical products as outputs from one or more input materials. A chemical production network may include multi-layered chemical value chains. A chemical production network may include a physically interconnected arrangement of production sites. Production sites may be located in the same location or in different locations. In the latter case, production sites may be interconnected via dedicated transportation systems such as pipelines, supply chain vehicles (e.g., trucks), supply chain vessels, or other cargo transport vehicles. Chemical production may be controlled by an operating system. The operating system may be configured to perform the methods disclosed herein. The operating system may include the apparatus and systems disclosed herein. Chemical products may include physical identifiers. Physical identifiers may be present on the packaging of the produced chemical products. Physical identifiers can be codes, such as QR codes or embossed codes, NFT tags, etc. Physical identifiers can be assigned to distributed identifiers of digital twins to uniquely link the digital twin, and thus the digital twin data, to the physical entity of the chemical product.
[0055] In the embodiments, the physical entity may refer to a physical embodiment of a chemical product. The physical entity can be any chemical product in the chemical supply chain and / or chemical value chain. The physical entity of a chemical product can be a raw material or base substance, a chemical product, a chemical material, a chemical formulation, a chemical mixture, a component, a component assembly, a final product, or a combination thereof.
[0056] In this embodiment, a distributed data providing network node may include computer-executable instructions for providing and / or processing data (such as digital twins of chemical products) within the distributed network by a distributed data consuming network node. The distributed data providing network node may be associated with or connected to one or more dedicated data storage devices storing the digital twin. The distributed data providing network node may be directly or indirectly connected to the data storage devices(s) storing the digital twin. Therefore, the distributed data providing network node may be associated with the digital twin. The dedicated data storage devices(s) may be under the control of the data owner of the digital twin data. The data owner may have access to the dedicated data storage devices(s).
[0057] In embodiments, distributed data consuming network nodes may include computer-executable instructions for accessing and / or processing data (such as digital twin data) provided by distributed data providing network nodes within the distributed network. Distributed data consuming network nodes may be controlled, owned, or associated with consumers of chemical products. Consumers may be any entity that processes chemical products. Consumers may be any entity that operates a production configured to process chemical products. Processing may include using chemical products to produce additional chemical products, parts, components, or end products. Consumers may be upstream participants in the chemical value chain associated with the produced chemical product (e.g., where the chemical product is used). For example, consumers may be discrete product processors (e.g., discrete product producers) or participants in the recycling process of discrete products. Discrete products may be finished products that can be easily identified (e.g., by counting) as different items. Examples of discrete products include automobiles, airplanes, shoes, etc. Discrete products may be decomposed at the end of their life cycle so that their components can be recycled. Consumers may receive chemical products from entities that produce chemical products (e.g., chemical product producers). Through distributed data consumption network nodes, consumers of chemical products can access digital twins or portions thereof associated with the supplied chemical products, thereby allowing for improvements in production or recycling through the use of the accessed data. For example, the accessed data can be used to enhance the characteristics of additional chemical products, components, or discrete products, or overall production efficiency. In another instance, the accessed data associated with the supplied chemical products can be used to control the production of those products. In yet another instance, the accessed data can be used to reliably determine the chemical composition of components to be recycled, thereby improving recycling efficiency by identifying the correct recycling processes, parameters, and facilities.
[0058] In this embodiment, the decentralized network can be a decentralized peer-to-peer communication network. The decentralized network can include participating network nodes associated with participants in the chemical supply chain and can be configured to perform data transactions. Decentralized participating nodes can include network nodes of the decentralized network. Network nodes associated with participants in the chemical supply chain can be associated with raw material chemical product suppliers, intermediate chemical product manufacturers, intermediate component manufacturers, component manufacturers, component assembly manufacturers, or final product manufacturers. Data transactions can be based on transaction protocols including (multiple) authentication and / or authorization mechanisms. Based on (multiple) authentication and / or authorization mechanisms, peer-to-peer communication can be established between decentralized network nodes associated with participants in the chemical supply chain. One or more authentication mechanisms can be associated with or linked to a decentralized digital twin identifier and / or a decentralized pass identifier. One or more authentication mechanisms associated with the decentralized digital twin identifier and / or the decentralized pass identifier can be accessed by decentralized data providing network nodes and / or decentralized data consuming network nodes. Decentralized configuration allows for more efficient use of computing resources and strengthens the control of data owners in the decentralized network.
[0059] In this embodiment, the distributed data providing network node and one or more distributed data consuming network nodes can be part of a distributed network. The distributed data consuming network node and the distributed data providing network node can be considered as distributed participating nodes(s) of the distributed network.
[0060] In embodiments, distributed digital twin identifiers and / or distributed pass identifiers may include any unique identifier uniquely associated with digital twin data and, optionally, the data owner of the digital twin data. Distributed digital twin identifiers and / or distributed pass identifiers can link the physical entity of a chemical product to the digital twin data. Distributed digital twin identifiers and / or distributed pass identifiers may include one or more universally unique identifiers (UUIDs) and / or one or more distributed identifiers (DIDs). One or more DIDs and / or UUIDs may be associated with the digital twin and / or digital twin data. One or more DIDs and / or UUIDs may be further associated with a chemical product. For example, distributed digital twin identifiers and / or distributed pass identifiers may include a digital twin identifier associated with the digital twin and one or more digital twin data identifiers associated with the digital twin dataset contained in the digital twin. Distributed digital twin identifiers and / or distributed pass identifiers may further include a chemical product identifier associated with the chemical product. Any combination of (multiple) UUIDs and (multiple) DIDs is possible. For example, a decentralized digital twin identifier and / or decentralized pass identifier can be a DID, while (multiple) digital twin data identifiers can be (multiple) UUIDs. In another instance, a decentralized digital twin identifier and / or decentralized pass identifier, along with (multiple) digital twin data identifiers, can be a UUID. A decentralized digital twin identifier and / or decentralized pass identifier can be associated with any participant in the chemical supply chain, including raw material chemical product suppliers, intermediate chemical product manufacturers, intermediate component manufacturers, component manufacturers, component assembly manufacturers, or final product manufacturers. A decentralized digital twin identifier and / or decentralized pass identifier can be associated with a machine, system, or equipment used to produce raw materials, basic substances, chemical products, intermediate products, components, component assemblies, or final products, or with a collection of such machines, equipment, and / or systems. A decentralized digital twin identifier and / or decentralized pass identifier can be issued by a centralized or decentralized identity issuing authority. Distributed digital twin identifiers and / or distributed pass identifiers can be generated by the data owner or on behalf of the data owner of the digital twin data. Distributed digital twin identifiers and / or distributed pass identifiers may include authentication information. Access to the digital twin data (such a digital twin dataset) can be controlled by the data owner of the digital twin data through the unique association between the distributed digital twin identifier and / or distributed pass identifier and the digital twin data associated with the same chemical product, and optionally, the data owner of the digital twin data. This contrasts with centralized institutional schemes, where identifiers are provided by the centralized institution and access to the data is controlled by the centralized institution.In this context, decentralized refers to the use of decentralized digital twin identifiers and / or decentralized pass identifiers controlled by the data owner in an implementation.
[0061] In embodiments, a decentralized participant identifier may include any identifier uniquely associated with a participant in the decentralized network and / or with a production site of a participant in the decentralized network. A participant in the decentralized network may be a consumer of a chemical product, for example, consuming a chemical product received from or supplied by a chemical product producer. A production site of a participant in the decentralized network may use the received / supplied chemical product to produce additional products, such as additional chemical products, parts, components, component assemblies, and / or final products. A decentralized participant identifier may include letters and / or numbers. A decentralized participant identifier may include one or more Universally Unique Identifiers (UUIDs) and / or one or more Distributed Identifiers (DIDs). A decentralized participant identifier may be associated with or may include verifiable claims or credentials. Verifiable claims may be issued by a centralized or decentralized identity issuing authority that makes one or more claims to a subject, such as a consumer entity being a trusted participant in the decentralized network. For example, an issuing authority may make a claim to a consumer (e.g., a customer entity) associated with a DID that serves as a decentralized participant identifier. Verifiable claims can include these claims(s) and a proof instruction demonstrating that the claims(s) have not been tampered with and were indeed issued by the claim issuing authority. Verifiable claims may also include duration information metadata, which defines the valid period of use of the verifiable claim or defines a specific number of authorized uses of the verifiable claim. Verifiable claims may also include the DID of the claim issuing authority and / or subject (such as a consumer entity). Verifiable claims can be issued by the claim issuing authority. The claim issuing authority can provide verifiable claims to claim holders (such as consumer entities) to present to any dependent parties that rely on the authenticity of these claims, such as decentralized data providers. The signature of the verifiable claim can be verified using the public key associated with the claim issuing authority to determine that the customer entity is a trusted entity within the decentralized network. Verifiable credentials can be presented by decentralized data consumer network nodes and can be used by decentralized data provider network nodes to verify that the decentralized participant associated with the decentralized data consumer network node is a trusted entity within the decentralized network before providing access to the digital twin, thereby ensuring that the digital twin can be exchanged securely and in a controlled manner within the decentralized network. Distributed participant identifiers can differ from data associated with chemical products produced from one or more chemical input materials. While data associated with chemical products may not be unique within the distributed network, distributed participant identifiers are unique within the distributed network. Therefore, distributed participant identifiers allow for the unique identification of participants and / or participant sites within a distributed network. Distributed participant identifiers can be generated by centralized or distributed nodes within the distributed network. Distributed participant identifiers can be provided to all participants in the distributed network.A distributed participant identifier can be associated with the name of a participant in a distributed network. A distributed participant identifier can also be associated with the name of a participant's site (e.g., a production site). In this context, "distributed" refers to the use of the distributed participant identifier being controlled in an implementation such as by a distributed data consuming network node associated with the distributed participant.
[0062] In an embodiment, one or more authorization rules may include computer-executable instructions for authorizing data access to(a) distributed data consuming network nodes(s). This set of authorization rules may include rules (e.g., access policies) determining under what conditions access to the digital twin is permitted and / or rules (e.g., usage policies) for using the digital twin. The computer-executable instructions may allow access to the digital twin associated with the distributed digital twin identifier, deny access to the digital twin associated with the distributed digital twin identifier, modify access to the digital twin associated with the distributed digital twin identifier, or modify the digital twin associated with the distributed digital twin identifier.
[0063] In the embodiments, chemical properties can be characteristics of a chemical product that become apparent during or after a chemical reaction. Therefore, a chemical property can be any property that can only be established by altering the chemical identity of the chemical product. Examples of chemical properties include heat of combustion, enthalpy of formation, toxicity, chemical stability in a given environment, flammability, (multiple) oxidation states, corrosiveness, combustibility, acidity and alkalinity, chemical product composition, the amount of recyclables used in the production or manufacture of the chemical product, the amount of bio-based materials used in the production or manufacture of the chemical product, the amount of renewable biomass used in the production or manufacture of the chemical product, and pH value.
[0064] In the embodiments, physical properties can be any measurable property. Therefore, the values of physical properties describe the state of a chemical product. Examples of physical properties include absorption, brittleness, boiling point, capacitance, color, concentration, density, ductility, distribution, potency, elasticity, charge, conductivity, electrical impedance, potential, flow rate, fluidity, hardness, heat capacity, inductance, intrinsic impedance, brightness, luminosity, gloss, mass, melting point, opacity, permeability, permittivity, plasticity, pressure, emissivity, resistivity, reflectivity, refractive index, solubility, specific heat, strength, stiffness, temperature, tensile strength, thermal conductivity, thermal resistance, viscosity, volume, and wave impedance.
[0065] In an embodiment, at least one physical and / or chemical property is measured by a sensor configured to measure physical and / or chemical properties. The sensor may be included in a measuring device. The sensor may correspond to a measuring device. For example, physical and / or chemical properties may include properties provided by a sensor of a mobile device (such as a camera) or a measuring device configured to measure at least one physical and / or chemical property.
[0066] In this embodiment, data associated with the production of a chemical product is collected before, during, and / or after the production of the chemical product. The collected chemical product data can be used to determine at least one physical and / or chemical characteristic of the produced chemical product. For example, emission data of the chemical product can be determined based on chemical product data collected during the production of the chemical product. Data associated with the production of a chemical product may include chemical production data during the production of the chemical product. Data associated with the production of a chemical product may include monitoring and / or control data associated with the production of the chemical product.
[0067] In this embodiment, data associated with the use of a chemical product is collected via at least one identifier associated with the chemical product. Data can be collected during and / or after the use of the chemical product. The collected data may include at least one measured physical and / or chemical property of the chemical product used. The measured physical and / or chemical properties may include the previously described chemical and / or physical properties. Data can be collected using a suitable sensor configured to measure the chemical and / or physical properties. Sensor data may be correlated with the identifier associated with the chemical product. Chemical and / or physical properties determined based on the sensor data may be correlated with the identifier associated with the chemical product. The identifier may be a chemical product identifier. The identifier may be a distributed digital twin identifier. The distributed digital twin identifier can be linked to (a plurality of) other distributed product identifiers based on the physical relationship between the chemical product entity and other physical entities (e.g., those entities that use or are produced from the chemical product). Thus, (a plurality of) distributed participant nodes in a distributed network can be able to interpret the correspondence between the distributed digital twin identifier and the physical relationship between the physical chemical entity and other physical entities. Linking a decentralized digital twin identifier to multiple other decentralized product identifiers allows for the identification of multiple decentralized participating nodes that store collected data associated with the use of a chemical product or identified physical and / or chemical properties. The collected data and / or identified chemical and / or physical properties can be provided by the multiple decentralized participating nodes and can be stored within the digital twin. For example, a new dataset can be generated by applying an aspect model associated with the use of the chemical product, and the digital twin can be updated using the new dataset.
[0068] In embodiments, the digital twin further includes chemical product names, chemical product declaration data, chemical product safety data, analytical certificate data associated with the chemical product, certificates associated with the chemical product, or combinations thereof. The digital twin may include different categories of data (hereinafter referred to as digital twin data). At least one category of such data may include data required by regulations or regulatory data for the chemical. This data may include chemical product declaration data, chemical product safety data, and analytical certificate data. At least one category of such data may include emissions data, recycled content data, bio-based content data, and / or at least one physical and / or chemical property determined based on collection data associated with the production of the chemical product. Each category may be associated with multiple authorization rules, as described later. The multiple authorization rules for each category may differ from each other. This allows for defining access to the digital twin at a more granular level, thereby improving security and preventing unauthorized decentralized data consumption services from gaining unwanted access to categories containing more sensitive information, such as the composition of the chemical product.
[0069] In embodiments, emissions data may include any data related to an environmental footprint. An environmental footprint can refer to an entity and its associated environmental footprint. An environmental footprint can be entity-specific. For example, an environmental footprint can relate to a product, a company, a process such as a manufacturing process, raw materials or base substances, chemical products or materials, components, component assemblies, final products, combinations thereof, or additional entity-specific relationships. Emissions data may include data related to the carbon footprint or product carbon footprint (PCF) of a chemical product. Emissions data may include data related to greenhouse gas emissions, such as those released during the production of a chemical product. Emissions data may include data related to greenhouse gas emissions. Greenhouse gas emissions may include, for example, emissions of carbon dioxide (CO2), methane (CH4), nitrous oxide (N2O), hydrofluorocarbons (HFCs), perfluorocarbons (PFCs), sulfur hexafluoride (SF6), nitrogen trifluoride (NF3), and combinations thereof, as well as other emissions. Emissions data may include data related to greenhouse gas emissions generated by the entity or company's own operations (production, power plants, and waste incineration). Scope 2 may include emissions generated from the production of energy provided externally. Scope 3 can include all other emissions generated along the value chain. Specifically, this can include greenhouse gas emissions from raw materials obtained from suppliers. Product carbon footprint (PCF) can be the sum of greenhouse gas emissions and removals generated by consecutive and interrelated process steps associated with a particular product. Cradle-to-gate PCF can be aggregating greenhouse gas emissions based on selected process steps: for example, from resource extraction to the product leaving the company's plant gate. This type of PCF can be referred to as a partial PCF. To achieve this aggregation, each company supplying any product can provide its contribution to the PCF generation for each of its products in Scope 1 and Scope 2.
[0070] In embodiments, the recycled content data, bio-based content data, and renewable bio-based content data may include any data relating to the recycled content, bio-based content, or renewable bio-based content of a physical entity used to produce or manufacture a chemical product.
[0071] In embodiments, a digital twin may include at least two different measured and / or determined physical and / or chemical properties existing in different datasets (e.g., digital twin data). Data points within different datasets may overlap. A dataset may correspond to a data structure obtained when applying an aspect model to collected data associated with the physical entity of a chemical product as described above. A dataset may include values and / or ranges of values defined in the aspect model used to generate the dataset. Thus, each dataset contains a data structure and data defined by the aspect model used to generate it. This ensures that each dataset has a defined structure and contains defined data, thereby allowing for simplified data exchange and processing of exchange data regarding chemical products.
[0072] In this embodiment, a distributed data providing network node is associated with a data owner of the digital twin and / or the digital twin data. The data owner may include the entity that generates the digital twin. The data owner may include any entity that generates the digital twin data or dataset(s). The data generation node may be coupled to an entity that produces or owns a chemical product from which data is generated. The digital twin data may be generated by a third-party entity representing an entity that produces or owns a chemical product from which data is generated. The data owner may be a producer of the chemical product. Therefore, the data owner may directly or indirectly own the digital twin and the digital twin data. The digital twin and the digital twin data may be stored in the data owner's database or a database associated with it. The digital twin and the digital twin data may be stored in the data owner's database or a database under the data owner's control. The digital twin and the digital twin may be stored in a database accessible to the data owner. The data owner may control access to the digital twin and the digital twin, for example, via a distributed data providing network node associated with the data owner. The digital twin and the digital twin may be associated with the data owner. In this sense, the data owner should be broadly interpreted as an entity that has the right to access the digital twin and control the data consumption services of the decentralized network, which provides network nodes with access to the digital twin or a portion thereof.
[0073] In an embodiment, a distributed digital twin identifier is provided in response to a request received at the distributed digital twin providing unit. The request may include the distributed digital twin identifier. The request may include a chemical product identifier associated with a chemical product, and the distributed digital twin identifier providing unit may be configured to provide the distributed digital twin identifier based on the received chemical product identifier. For example, the distributed digital twin identifier providing unit may retrieve the distributed digital twin identifier from a database storing digital twins based on the chemical product identifier.
[0074] In embodiments, data associated with a chemical product produced from one or more chemical input materials includes a consumer identifier associated with the chemical product. The consumer identifier can be associated with a consumer of the chemical product. The consumer identifier can be associated with a participant in the chemical product ecosystem who receives or consumes the chemical product. The consumer identifier can be any identifier uniquely associated with a consumer of the chemical product within a chemical production facility that produces the chemical product. The consumer identifier can be any identifier uniquely associated with a consumer of the chemical product within an entity that operates the chemical production facility that produces the chemical product. The consumer identifier can be an identifier used by the chemical product producer. The consumer identifier does not need to be a unique identifier within a decentralized network. Therefore, the consumer identifier can be unique only within a chemical production facility that produces the chemical product from one or more chemical input materials. The consumer identifier can be associated with the chemical product supplied to the consumer associated with the consumer identifier. The consumer identifier can be associated with a chemical product identifier associated with the chemical product. Therefore, corresponding consumer identifier(s) can be identified based on the chemical product identifier(s) associated with the chemical product. The consumer identifier can be any string, number, or combination thereof.
[0075] In an embodiment, the data associated with a chemical product produced from the one or more chemical input materials further includes a chemical product identifier associated with that chemical product. This allows the data associated with the chemical product to be linked to the physical entity of the corresponding chemical product.
[0076] In this embodiment, multiple distributed participant nodes associated with distributed participant identifiers are associated with participants in a distributed network. Participants may be consumers of chemical products. Multiple distributed participant nodes may correspond to multiple distributed data consuming network nodes associated with participants in the distributed network. Therefore, multiple distributed participant nodes are at least indirectly associated with multiple participants in the distributed network.
[0077] In an embodiment, the data associated with the distributed participating nodes(s) includes distributed participant(s) identifiers associated with the participating nodes(s). The data associated with the distributed participating nodes(s) may further include data associated with the participants(s) associated with the distributed participating nodes(s). The data associated with the participants(s) may include the names and / or addresses of the participants(s).
[0078] In an embodiment, generating mapping data includes associating data related to a chemical product produced from one or more chemical input materials with corresponding decentralized participant identifiers contained in data related to (multiple) decentralized participant nodes, based on a relational representation. The data related to the chemical product is associated with data related to the (multiple) decentralized participant nodes, according to the relational representation. Data related to a chemical product produced from one or more chemical input materials can be determined based on the chemical product identifier associated with the chemical product. Data related to a chemical product produced from one or more chemical input materials can be retrieved from one or more data storage media (e.g., (multiple) distributed databases) based on the chemical product identifier. The relational representation can specify (multiple) consumers associated with the chemical product and / or chemical products associated with (multiple) consumers. The relational representation can specify (multiple) consumers based on (multiple) consumer identifiers (e.g., (multiple) consumer identifiers contained in data related to the chemical product) and associated (multiple) decentralized network identifiers (e.g., (multiple) decentralized network identifiers contained in data related to (multiple) decentralized participant nodes). The relational representation can correspond to a data structure containing relationships between chemical products, (multiple) consumer identifiers, and (multiple) decentralized participant identifiers. The data structure may include further information associated with the consumer identifier(s) and / or the decentralized participant identifier(s), such as the names and / or addresses associated with said identifier(s). Relationship representations can be generated by determining data associated with the decentralized participants(s) that is linked to data related to the chemical product. For example, relationship representations can be generated by matching the names and / or addresses contained in the data related to the chemical product with the names and / or addresses contained in the data related to the decentralized participant(s) nodes, and associating the data related to the chemical product with the decentralized participant(s) identifiers based on said matching.
[0079] In this embodiment, providing mapping data includes generating and providing the generated mapping data. The generated mapping data may be stored on a data storage medium (such as a database). The database may be a persistent or non-persistent log.
[0080] In an embodiment, generating mapping data includes verifying data associated with the decentralized participant(s). Verification can be performed before generating the mapping data. Verification can be performed after generating the mapping data. Verification ensures that the identities of the decentralized network participants(s) associated with the decentralized participant(s) and therefore with the decentralized participant(s) identifier(s) match the identities of consumers of the chemical product (e.g., match with data associated with the chemical product), and thus avoids generating incorrect mapping data, which would result in incorrect access data and therefore access to the digital twin by the incorrect decentralized data consuming network nodes(s). Verification can be based on verifiable claims associated with the corresponding decentralized participant(s). The verifier can be the data owner of the digital twin. The verifier can be an entity performing a computer-implemented method for controlling access to the digital twin as disclosed herein. The verifier can be a unit providing the mapping data. The verifier can use a verifiable data registry to verify the claims. Verification ensures that only (multiple) trusted decentralized participant identifiers are included in the mapping data used to generate access data, thereby ensuring that only (multiple) trusted decentralized data consuming network nodes of the decentralized network can be authorized to access the digital twin or a portion thereof.
[0081] In an embodiment, the access data further includes a digital representation pointing to a digital twin or a portion thereof. The access data may include multiple digital representations pointing to multiple datasets included in the digital twin data. The access data may include multiple digital representations, each pointing to a different portion of the digital twin data, such as different datasets. The multiple digital representations may directly or indirectly point to the storage location of the digital twin. The multiple digital representations may include at least one interface to a distributed data providing network node. The multiple digital representations may further include at least one interface to a distributed data consuming network node. The multiple digital representations may include endpoints (resource endpoints) for data exchange or sharing or endpoints (service endpoints) for service interaction, which are uniquely identified via a communication protocol.
[0082] In an embodiment, generating access data includes providing data related to the chemical product and / or authorization rules associated with the chemical product identifier, as well as selecting authorization rules based on the mapping data.
[0083] In one embodiment, one or more authorization rules can be generated based on the distributed participant(s) identifier(s) contained in the mapping data. For example, authorization rules specific to the distributed participant(s) identifier(s) can be generated. In another instance, location-specific authorization rules can be generated based on the distributed participant(s) identifiers contained in the mapping data.
[0084] In this embodiment, one or more authorization rules can be generated based on data related to chemical products contained in the mapping data. For example, obligations for accessing and using (or a portion thereof) distributed data consumption network nodes of a digital twin or a part thereof can be generated based on data related to chemical products.
[0085] In an embodiment, one or more authorization rules include one or more rules specific to the distributed participant(s) identifier(s). For example, one or more authorization rules may include one or more rules specific to the distributed participant(s) identifier(s) associated with the distributed participant(s) node(s) allowed to access the digital twin or a portion thereof. Therefore, access to the digital twin or a portion thereof by the distributed participant(s) associated with the distributed participant(s) identifier(s) not included in this set of authorization rules will be denied. Thus, the distributed participant(s) identifier(s) can be used to limit the number of distributed network participants authorized to access the digital twin or a portion thereof, and consequently, the number of associated distributed data consuming network nodes. This enables control over access to the digital twin or a portion thereof by filtering the distributed data consuming network nodes based on the distributed participant(s) identifier associated with each distributed data consuming network node, through a unique link between the distributed digital twin identifier and the authorization rules.
[0086] In an embodiment, one or more authorization rules include one or more local rules specific to a particular location, wherein the location is associated with a jurisdiction, and the local rules for that location are associated with legal requirements relating to the supply of the chemical product. The local rules may include instructions configured to provide access to the digital twin or a portion thereof. The location may be the location of a node in a distributed data consuming network. The location may be the location of a distributed network participant associated with the distributed data consuming network node. The location may be the location of an entity operated by the distributed network participant. The location may be determined based on a distributed participant identifier associated with the distributed data consuming network node requesting access to the digital twin or a portion thereof.
[0087] In an embodiment, one or more authorization rules include one or more rules specific to attribute values associated with decentralized network participants. The attribute values associated with a participant may be related to or correspond to the participant's role within the chemical product ecosystem. Roles may include raw material suppliers, chemical product producers, OEMs, recyclers, etc. For example, one or more authorization rules may include one or more attribute values specific to participants(s) associated with a decentralized data consuming network node(s) permitted to access the digital twin or a portion thereof. Therefore, decentralized data consuming network nodes(s) associated with participants(s) not included in this set of authorization rules will be denied access to the digital twin or a portion thereof.
[0088] In one embodiment, one or more authorization rules include at least one regulatory directive configured to provide access to a digital twin or a portion thereof in connection with regulatory requirements for the supply of chemical products.
[0089] In an embodiment, one or more authorization rules include one or more prescribed rules relating to emissions data, production data, recycled content data, bio-based content data, source data, working conditions data, or a combination thereof.
[0090] In an embodiment, one or more authorization rules include obligations of (multiple) distributed data consuming network nodes associated with corresponding distributed participant(s) identifiers and / or obligations of (multiple) distributed network nodes using digital twins or portions thereof accessed by (multiple) data consuming network nodes associated with corresponding distributed participant(s) identifiers. Such obligations may include data transaction records, usage policies for processing or using the accessed digital twin or portion thereof, mappings to access provisions, etc. Usage policies for processing or using the accessed digital twin or portion thereof may include time-limited conditions for the use of the accessed digital twin or portion thereof. For example, a usage policy may include duration data indicating the duration for which (multiple) distributed data consuming network nodes may access the digital twin or portion thereof. After the duration has elapsed, the (multiple) distributed data consuming network nodes may no longer be able to access the digital twin or portion thereof. Usage policies for processing or using may include one or more prescribed processing rules related to the processing of emission data, production data, recycled content data, bio-based content data, source data, working conditions data, or combinations thereof by the distributed data consuming network nodes associated with the distributed participant(s). A usage policy, including one or more defined processing rules, can be enforced by an application that uses the accessed digital twin or a portion thereof. The usage policy for processing or use may include obligations associated with the purpose for which the processing or use of the accessed digital twin or a portion thereof is permitted. For example, such a usage policy could define that the accessed digital twin or a portion thereof is used only in the context of emissions data calculation. The usage policy associated with the purpose can be enforced by an application that uses the accessed digital twin or a portion thereof.
[0091] In an embodiment, the licensing rules defining the use of a digital twin or a portion thereof include one or more aggregation rules associated with the digital twin or a portion thereof. The aggregation rules may relate to bill of materials (BOM) data contained within the digital twin or a portion thereof. The BOM may relate to a production configuration. A production configuration may include a list of chemical materials or components, the quantity of each chemical material or component required to manufacture the corresponding product, or a combination thereof. The BOM may include a product at design time (engineering BOM), a product at order time (sales BOM), a product at manufacturing time (manufacturing BOM), or a product at maintenance time (service BOM). In the chemical industry, the BOM may include a list of chemical formulas, formulations, or ingredients.
[0092] In one embodiment, access data is generated for at least a portion of the digital twin. In another embodiment, access data is generated for each dataset contained in the digital twin data. This allows access data to be defined at the dataset level, thus providing more granular access to the digital twin data, as different access data can be generated and applied to different datasets. Access data can be associated with a dataset via a dataset identifier associated with that dataset. The dataset identifier can be included in a distributed digital twin identifier. For example, access data with less stringent authorization rules can be associated with a dataset containing data accessible by several distributed data-consuming network nodes (such as materials safety data), while access data with strict authorization rules can be associated with a dataset containing data accessible only by a small number (or many) distributed data-consuming network nodes (such as chemical composition data).
[0093] In this embodiment, access to the digital twin by a distributed data consuming network node is based on a distributed digital twin identifier and a distributed participant identifier associated with the distributed data consuming network node requesting access to the digital twin or a portion thereof. For example, a distributed data consuming network node may provide the distributed digital twin identifier and the distributed participant identifier associated with it to a distributed data providing network node. Based on the provided distributed digital twin identifier, the distributed data providing network node may request or retrieve the digital twin or a portion thereof associated with the distributed digital twin identifier. Based on the provided distributed digital twin identifier and distributed participant identifier, the distributed data providing network node may apply access data to the received or retrieved digital twin or a portion thereof, as described later.
[0094] In this embodiment, access to the digital twin can be controlled by the distributed data providing network node based on distributed participant identifiers and access data. This enables the distributed data providing network node to control access to the digital twin based on the unique relationship between the distributed digital twin identifier and one or more authorization rules, by using the authorization rules(s) based on the distributed participant identifier(s) associated with the distributed data consuming network node(s), thereby filtering the distributed data consuming network node(s) requesting access to the digital twin or a portion thereof.
[0095] In this embodiment, the distributed data providing network node may be further associated with the data owner of the digital twin or a portion thereof (e.g., multiple datasets). The data owner may be a chemical product producer. The data owner may be as described above. The distributed data providing network node may be directly or indirectly connected to one or more dedicated data storage devices storing the digital twin. The multiple dedicated data storage devices may be under the control of the data owner of the digital twin. The data owner may access the multiple dedicated data storage devices. Therefore, the data owner may control access to the digital twin via the distributed data providing network node based on the distributed digital twin identifier and associated access data. This allows the data owner to retain complete control over the digital twin while enabling controlled sharing of the digital twin using the access data associated with it.
[0096] In embodiments, decentralized data consumption network nodes may be controlled or owned by consumers of chemical products. Consumers may be recipients of chemical products. Consumers may be processors of chemical products. Through decentralized data consumption network nodes, consumers can retrieve and / or receive at least a portion of a digital twin associated with the received chemical product(s), thereby allowing for improvements in the production of products containing the chemical product(s) or improvements in product recycling through the use of the retrieved and / or retrieved data. Using data during the production of discrete materials or components thereof can allow for improvements to the production process, for example, by controlling the production process based on the data to enhance the characteristics of the resulting components or discrete products or overall production efficiency. Using data during the recycling process can allow for reliable determination of the chemical composition of the components to be recycled, thereby improving recycling efficiency by determining the correct recycling process(s), recycling parameters, recycling plants(s), etc.
[0097] In this embodiment, access data may be stored in or associated with the database of a distributed data provider network node. Providing access data to the distributed data provider network node allows for separate storage of the digital twin from the distributed data provider network node, thereby ensuring a higher level of security because appropriate authentication and authorization schemes can be implemented for communication between the downstream database(s) storing the digital twin and the distributed data provider network node. Furthermore, storing only a minimal amount of data in the database associated with the distributed data provider network node reduces the risk of unwanted data leakage in the event of unauthorized access to the contents of the distributed data provider network node's database.
[0098] In embodiments of a method or apparatus for authorizing access to a digital twin, a request may be received based on a digital access element comprising a decentralized access identifier associated with a chemical product and digital twin location data. The decentralized access identifier may correspond to or be associated with a decentralized digital twin identifier contained within the digital twin. The digital twin location data may include a digital representation pointing to a decentralized data providing network node associated with the digital twin. The digital access element may correspond to a DID document associated with the decentralized digital twin identifier or decentralized access identifier, the DID document comprising a decentralized digital twin identifier or decentralized access identifier in the form of a decentralized identifier (DID). The digital access element may be retrieved from a centralized or decentralized repository. The digital access element may be retrieved based on a decentralized digital twin identifier associated with a physical identifier of the chemical product. For example, the decentralized identifier may be embedded in the physical identifier. In another instance, a chemical product identifier can be embedded in a physical identifier, and the chemical product identifier can be used to retrieve an associated distributed digital twin identifier and, based on the distributed digital twin identifier, retrieve a digital access element.
[0099] In embodiments of the method or apparatus for authorizing access to a digital twin, access data is applied during runtime before or while accessing the digital twin or a portion thereof.
[0100] In embodiments of a method for authorizing access to a digital twin, the method includes the step of authenticating distributed network nodes to access a digital twin associated with a chemical product. Authentication may include receiving a request for authenticating the distributed network node. The request may include a distributed network node identifier associated with the distributed network node. The request may include a distributed participant identifier associated with a distributed data consuming network node. The request may include a distributed participant identifier associated with a distributed data providing network node. Authentication may further include providing one or more authentication mechanisms associated with the distributed network node identifier. The authentication mechanism may be provided from at least one authentication data registry. The authentication data registry may be a centralized registry node, such as a centralized file system, a centrally managed distributed database, and / or a centrally managed peer-to-peer network. Centralized configuration allows for greater control and standardization via a central node. The authentication data registry may be a distributed registry, such as a distributed ledger, a distributed file system, a distributed database, and / or a peer-to-peer network. Distributed configuration allows for more efficient use of computing resources and strengthens the control of data owners. Furthermore, distributed configuration is independent of centrally managed nodes and improves the reliability and flexibility of the system. An authentication mechanism can be provided in response to requests from distributed network nodes to an authentication registry. Based on the authentication mechanism, requests for generating authentication data can be provided. The authentication data received in response to the request can be verified, and if the authentication passes, access to the chemical product dataset(s) can be authorized, or if the authentication fails, access can be denied. Access can be authorized by a method implemented by a device or computer used for authorizing access.
[0101] A distributed network node can be a distributed data providing network node associated with a distributed participant identifier, wherein authentication of the distributed data providing network node includes providing the distributed participant identifier and providing one or more authentication mechanisms associated with the distributed participant identifier from at least one authentication data registry. A distributed network node can also be a distributed data consuming network node associated with a distributed participant identifier, wherein authentication of the distributed data consuming network node includes providing the distributed participant identifier and providing one or more authentication mechanisms associated with the distributed participant identifier from at least one authentication data registry.
[0102] The distributed network node to be authenticated may provide the distributed network node performing the authentication with a dynamic token from at least one authentication data registry and / or an identity token to be presented in the authentication request. For example, a distributed data consuming network node may provide a distributed data providing network node with a dynamic token from at least one authentication data registry and / or an identity token to be presented in the authentication request. In another instance, a distributed data providing network node provides a distributed data consuming network node with a dynamic token from at least one authentication data registry and / or an identity token to be presented in the authentication request.
[0103] Authenticating a distributed network node can grant access to another distributed network node to be authenticated based on the authentication of the distributed network node's verification of dynamic tokens and / or identity tokens. The distributed network node to be authenticated can grant access to the authenticating distributed network node based on the authentication of the distributed network node's verification of dynamic tokens and / or identity tokens. For example, based on the distributed data providing network node's verification of dynamic tokens and / or identity tokens, a distributed data consuming network node can be granted access to the distributed data providing network node. In another instance, a distributed data providing network node can grant access to a distributed data consuming network node based on the distributed data providing network node's verification of dynamic tokens and / or identity tokens.
[0104] The authentication process can be implemented as part of a distributed data providing network node or a distributed data consuming network node. The authentication process can be provided by a separate authentication service accessible to the distributed data providing network node and / or the distributed data consuming network node. During the authentication process, one distributed network node can act as the verification service, while another distributed network node can act as the service to be authenticated.
[0105] At least one authentication mechanism may be based on a private-key-public-key infrastructure, digital certificates issued by a certificate authority, biometric authentication services, or a combination thereof. The public key may be included in a digital access element. The digital access element may include a decentralized pass identifier, access data, and the public key. The digital access element may be recorded in at least one authentication registry. In response to an authentication request from a decentralized data service, authentication data comprising a cryptographic signature encrypted with the private key requesting the decentralized data service may be provided. The provided authentication data may be verified based on at least one authentication mechanism. Verification may include: retrieving the public key from the authentication data registry; decrypting the cryptographic signature using the retrieved public key; and determining whether the authentication request is valid in response to a valid decryption result. If the authentication request is valid, access to the digital twin data may be granted; or if the authentication request is invalid, access to the digital twin data may be denied.
[0106] An authorization process can be performed on (multiple) distributed data consuming network nodes. Authorization can be performed by the distributed data providing network nodes. The authorization process can be performed before authentication of the distributed data consuming network nodes. The authorization process can be performed in parallel with the authentication of the distributed data consuming network nodes. The authorization process can be performed after authentication of the distributed data consuming network nodes. The authorization process can be performed only if the authentication process is successful. Upon successful authorization, the distributed data providing network node can grant access to the digital twin based on access data. Upon successful authorization, the distributed data providing network node can grant modified access to the digital twin or access to a modified digital twin based on access data. Attached Figure Description
[0107] The disclosure will be further described below with reference to the accompanying drawings. In the drawings and the disclosure, the same reference numerals are intended to refer to the same or similar elements, components and / or parts.
[0108] Figures 1A to 1C Demonstrates a centralized computing environment ( Figure 1A Distributed computing environments Figure 1B ) and distributed computing environments ( Figure 1C Example implementation of ).
[0109] Figure 2 An example of chemical production controlled by an operating system including a digital twin management system is shown.
[0110] Figure 3 An example is shown of a production system that provides a chemical product associated with one or more digital twins.
[0111] Figure 4A An example apparatus is shown for controlling access to a digital twin of a physical entity of a chemical product produced from one or more chemical input materials.
[0112] Figure 4B An example of a system for controlling access to a digital twin of a physical entity of a chemical product produced from one or more chemical input materials is shown.
[0113] Figure 5A This demonstrates the first example of linking a digital twin of a chemical product with a digital access element via a distributed digital twin identifier.
[0114] Figure 5B A second example is shown, demonstrating the link between the digital twin of a chemical product and the digital access element via a distributed digital twin identifier.
[0115] Figure 6AAn example of access data, including a distributed digital twin identifier and one or more authorization rules, is shown.
[0116] Figure 6B Further examples of access data, including distributed digital twin identifiers and one or more authorization rules, are shown.
[0117] Figure 7A Examples of apparatus and associated methods for controlling access to digital twins of chemical products produced from one or more chemical input materials through chemical production are shown.
[0118] Figure 7B Examples of apparatus and associated methods for controlling access to digital twins of chemical products produced from one or more chemical input materials through chemical production, and for authorizing access to digital twins of chemical products produced from one or more chemical input materials through chemical production, are shown.
[0119] Figure 7B Examples of apparatus and associated methods for accessing digital twins of chemical products produced by chemical production from one or more chemical input materials using digital access elements are shown.
[0120] Figure 8 A flowchart illustrating a computer-implemented method for generating a digital twin of a physical entity of a chemical product, according to an example embodiment of this disclosure, is shown.
[0121] Figure 9 A flowchart illustrating a computer-implemented method for controlling access to a digital twin of a physical entity of a chemical product, according to an example embodiment of this disclosure, is shown.
[0122] Figure 10A , Figure 10B An example is shown that can be used to generate relational representations of mapping data.
[0123] Figure 11 A flowchart illustrating a computer-implemented method for authorizing network nodes to access a digital twin of a physical entity containing a chemical product, according to an example embodiment of this disclosure, is provided.
[0124] Figure 12 A schematic representation is shown for authorizing distributed data delivery network nodes to access digital twins or portions thereof associated with chemical products using digital access elements.
[0125] Figure 13 A flowchart illustrating a computer-implemented method for processing a digital twin or part thereof of a physical entity of a chemical product according to an example embodiment of this disclosure is shown.
[0126] Figure 14 A computer-implemented method, according to an example embodiment of this disclosure, is shown for authorizing distributed data consumption network nodes to access a digital twin or a portion thereof of the physical entity of a chemical product using a digital access element associated with that chemical product.
[0127] Figure 15 Examples of digital access elements, including DID owner data, DID document data, and decentralized identity infrastructure, are shown.
[0128] Figure 16 Examples of digital access elements, including certificate-based data, ID-based digital access element data, and digital access elements of a decentralized identity infrastructure, are shown.
[0129] Figure 17A , Figure 17B An example of an authentication protocol between distributed data consuming network nodes and distributed data providing network nodes is shown. Detailed Implementation
[0130] The following embodiments are merely examples of methods, apparatuses, systems and computer elements for implementing the computer implementations disclosed herein, and should not be considered limiting.
[0131] Figures 1A to 1C Different computing environments are showcased, including centralized, decentralized, and distributed computing environments. The methods, apparatuses, systems, digital twins, digital access elements, uses, and computer elements disclosed herein can be implemented in decentralized or at least partially decentralized computing environments. In particular, different challenges exist for data sharing or exchange within an ecosystem with multiple participants. Data sovereignty can be considered a core challenge. It can be defined as the ability of a natural or legal entity to fully and autonomously determine its data. To achieve this, specific capability-related aspects can be implemented throughout the chemical value chain, including the requirement for secure and trusted data exchange within the business ecosystem. Specifically, the chemical industry requires tailored solutions to deliver chemical products in a more sustainable manner through the use of digital ecosystems.
[0132] Figure 1A An example embodiment of a centralized computing system 100a is shown, which includes a central computing node (the solid circle in the middle) and a plurality of peripheral computing nodes 101.1 to 101.N (represented as the outer solid circles). The computing system may include one or more computing nodes, a node system, or a combination thereof.
[0133] In this example, peripheral computing nodes 101.1 to 101.N can be connected to a central computing system (or server). In another example, peripheral computing nodes 101.1 to 101.N can be attached to a central computing node via, for example, a terminal server (not shown). Most functions can be performed by or obtained from the central computing node (also referred to as a remote centralized location). A peripheral computing node 101.N has been extended to provide an overview of the components present in the peripheral computing node. The central computing node may include the same components described with respect to peripheral computing node 101.N. Each computing node 101 (101.1 to 101.N) may include at least one hardware processor 102 and memory 104.
[0134] Computing node 101 (101.1…101.N) may include program code, schematically represented as a plurality of structures 106. The plurality of structures 106 may be referred to as executable components, executable instructions, computer-executable instructions, or instructions. An executable component or any equivalent thereof may be the name of a structure well known to those skilled in the art of computing, which may be software, hardware, or a combination thereof, or may be implemented in software, hardware, or a combination thereof. For example, when implemented in software, those skilled in the art will understand that the structure of an executable component includes software objects, routines, methods, etc., that execute on computing node 101 (101.1…101.N), whether such an executable component resides in the heap of computing node 101 (101.1…101.N) or on a computer-readable storage medium. In this context, those skilled in the art will recognize that the structure of the executable component exists on a computer-readable medium such that when interpreted by one or more processors (e.g., by processor threads) of the compute node 101 (101.1…101.N), the compute node 101 (101.1…101.N) performs its functions. Such a structure can be directly computer-readable by the processor (where the executable component is binary). Alternatively, the structure can be configured to be interpretable and / or compileable (whether in a single stage or in multiple stages) to generate such binary code that can be directly interpreted by the processor. This understanding of the example structure of the executable component is entirely within the comprehension of those skilled in the art of computing. Examples of executable components implemented in hardware include hard-coded or hard-wired logic gates that are implemented specifically or almost specifically in hardware, such as within a field-programmable gate array (FPGA), an application-specific integrated circuit (ASIC), or any other dedicated circuit. In this specification, the terms component, agent, manager, service, engine, module, virtual machine, etc., are used synonymously with executable component.
[0135] The processor 102 of each computing node 101 (101.1...101.N) can direct the operation of each computing node 101 (101.1...101.N) in response to executing computer-executable instructions constituting executable components. For example, such computer-executable instructions can be embodied on one or more computer-readable media forming a computer program product. The computer-executable instructions can be stored in the memory 104 of each computing node 101 (101.1...101.N). The computer-executable instructions include, for example, instructions and data that, when executed at the processor 101, cause the general-purpose computing node 101 (101.1...101.N), the special-purpose computing node 101 (101.1...101.N), or the special-purpose processing device to perform a specific function or group of functions. Alternatively or additionally, the computer-executable instructions can configure the computing node 101 (101.1...101.N) to perform a specific function or group of functions. Computer executable instructions can be, for example, binary or even instructions that have undergone some kind of transformation (such as compilation) before being directly executed by the processor, such as intermediate format instructions, assembly language, or even source code.
[0136] Each computing node 101 (101.1...101.N) may include a communication channel 108 that allows each computing node 101.1...101.N to communicate with the central computing node 101, for example, a network capable of transmitting electronic data between computing nodes 101 (101.1...101.N) and / or modules and / or other electronic devices. When information is transmitted or provided to computing nodes 101 (101.1...101.N) via a network or another communication connection (hardwired, wireless, or a combination of hardwired and wireless), computing nodes 101 (101.1...101.N) may consider that connection as a transmission medium. The transmission medium may include a network and / or a data link that can be used to carry desired program code in the form of computer-executable instructions or data structures and can be accessed by general-purpose or special-purpose computing nodes 101 (101.1...101.N). Combinations of the above may also be included within the scope of computer-readable media.
[0137] Multiple computing nodes 101 (101.1 to 101.N) may further include a user interface system 110 for establishing an interface connection with a user. The user interface system 110 may include an output mechanism 110A and an input mechanism 110B. The principles described herein are not limited to the exact output mechanism 110A or input mechanism 110B, as this will depend on the nature of the device. However, the output mechanism 110A may include, for example, a display, speaker, monitor, haptic output, hologram, etc. Examples of the input mechanism 110B may include, for example, a microphone, touchscreen, hologram, camera, keyboard, mouse or other pointer input, any type of sensor, etc.
[0138] Figure 1B An example embodiment of a distributed computing environment 100b is shown, in which several computing nodes 101.1' to 101.N' are represented as solid circles. Figure 1A Compared to the centralized computing environment 100a shown, the computing nodes 101.1' to 101.N' in the distributed computing environment are not connected to a central computing node and are therefore not under the control of a central computing node. Instead, both hardware and software resources can be allocated to each individual computing node 101.1'...101.N' (local or remote computing systems), and data can be distributed among the individual computing nodes 101.1'...101.N' to perform tasks. Therefore, in a distributed system environment, program modules can reside in both local and remote memory storage devices. A computing node 101.N' has been extended to provide an overview of the components present in computing node 101.N'. In this example, computing node 101.N' includes components related to... Figure 1A The same components as described above.
[0139] Figure 1C An example embodiment of a distributed computing environment 100c is illustrated. In this example, the distributed cloud computing environment 100c may include the following computing resources: (multiple) mobile devices 114, applications 116, databases 118, data storage 120, and (multiple) servers 122. The cloud computing environment 100c may be deployed as a public cloud 124, a private cloud 126, or a hybrid cloud 128. The private cloud 126 may be owned by an organization, and only members of the organization with appropriate access rights may use the private cloud 126, thereby ensuring that the data in the private cloud is at least confidential. Conversely, data stored in the public cloud 124 may be accessible to anyone via the Internet. The hybrid cloud 128 may be a combination of both the private cloud 124 and the public cloud 126, and may allow some data to be confidential while other data to be publicly available.
[0140] Figure 2An example of chemical production 204 is illustrated, which is combined with an operating system 208, including a digital twin management system, to produce one or more chemical products from one or more inbound materials 202. The operating system 208 can be used to operate chemical production 204, for example, by managing different production chains existing within the chemical production process. To produce one or more chemical products 206, different chemical materials 202 (hereinafter also referred to as inbound materials 202) can be provided as physical inputs from material providers or suppliers. The physical inputs of chemical production 204 can include chemical materials, such as raw materials, intermediate materials, or combinations thereof. Raw materials can be virgin or recycled. Inbound materials 202 can be fed into chemical production 204 at any entry point. Inbound materials 202 can be fed into chemical production 204 at the starting point of chemical production 204. Inbound materials can be considered as inputs for chemical production 204.
[0141] Chemical production 204 can be a chemical production network comprising multiple interconnected processing steps. A chemical production network can be an integrated chemical production network with interconnected production chains. A chemical production network can include multiple distinct production chains having at least one common intermediate product. A chemical production network can include multiple stages of a chemical value chain. A chemical production network can include multiple production chains that produce chemical products as outputs from one or more input materials. A chemical production network can include multi-layered chemical value chains. A chemical production network can include a physically interconnected arrangement of production sites. Production sites can be located in the same location or in different locations. In the latter case, production sites can be interconnected via dedicated transportation systems such as pipelines, supply chain vehicles (e.g., trucks), supply chain ships, or other cargo transport vehicles.
[0142] Chemical production 204 may include multiple production steps. The production steps included in chemical production 204 can be defined by the system boundary of chemical production 204. The system boundary can be defined by the location or control of the production processes. The system boundary can be defined by the site of chemical production 204. The system boundary can be defined by a production process jointly controlled by one or more entities. The system boundary can be defined by a value chain with interleaved production processes leading to the final product, which can be separately controlled by multiple entities.
[0143] Chemical production 204 can transform incoming material 202 into one or more chemical products 206 leaving chemical production 204. The transformation can occur via intermediate chemical products. The transformation can be a chemical reaction or any other processing step, such as physical processing. Chemical reactions can produce mixtures of (multiple) different chemical products because the yield of a chemical reaction can be less than 100%. Therefore, a chemical reaction of one or more starting materials (e.g., (multiple) incoming material 202) can produce a mixture of (multiple) different chemical products. Thus, a chemical reaction can be characterized by a one-to-many or many-to-many relationship between the starting materials and the resulting reaction products. This contrasts with discrete manufacturing, where there is a many-to-one relationship between parts / components and assemblies; for example, the result of discrete manufacturing steps is a specific and predictable assembly. Because the yield of a chemical reaction is not 100%, the desired amount of chemical product 206 (e.g., (multiple) chemical products to be supplied to upstream participants in the chemical ecosystem) is less than the theoretical amount of said chemical product calculated based on the amount of starting material. Such mixtures typically require the separation of the different chemical products contained within the mixture. This allows for the avoidance of negative impacts from impurities and unreacted input material 202 on further processing of chemical product 206. Separation may include distillation, washing, extraction, crystallization, and recrystallization. The resulting mixture may contain unreacted starting materials, such as unreacted input material 202. Unreacted starting materials can be reintroduced into the chemical reaction to reduce the amount of starting material required. The resulting mixture may contain multiple desired chemical products 206 to be supplied to upstream participants in the chemical ecosystem, such as chemical product consumers or chemical product processors. The resulting mixture may contain multiple intermediate chemical products used as input materials in further chemical reactions performed within chemical production 204. This allows for a reduction in the amount of waste associated with the disposal of said intermediate chemical products and / or the amount of energy associated with transporting these intermediate products to another chemical production. The resulting mixture may contain multiple waste chemical products, for example, multiple chemical products that cannot be further used and require disposal, for example, by incineration. Waste chemical products may be generated by undesirable chemical side reactions.
[0144] Chemical production 204 may include multiple sensors 210a, 210b. Sensors 210a, 210b can measure at least one chemical and / or physical property of (multiple) chemical products 206 produced by chemical production 204. Sensors 210a, 210b can measure at least one chemical and / or physical property of (multiple) incoming materials 202 supplied to chemical production 204. Sensors 210a, 210b may include a sensor 2010b configured to determine the amount of (multiple) incoming materials 202 and / or the (multiple) chemical products produced. Examples of such sensors may include scales or flow meters. Sensors 210a, 210b may include a sensor 210a configured to measure at least one chemical and / or physical property of (multiple) incoming materials 202. Measurement of the chemical and / or physical properties of (multiple) incoming materials 202 allows for process control based on the measured data. Sensors 210a and 210b may include sensor 210a configured to determine the chemical and / or physical properties of the produced chemical product 206. Sensor 210a configured to measure chemical properties may measure data associated with or corresponding to heat of combustion, enthalpy of formation, toxicity, chemical stability in a given environment, flammability, (multiple) oxidation states, corrosiveness, flammability, acidity and alkalinity, and pH value. Sensor 210a configured to measure physical properties may measure data associated with or corresponding to absorption, brittleness, boiling point, capacitance, color, concentration, density, ductility, distribution, potency, elasticity, charge, conductivity, impedance, potential, flow rate, fluidity, hardness, heat capacity, inductance, intrinsic impedance, brightness, luminosity, gloss, mass, melting point, opacity, permeability, permittivity, plasticity, pressure, emissivity, resistivity, reflectivity, refractive index, solubility, specific heat, strength, stiffness, temperature, tension, thermal conductivity, thermal resistance, viscosity, volume, and wave impedance. Data measured by sensors 210a and 210b can be stored in one or more databases, for example, contained in Figure 4B The database in data source layer 420. One or more databases may be distributed databases. The stored data may be associated with each of the input material identifiers and / or chemical product identifiers.
[0145] The operating system 208 for chemical production can monitor and / or control chemical production 204 based on operating parameters associated with different processes performed by chemical production 204. One process step monitored and / or controlled may be the feeding of inbound material 202 or the release of the produced (multiple) chemical products 206. Another process step monitored and / or controlled may be the separation of (multiple) chemical products contained in a mixture produced by a chemical reaction performed within chemical production 204. Yet another process step monitored and / or controlled may be the determination of the chemical (multiple) chemical products 206 based on data collected in association with the production of the chemical products (e.g., data measured by sensors 210a, 210b before, during, and / or after the production of the produced (multiple) chemical products 206). Yet another process step monitored and / or controlled may be, for example, a method and apparatus implemented using a computer for generating a digital twin (e.g., in... Figure 7A , Figure 7B and Figure 8 The apparatus described in the context of [the above] is used to generate a digital twin. Another process step that is monitored and / or controlled may be controlling access to the generated digital twin by one or more distributed data consuming network nodes, for example, as in [the context of the above]. Figure 4A , Figure 4B , Figure 7A , Figure 7B and Figure 9 As described in the context of [the previous sentence]. Another process step being monitored and / or controlled could be the generation of a digital access element associated with a digital twin of the chemical product produced, for example, as in [the previous sentence]. Figure 7B As described in the context. Another process step that is monitored and / or controlled could be the authorization of access to the generated digital twin, for example, as in... Figure 11 , Figure 12 and Figure 14 As described in the context.
[0146] Operating system 208 can be configured to determine the physical and / or chemical properties of a chemical product based on collected data associated with its production. Operating system 208 can be configured to generate a digital twin of the chemical product, for example, as in... Figure 3 and Figure 8 As described in the context. Operating system 208 can be configured to generate numeric access elements, for example, as in... Figure 14 As described in the context of [the previous sentence]. The operating system can be configured to control access to the digital twin, for example, as in [the previous sentence]. Figure 9 As described in the context of [the previous sentence]. The operating system can be configured to authorize access to the digital twin, for example, as in [the previous sentence]. Figure 11 and Figure 14 As described in the context.
[0147] Figure 3 Examples of digital twins used to generate different chemical products in a chemical ecosystem are shown. Figure 3 Specifically, examples are shown of digital twins for generating precursor materials (e.g., intermediate chemical products) and digital twins for generating chemical products at least partially produced from said precursor materials. The chemical product (e.g., chemical product 206) can be produced by chemical production 204 including operating system 208, for example, as in... Figure 2 As described in the context.
[0148] The production of a chemical product may include a two-step process: 1) producing (multiple) intermediate chemical products from one or more input materials; and 2) producing a chemical product, at least partially, from (multiple) intermediate chemical products. For the production of (multiple) intermediate chemical products, the input materials may be used as physical inputs. The input materials may be provided by (multiple) raw material providers. The input materials may include virgin or recycled materials. The input materials may be provided as input material 202 for the production of intermediate chemical products. The production of intermediate chemical products may be chemical production 204, as in... Figure 2 The context described herein. Inbound materials may include physical identifiers. Physical identifiers may be distributed inbound material identifiers or may be associated with distributed inbound material identifiers. Distributed inbound material identifiers may be associated with a digital twin of the inbound material. Operating systems for the production of intermediate chemical products (e.g., in...) Figure 2 The operating system 208 described in the context of Figure 7 may include or communicate with an ID reader configured to read a physical identifier and determine a distributed inbound material identifier associated with the physical identifier. The distributed inbound material identifier may be associated with a digital twin or a portion thereof of the corresponding inbound material. The digital twin of the inbound material may be generated as described in the context of Figure 7. The digital twin may include measured physical and / or chemical properties and / or physical and / or chemical properties determined based on collected data associated with the production and / or use of the inbound material. Physical and / or chemical properties can be used as described in... Figure 2 The sensor is used to measure in the context described above. Physical and / or chemical properties can be determined based on the collected data, such as in... Figure 2 As described in the context. A digital twin may further include the name of the inbound material, the producer of the inbound material, the inbound material declaration data, the inbound material safety data, emissions data (such as CO2 footprint and / or PCF data), recyclable content data, bio-based content data, analytical certificate data associated with the inbound material, certificates associated with the inbound material, or a combination thereof.
[0149] The operating system can be configured to access digital twins or portions thereof of (multiple) inbound materials provided for the production of intermediate chemical products based on identified decentralized inbound material(s) identifiers, for example, from (multiple) decentralized data provider network nodes associated with (multiple) inbound material(s) providers (see, for example...). Figure 12 This data can be used to operate the chemical production of (multiple) intermediate chemical products. For example, if (multiple) incoming materials are (multiple) recycled materials, a production step to purify (multiple) recycled materials can be performed. For example, if (multiple) incoming materials are virgin materials, the purification step can be omitted. (Multiple) intermediate chemical products can be formed by causing (multiple) incoming materials to undergo chemical reactions and / or by physically treating (multiple) incoming materials. Chemical reactions can include polymerization, precipitation, and other generally known chemical reactions. Physical treatments can include mixing, grinding, extrusion, etc. The production of intermediate chemical products can include sensors (such as sensors 210a, 210b) measuring the physical and / or chemical properties of (multiple) intermediate chemical products produced by the production of intermediate chemical products, such as in... Figure 2 As described in the context of [the previous sentence]. The operating system can be configured to determine physical and / or chemical properties based on collected data associated with the production of (multiple) intermediate chemical products, for example, as in [the previous sentence]. Figure 2 As described in the context.
[0150] The operating system can be configured to generate multiple digital twins of the intermediate chemical products produced, as described in the context of Figure 7 below. Each digital twin may include a distributed intermediate chemical product identifier and at least one chemical and / or physical property of the corresponding intermediate chemical product as measured by sensors 210a, 210b and / or at least one physical and / or chemical property of the corresponding intermediate chemical product determined based on collected data. The digital twin may further include multiple distributed inbound material identifiers of the inbound materials used to produce the corresponding intermediate chemical product. This allows tracking of the inbound materials used to produce the corresponding intermediate chemical product. The digital twin may further include data previously described regarding the digital twins of the inbound materials. Digital access elements for the intermediate chemical products can be generated, for example, as shown in... Figure 14As described in the context. The produced (multiple) intermediate chemical products can be packaged, and the package can include physical identifiers, such as QR codes, embossed codes, or optical holographic codes, such as zero-order diffraction microstructures. The physical identifier can be assigned to the corresponding decentralized intermediate chemical product identifier of the digital twin and / or the corresponding decentralized pass identifier of the intermediate chemical product digital access element. The assignment of physical identifiers and decentralized intermediate chemical product identifiers can be performed by an ID assigner running locally in a decentralized and / or distributed system. For example, the packaging pipeline can include a tagging device that detects the package of the produced (multiple) intermediate chemical products. Based on this identification, a requester can generate a request for generating a digital twin, and the corresponding decentralized intermediate chemical product identifier included in the generated digital twin can be assigned, for example, by the ID assigner to the corresponding physical identifier (see also below). Figure 7A , Figure 7B Assignment may include encoding the corresponding distributed intermediate chemical product identifier in a physical identifier, and providing the physical identifier (such as a code) to a labeling device configured to attach the physical identifier to the corresponding intermediate chemical product (such as the packaging of the corresponding intermediate chemical product). The ID assigner may be part of the labeling device or may be a separate device.
[0151] In the second step, the (multiple) intermediate chemical products produced in step 1) can be provided as input material 202 to the chemical production process to produce chemical product 206. The chemical production process can be carried out in... Figure 2 The chemical production 204 is described in the context of the above. Chemical production can be chemical production that produces (multiple) intermediate chemical products. Chemical production can be different from chemical production that produces (multiple) intermediate chemical products. In addition to the (multiple) intermediate chemical products produced in step 1), (multiple) additional incoming materials can be provided to the chemical production and can be used to produce chemical product 206. The (multiple) intermediate chemical products can include recycled (multiple) intermediate chemical products and / or intermediate chemical products produced by a production of intermediate chemical products different from the production of intermediate chemical products described in the context of step 1). Such (multiple) intermediate chemical products can be associated with a physical identifier. The physical identifier can be associated with a distributed intermediate chemical product identifier, through which a digital twin or a portion thereof of the corresponding intermediate chemical product can be accessed. An ID reader can be used to read the physical identifier associated with the corresponding distributed intermediate chemical product identifier as described above. A digital twin or a portion thereof can be retrieved via a distributed data consumption network node using the distributed intermediate chemical product identifier as described above.
[0152] Production data from intermediate chemical products can be obtained from the chemical production operating system (e.g., in...). Figure 2 The operating system 208 described in the context of this study is used to produce the chemical product 206 as described above. Chemical production may include sensors (such as sensors 210a, 210b) measuring the physical and / or chemical properties of the chemical product produced by the chemical production, such as in... Figure 2 As described in the context of [the previous sentence]. The operating system can be configured to determine physical and / or chemical properties based on collected data associated with the production of chemical products, for example, as in [the previous sentence]. Figure 2 As described in the context.
[0153] The operating system can be configured to generate a digital twin of the chemical product being produced or packaged as described above. The digital twin may include a distributed chemical product identifier as described above, and at least one measured and / or determined physical and / or chemical property. The digital twin may include multiple distributed intermediate chemical product identifiers. This allows tracking of multiple intermediate chemical products used to produce the chemical product, and also indirectly tracks multiple incoming materials used to produce the multiple intermediate chemical products. The digital twin may include additional data as described above, such as producer name, producer brand, producer identifier, chemical product name, chemical product brand, and chemical product identifier.
[0154] It is possible to generate digital access elements associated with chemical products, for example, as in Figure 14 As described in the context above. Distributed chemical product identifiers and / or digital access elements can be associated with chemical products via physical identifiers as described above. Digital access elements can include distributed pass identifiers and access data. Access data can include a digital representation pointing to a digital twin or a portion thereof. Distributed pass identifiers can correspond to or be associated with distributed chemical product identifiers.
[0155] Figure 4A An example device 402 is shown for controlling access to a digital twin of a physical entity of a chemical product produced from one or more chemical input materials. One or more distributed data consumption network nodes (not shown, see example...) Figure 7A , Figure 7B Access to the digital twin can be controlled by a distributed data provisioning network node 416 associated with the digital twin. The distributed data provisioning network node can be associated with or connected to (not shown, see example) multiple data storage devices storing the digital twin. Figure 7A , Figure 7B ).
[0156] Apparatus 402 may be included in operating system 208 of chemical production 204, which produces chemical products from one or more incoming materials (see, for example...). Figure 2 The chemical product can be an intermediate chemical product. The chemical product can also be a final chemical product. Device 402 can be communicatively coupled to an operating system 208 of a chemical production 204 that produces the chemical product. Device 402 can be configured to control access to a digital twin of the chemical product, for example, using... Figure 9 The method described in the context.
[0157] Device 402 may be coupled to digital twin (DT) storage device 414. DT storage device 414 may store digital twins of chemical products. Each digital twin stored in DT storage device 414 may include a distributed digital twin identifier and at least one measured and / or determined chemical and / or physical property as described above. Each digital twin may include, for example, in... Figure 3 Additional data described in the context. The digital twin stored in the DT storage device 414 can be generated by means of a device for generating the digital twin (not shown, see, for example) Figure 7A , Figure 7B Use the following text Figure 8 The method described in [the document] is used to generate it.
[0158] Apparatus 402 may include a distributed digital twin identifier (ID) providing unit 404 configured to provide distributed digital twin identifiers for corresponding digital twins of chemical products. In this embodiment, the distributed ID providing unit 404 is shown as a separate unit. In another embodiment, the distributed ID providing unit 404 may be part of an access data generator 410. The distributed ID providing unit 404 may provide distributed digital twin identifiers in response to a request received at said unit 404. The request may include a distributed digital twin identifier. The request may include a chemical product identifier associated with the chemical product, and the distributed digital twin identifier providing unit may be configured to provide a distributed digital twin identifier based on the received chemical product identifier. For example, the distributed digital twin identifier providing unit may retrieve a distributed digital twin identifier from a DT storage device 414 storing digital twins based on a chemical product identifier. The request may be generated by an apparatus for generating digital twins after the corresponding digital twin has been generated. Requests can be received from an input / output device (not shown) connected to the distributed ID providing unit 404. For example, a user can trigger the generation of access data via the input / output device, for example, by providing a distributed digital twin identifier or a chemical product identifier associated with a corresponding chemical product.
[0159] Apparatus 402 may further include a mapping data provider 406 configured to provide mapping data. The mapping data may include data associated with chemical products produced from one or more chemical input materials, which is correlated with corresponding decentralized participant(s) identifiers associated with decentralized participant(s)(s). The decentralized participant(s) ... Multiple consumer identifiers can be associated with chemical products supplied to multiple consumers associated with those consumer identifiers. Multiple consumer identifiers can be associated with chemical product identifiers associated with the chemical product. Multiple consumer identifiers can be mutually associated with chemical product identifiers associated with the chemical product. This allows the use of chemical product identifiers associated with a chemical product to identify the multiple consumer identifiers associated with said chemical product. Data associated with multiple participating nodes may include multiple distributed participant identifiers associated with said participating nodes.
[0160] Mapping data provider 406 can be further configured to generate mapping data. The mapping data provider can be configured to associate data related to a chemical product produced from one or more chemical input materials with corresponding decentralized participant identifiers contained in data related to decentralized participant nodes(s), based on a relational representation, whereby the data related to the chemical product is associated with data related to the same decentralized participant node(s). The relational representation can specify consumers(s) associated with the chemical product and / or chemical products associated with consumers(s). The relational representation can specify consumers(s) based on consumer identifiers (e.g., consumer identifiers contained in data related to the chemical product) and associated decentralized network identifiers (e.g., decentralized network identifiers contained in data related to decentralized participant nodes(s). The relational representation can correspond to a data structure containing relationships between chemical products, consumer identifiers(s), and decentralized participant identifiers(s). An example of such a relational representation is shown in... Figure 10A and Figure 10B The example is shown below. The relation representation can be stored in the identifier DB408.
[0161] Mapping data provider 406 can be configured to verify data associated with the distributed participant(s) nodes. Verification can be performed before or after the mapping data is generated. Verification can be based on verifiable claims associated with the respective distributed participant identifiers as described above. Verification ensures that only the trusted distributed participant(s) identifiers are included in the mapping data used to generate access data, thereby ensuring that only the trusted distributed data consuming network nodes of the distributed network can be authorized to access the digital twin or a portion thereof.
[0162] Apparatus 402 may further include an access data generator 410. The access data generator may be connected to a mapping data provider 406, a distributed ID provider 404, and a rule database 412. The rule database 412 may store data related to chemical products and / or authorization rules associated with chemical product identifiers(s). The access data generator 410 may include the mapping data provider 406 (not shown). The access data generator 410 may be configured to generate access data for at least a portion of the digital twin based on the mapping data provided by the mapping data provider 406. The access data generator 410 may be configured to generate access data for each dataset included in the digital twin data. This allows access data to be defined at the dataset level, thus providing finer-grained access to the digital twin data, as different access data can be generated and applied to different datasets. The access data generator 410 may be configured to generate access data based on the provided mapping data by selecting authorization rules(s) stored in the rule database 412. For example, rule DB 412 may store authorization rules associated with (multiple) customer identifiers and / or chemical product identifiers. Access data generator 410 may be configured to generate one or more authorization rules based on (multiple) distributed participant identifiers contained in the mapping data provided by mapping data provider 406. Access data generator 401 may be configured to generate one or more authorization rules based on chemical product-related data contained in the mapping data provided by mapping data provider 406.
[0163] Access data may include a distributed digital twin identifier provided by a distributed ID provider 404 and one or more authorization rules associated with the distributed digital twin identifier. Access data may further include a digital representation pointing to the digital twin or a portion thereof. The digital representation may point to a DT storage device 414 storing the corresponding digital twin of the chemical product. Access data generator 410 may be configured to generate the digital representation. One or more authorization rules may define access to and / or use of at least a portion of the digital twin by one or more distributed data consuming network nodes associated with one or more distributed participant identifiers included in the provided mapping data. One or more authorization rules may include one or more rules specific to one or more distributed participant identifiers. This enables control over access to the digital twin or a portion thereof by filtering the distributed data consuming network nodes based on the distributed participant identifier associated with each distributed data consuming network node, through a unique link between the distributed digital twin identifier and the authorization rules. One or more authorization rules may include one or more local rules specific to a particular location, wherein the location is associated with a jurisdiction, and the local rules for that location are associated with legal requirements related to the supply of the chemical product. One or more authorization rules may include one or more rules specific to attribute values associated with participants within the chemical product ecosystem. The attribute values associated with a participant may be related to or correspond to the participant's role within the chemical product ecosystem. One or more authorization rules may include at least one regulatory directive configured to provide access to a digital twin or a portion thereof in connection with regulatory requirements relating to the supply of the chemical product. The one or more authorization rules may include one or more prescribed rules relating to emissions data, production data, recycled content data, bio-based content data, source data, working conditions data, or combinations thereof. One or more authorization rules may include obligations of multiple distributed data consumption network nodes associated with corresponding distributed participant(s) identifiers and / or obligations of multiple distributed network nodes to use digital twins or a portion thereof accessed by multiple data consumption network nodes associated with corresponding distributed participant(s) identifiers.
[0164] Access data generator 410 can be configured to provide the generated access data to distributed data providing network node 416. Distributed data providing network node 416 can be part of device 402. Distributed data providing network node 416 can communicate with device 402 (not shown). Distributed data providing network node 416 can be part of a distributed network. Distributed data providing network node 416 can include database 418. Distributed data providing network node 416 can be configured to store the access data provided by access data generator 410 in database 418. Distributed data providing network node 416 can be configured to control access to digital twin data by distributed data consuming network nodes based on a distributed digital twin identifier associated with a digital twin of the chemical product and the corresponding access data stored in database 418. This enables the control of distributed data provider network nodes' access to the digital twin based on the unique relationship between the distributed digital twin identifier and one or more authorization rules, using the authorization rules(s) based on the distributed participant(s) identifiers associated with the distributed data consumer network(s) ...
[0165] Figure 4B An example of a system for controlling access to a digital twin of a physical entity of a chemical product produced from one or more chemical input materials is shown. One or more distributed data-consuming network nodes (not shown, see example) Figure 7A , Figure 7B Access to the digital twin can be controlled by a distributed data provisioning network node 416 associated with the digital twin. The distributed data provisioning network node can be associated with or connected to (not shown, see example) multiple data storage devices storing the digital twin. Figure 7A , Figure 7B )
[0166] System 400b may be included in operating system 208 of chemical production 204, which produces chemical products from one or more incoming materials (see, for example...). Figure 2 The chemical product can be an intermediate chemical product. The chemical product can also be a final chemical product. System 400b can be communicatively coupled to the operating system 208 of the chemical production 204 that produces the chemical product. System 400b can be configured to control access to a digital twin of the chemical product, for example, using... Figure 9 The method described in the context.
[0167] System 400b may include a data source layer 420. Data source layer 420 may include one or more distributed data sources. The one or more distributed data sources may be distributed databases. The distributed data sources may be data lakes, which include data associated with chemical products from multiple distributed data sources. The one or more distributed data sources may contain at least one measured and / or determined chemical and / or physical property of the chemical product (e.g., chemical product 206 produced from one or more inbound materials 202 via chemical production 204), such as... Figure 2 and Figure 3 As described in the context. At least one physical and / or chemical property can be measured using a sensor (e.g., sensor 210a, 210b), and the measured one or more chemical and / or physical properties / characteristics can be stored in a distributed data source. At least one physical and / or chemical property can be determined before, during, and / or after production based on data acquired from the sensor (e.g., sensor 210a, 210b), and the determined one or more chemical and / or physical properties can be stored in a distributed data source. One or more distributed data sources may further include chemical product names, chemical product producers, chemical product declaration data, chemical product safety data, emission data, recycled content data, bio-based content data, analytical certificate data associated with the chemical product, certificates associated with the chemical product, or combinations thereof.
[0168] Data source layer 420 can be owned or controlled by the data owner of the data associated with the chemical product data. Data source layer 404 can be associated with the data owner of the data associated with the chemical product data. Data source layer 420 can be connected to digital twin provider layer 428, for example, via a communication interface such as a network or API. Data source layer 420 can be connected to service layer 422, which exists between data source layer and data collection unit 412. Therefore, service layer 422... Figure 4B Some implementations of the system shown in the figure may be optional.
[0169] Service layer 422 can be configured to collect data based on predefined selection criteria. Service layer 422 can be configured to apply one or more semantic models to the collected data to generate a unified data set. Service layer 422 can be configured to provide the unified data set to a data streaming platform included in service layer 422. The streaming platform may include a platform deployed across multiple hosts, clusters, data centers, and / or other sets of computing resources. The streaming platform may include one or more client processes that generate activity records and publish these records to one or more event streams. For example, when a certain type of activity occurs in data source layer 420 (e.g., providing a new unified data set, producing a new batch of chemical products, measuring or determining one or more chemical and / or physical properties of the produced chemical products, etc.), one or more client processes may generate records of the activity and publish the records to one or more event streams. The data streaming platform may then propagate the records to one or more components that subscribe to the same event stream(s). The data propagated to one or more components may be stored in a database residing within service layer 422 or digital twin provider layer 428. Therefore, the data streaming platform allows for the capture and transmission of activities occurring in multiple distributed data sources across the data source layer 420 in a unified and scalable manner.
[0170] Digital twin provider layer 428 can be configured to provide digital twins of chemical products. Each digital twin may include a distributed digital twin identifier and at least one measured and / or determined physical and / or chemical property. Digital twins may be linked to chemical products via the distributed digital twin identifier. Digital twin provider layer 428 may include a digital twin storage device for storing the digital twins, such as DT storage device 414. The digital twin storage device may be included in device 424 for generating digital twins. Digital twin provider layer 428 can be configured to generate digital twins of chemical products based on data collected from data source layer 420 (such as measured and / or determined physical and / or chemical properties stored in data source layer 420). Digital twins may be generated by device 424 for generating digital twins (see also...). Figure 7A and Figure 7B The digital twin can be generated by device 424. Figure 8 The method is generated in the context described above.
[0171] The digital twin provider layer 428 may further include means 426 for generating digital access elements, which is typically optional. Means 428 can generate digital access elements associated with the digital twin generated by means 424. Each digital access element may include a distributed pass identifier and digital twin location data. The distributed pass identifier may correspond to or be associated with a distributed digital twin identifier of the corresponding digital twin associated with the digital access element. The digital access elements generated by means 426 can be provided to access provider layer 430 (see also...). Figure 7B Digital access elements can be used by distributed data consumption network nodes to access the digital twin associated with the digital access element via a distributed pass identifier.
[0172] System 400b may further include an access provider layer 430 configured to control access to a digital twin of a chemical product produced from one or more inbound materials. Access provider layer 430 may include means for controlling access to the digital twin, such as in… Figure 4A The device 402 is described in the context of the above. Access to the digital twin can be controlled by the distributed data provider network nodes of the access provider layer 430 based on access data generated by device 402 and a corresponding distributed digital twin identifier associated with the digital twin to be accessed. The access provider layer 430 can be configured to authorize access to the digital twin of the physical entity of the chemical product. Access can be authorized by the distributed data provider network nodes based on the distributed digital twin identifier associated with the digital twin, the access data associated with the distributed digital twin identifier, and the distributed participant identifier associated with the distributed data consumer network node requesting access to the digital twin or a portion thereof.
[0173] System 400b allows for the availability, integrity, and confidentiality of digital twins or portions thereof. The access provider layer allows for the technical configuration and assurance that only defined decentralized network participants can access and retrieve digital twins or portions thereof. For example, the separation of digital twin generation from digital twin consumption allows for high and stable availability of digital twins within a decentralized network.
[0174] Figure 6A This demonstrates a first example of linking the dataset of a digital twin with digital access elements via a distributed digital twin identifier. Digital twin 502 can be used as follows: Figure 7A and Figure 8 The digital twin 502 can be generated as described in the context. The digital twin 502 can be stored in the DT storage device 414. The digital access element 510 associated with the physical entity of the chemical product can be generated as described in... Figure 7BThe datasets 504 and 506 associated with digital twin 502 are each assigned a distributed digital twin identifier 508. Therefore, the distributed digital twin identifier 508 allows for the identification of all existing datasets contained within digital twin 502. The distributed digital twin identifier 508 may include additional identifiers, such as dataset identifiers for datasets 504 and 506. This allows for the unique identification of datasets contained within the digital twin using the distributed digital twin identifier 508 and the corresponding dataset identifiers.
[0175] Digital access element 510 includes a distributed pass identifier 512. The distributed pass identifier 512 can be a distributed identifier linked to a distributed digital twin identifier 508 included in the digital twin. The distributed pass identifier 512 can correspond to the distributed digital twin identifier 508 included in digital twin 502. The latter avoids generating new distributed identifiers and linking newly generated distributed identifiers to distributed digital twin identifiers included in the digital twin.
[0176] The digital access element further includes digital twin location data 514. Digital twin location data 514 may include multiple digital representations that directly or indirectly point to a storage structure (such as DT storage device 414 (not shown)) storing the digital twin or a portion thereof (e.g., datasets 504, 506). Digital twin location data 514 may include digital representations pointing to distributed data provisioning network nodes associated with DT storage device 414 (not shown).
[0177] Digital access element 510 is linked to digital twin 502 via distributed pass identifier 512, and therefore also to datasets contained within the digital twin, thereby allowing retrieval of the digital twin or a portion thereof (e.g., datasets 504, 506) using distributed pass identifier 512 and digital twin location data 514 included in digital access element 510, as in Figure 12 As described in the context.
[0178] Figure 5B A second example is shown, demonstrating the link between digital twin 502, associated datasets 504 and 506, and digital access elements 516 and 522 via distributed digital twin identifier 508 and distributed pass identifiers 520 and 526. Digital twin 502 can be as follows: Figure 7A and Figure 8 The digital access elements 516 and 522 associated with the physical entity of the chemical product can be generated as described in the context. Figure 7BIt is generated as described in [the document]. Data sets 504 and 506 associated with digital twin 502 are assigned to distributed digital twin identifier 508. Therefore, using the distributed digital twin identifier 508 allows identification of all existing datasets contained in digital twin 502.
[0179] In this example, digital access element 516 is generated for dataset 504, and digital access element 522 is generated for dataset 506. Digital access elements can be generated for each dataset or for at least a portion of the datasets contained in the digital twin. Each digital access element is linked to the corresponding dataset via a distributed digital twin identifier 508 by distributed pass identifiers 520, 526. Each digital access element 516, 522 contains digital twin location data 518, 524. The digital twin location data 518, 524 may include pointers to, for example, in... Figure 5A The digital representation of the product dataset described in the context.
[0180] Figure 5A and Figure 5B Only two example embodiments are shown, and any number of digital access elements and any number of datasets are possible within a digital twin. For example, a first digital access element can be generated for a first number of datasets, and a second digital access element can be generated for a second number of datasets. The multiple datasets may include one or more datasets.
[0181] Figure 6A An example of access data 602, including a distributed digital twin identifier and one or more authorization rules 606, 610, is shown. The distributed digital twin (DT) identifier can be used to link access data to the digital twin, thereby allowing control over access to the specific digital twin based on the linked access data. This link also allows distributed data providing network nodes to determine the correct access data associated with the distributed digital twin identifier provided by a distributed data consuming network node requesting access to the digital twin. Access data 602 may include the distributed digital twin identifier. Access data 602 may include one or more authorizations 606, 610 associated with the distributed digital twin identifier. One or more authorization rules 606, 610 may be associated with the distributed digital twin identifier via a rule identifier and a corresponding authorization rule. Figure 6AAs shown, a distributed digital twin (DT) identifier is associated with two rule identifiers (Rule 1 ID and Rule 2 ID). Each rule identifier is further associated with an authorization rule (e.g., Authorization Rule 1 606 and Authorization Rule 2 610). Each authorization rule 606, 610 may include a corresponding rule identifier and permission data that defines the access and / or use of at least a portion of the digital twin by the distributed data consuming network node(s) associated with the distributed participant(s) identifier(s). Thus, at least one authorization rule may include the distributed participant(s) identifier(s) associated with the distributed data consuming network node(s) permitted to access the digital twin or a portion thereof. The authorization rule can act as a whitelist and can be used by the distributed data providing network node(s) associated with the digital twin to filter the distributed data consuming network node(s) requesting access to the digital twin. Only the distributed data consuming network node(s) associated with the distributed participant(s) identifier(s) included in the authorization rule can be able to negotiate an electronic contract with the distributed data providing network node(s) for accessing the digital twin or a portion thereof. After an electronic contract has been negotiated, decentralized data providers can authorize network nodes to access the digital twin or a portion thereof, for example, as in... Figure 11 The authorization rules can be described in the context described above. Figure 4A The rules and directives described in the context of [the relevant context] include, for example, location-specific local rules, rules specific to attribute values associated with participants within a chemical product ecosystem, and regulatory directives and rules relating to emissions data, production data, recycled content data, bio-based content data, source data, working conditions data, or combinations thereof. Authorization rules may include obligations of distributed data consumption network nodes associated with the respective distributed participant(s) identifier and / or obligations of distributed network nodes using digital twins or portions thereof accessed by the respective distributed participant(s) identifier.
[0182] Figure 6BA further example of access data 612, including a distributed digital twin identifier and one or more authorization rules, is shown. The distributed digital twin (DT) identifier can be used to link access data to a digital twin, thereby allowing control over access to the specific digital twin based on the linked access data. This link also allows distributed data providing network nodes to determine the correct access data associated with the distributed digital twin identifier provided by a distributed data consuming network node requesting access to the digital twin. In this example, the access data includes a distributed digital twin identifier and two authorization rules 614, 616. Each authorization rule 614, 616 may include the distributed digital twin identifier and can therefore be associated with the distributed digital twin identifier included in the access data 612. Each authorization rule 614, 616 may include permission data, such as... Figure 6A The authorization rules may include, within the context of the authorization data mentioned above. At least one authorization rule may include, a plurality of decentralized participant identifiers associated with a plurality of decentralized data consuming network nodes that are permitted to access the digital twin or a portion thereof. The authorization rule may act as a whitelist, as in... Figure 6A As described in the context.
[0183] Figure 7A Examples of digital twin management systems and associated methods for controlling access to digital twins of chemical products produced from one or more chemical input materials through chemical production are shown. The digital twin management system 702 may include means for generating the digital twin, such as means 424 described below. The digital twin management system 702 may include means for controlling access to the digital twin, such as in… Figure 4A The device 402 described in the context of or about Figure 4B The described system 400b (not shown). The digital twin management system 702 may be included in the operating system of chemical production (see, for example...). Figure 2 The digital twin system can be communicatively coupled to the operating system (not shown) of the chemical production process.
[0184] Chemical production can be about Figure 2 The described chemical production process 204. Chemical production 204 can produce at least one chemical product 206 from one or more input materials 202. Input materials can be provided to chemical production 204, for example, as in... Figure 2 As described in the context. Incoming materials may enter the system boundary 704 of chemical production 204 at an entry point, such as a production plant or material storage facility associated with chemical production 204. The amount of incoming material entering the system boundary 704 of chemical production 204 can be, for example, used in… Figure 2The sensor 210b is described in the context of measurement. The chemical and / or physical properties of the incoming material can be measured, for example, using the system boundary 704 of the chemical production 204. Figure 2 The sensor 210a, as described in the context, is used to measure [the material]. The measured data can be used to determine at least one chemical and / or physical property of the incoming material.
[0185] The incoming material can be used in chemical production 204 to produce one or more chemical products from the incoming material, for example, as in... Figure 2 As described in the context of [the previous sentence]. The operating system 208 of chemical production 204 can monitor and / or control chemical production 204 based on operating parameters of different processes. The operating system 208 can receive production demand data associated with the production plan of chemical production 204. Production demand data can be generated from the target production capacity of one or more chemical products produced by chemical production 204. Production demand data can be generated from predefined production capacity or data-driven models that associate production capacity with market demand data or the amount consumed at consumption locations. Production demand data may include the target yield of chemical products produced by chemical production 204. The operating system 208 can further receive a list of materials associated with the chemical products to be produced. The list of materials may include material data associated with materials used to produce the chemical products, process data associated with the production chain used to produce the chemical products, and / or chemical product data associated with the chemical products (such as product specification data or data on the amount of chemical products to be produced).
[0186] Based on the received production demand data and bill of materials, material demand data can be determined. Material demand data may include data on the amount of material required to produce a target yield of the chemical product. Material demand data may include material identifiers associated with the materials required to produce the chemical product and data on the quantity of the corresponding materials. Material demand data may include one or more material specifiers for each material identifier representing a material specification. Material demand data may include data on the quantity of material for each material identifier representing the quantity of material to be supplied. Material demand data may specify one or more production chains for chemical production 204. Material demand data may include a bill of materials for one or more production chains for chemical production 204. Material demand data may include one or more formulations specifying one or more materials for one or more production processes for chemical production 204. The determined material demand data may be made available to supplier systems associated with suppliers outside the physical system boundaries of chemical production 204. Material supply may be triggered by supplier system access to the material demand data.
[0187] The amount of (multiple) chemical products generated by processes (such as chemical reactions and / or physical treatments) performed within chemical production 204 can be measured using sensors (e.g., in...). Figure 2 The sensor 210b described in the context of this study is used for measurement. Because chemical reactions can produce more than one reaction product, for example, chemical reactions are associated with many-to-many relationships between starting materials and resulting reaction products (see also...). Figure 2 Measuring the amount of (multiple) chemical products produced by each chemical reaction performed within chemical production 204 allows for tracking of material flows within chemical production 204. The measured data can be stored in one or more databases associated with operating system 208. Furthermore, sensors (such as sensor 210b) can be used to monitor chemical reactions and / or physical processes, and the generated monitoring data can be stored in one or more databases associated with operating system 208. The measured amounts of produced chemical products and the monitoring data can be used to generate a digital twin of each production process performed within chemical production 204. Although there is a many-to-many relationship between starting materials and reaction products associated with the chemical reaction, this digital twin allows for reliable tracking and consideration of the flow of incoming materials, intermediate chemicals, and finished products. The physical and / or chemical properties of the produced chemical products can be measured by sensors (such as sensor 210a) and / or... Figure 2 The chemical and / or physical properties of the produced chemical product 206, as described in the context, may be determined. The measured and / or determined chemical and / or physical properties may be stored in one or more databases associated with the operating system 208.
[0188] The produced chemical product 206 can be provided at one or more outlet points of the chemical production process. Chemical product 206 can leave the system boundary 704 of the chemical production process 204. A digital twin can be generated during the production of chemical product 206 or upon its departure from the chemical production process 204. The digital twin can be generated by device 424. Device 424 can be configured to generate a digital twin, as in... Figure 8 The requester 706 can be configured to generate a request for generating a digital twin of the produced chemical product 206, as described in the context of [the previous sentence]. The requester 706 can be included in a tag device, for example, as in [the previous sentence]. Figure 3 The request may include data related to the chemical product, such as batch number and / or LOT number. The request may further include data associated with the aspect model(s) related to the chemical product, such as aspect model(s) identifiers. The request for generating a digital twin may be provided to device 424. In response to the request, the digital twin generator 708 of device 424 may be configured, for example, to use... Figure 8The method described in [the document] is used to generate digital twins.
[0189] Digital twin generator 708 can be configured to generate a digital twin based on data contained in a received request, such as from a data layer (e.g., data source layer 420, not shown, see example). Figure 4B The digital twin generator 708 may include a data collection unit for collecting data. The collected data may include at least one measured and / or determined physical and / or chemical property of the chemical product. The digital twin generator 708 may be configured to determine whether a digital twin associated with the produced chemical product 206 already exists, for example, whether it is already stored in a data storage device of device 424 (e.g., DT storage device 414 (see...)). Figure 4A This avoids generating existing digital twins, and thus makes generating digital twins more efficient.
[0190] The digital twin generator 708 can be configured to request a decentralized identifier associated with the collected data and, optionally, a data owner, from the decentralized ID generator 710. The request may include at least one authentication mechanism or may include selecting at least one of multiple authentication mechanisms. The request may include an owner identifier and / or a chemical product identifier and / or digital twin location data.
[0191] The distributed ID generator 710 can be configured to generate and provide distributed identifiers associated with collected data and, optionally, data owners (such as the data owner of data associated with a chemical product). The distributed ID generator 710 can be configured to generate distributed identifiers that include or are associated with additional identifiers (such as multiple dataset identifiers). For example, the distributed ID generator 710 can be configured to generate digital twin identifiers, such as DIDs or UUIDs. The distributed ID generator 710 can be configured to generate multiple digital twin data identifiers, such as DIDs and / or UUIDs. The distributed ID generator 710 may include components configured to generate multiple distributed identifiers (DIDs). The distributed ID generator 710 may include components configured to generate universally unique identifiers (multiple UUIDs). The distributed ID generator 710 may be part of device 424. The distributed ID generator 710 may be communicatively coupled to device 424; for example, device 424 may not include the distributed ID generator 710 (not shown). The distributed identifier generated by the distributed ID generator can be one or more DIDs and / or UUIDs. One or more DIDs and / or UUIDs can be associated with digital twins and / or digital twin data. One or more DIDs and / or UUIDs can further be associated with chemical products. For example, the distributed identifier can include a digital twin identifier associated with a digital twin and one or more digital twin data identifiers associated with digital twin data. The distributed identifier can further include a chemical product identifier associated with a chemical product. The distributed ID generator 710 can be a centralized or distributed node configured to generate distributed IDs, such as DIDs or UUIDv4, as per [reference to...]. Figure 15 and Figure 16 As described, the distributed ID generator 710 can be a computing node acting as a management module, user agent, ID hub, and / or certificate authority, acting as the owner of a DID. The distributed ID generator 710 can be configured to receive requests for providing a distributed identifier associated with data collected by the digital twin generator 708, and optionally, the data owner. The request may include at least one authentication mechanism or may include selecting at least one of multiple authentication mechanisms. The request may include the owner identifier and / or chemical product identifier and / or access data as described above. The distributed ID generator 710 can be configured to generate distributed identifiers and data associated with authentication mechanisms.
[0192] The distributed ID provider 712 can be configured to provide received distributed identifiers to the requester 706, which is configured to associate the received distributed identifiers with chemical products. For this purpose, the requester 706 may include an ID assigner (see, for example...). Figure 3 The distributed ID provider 712 can be configured to provide received distributed identifiers to an ID assigner (not shown), which is configured to associate the received distributed identifiers with chemical products. This association may include encoding the distributed identifier into a code (such as a barcode, QR code, embossed code, or optical holographic identifier) and providing the generated code for labeling the chemical product. Thus, a physical identifier can be provided that associates the physical entity of the chemical product with the distributed identifier of the digital twin, and thus associates the digital twin with the physical entity of the chemical product. The distributed ID provider 712 can be configured to provide received distributed identifiers to a digital twin generator 708. The distributed ID generator 710 and the distributed ID provider 712 can be as follows: Figure 7A The individual devices shown. The distributed ID generator 710 and the distributed ID provider 712 can be contained within a single device (not shown) configured to generate distributed identifiers and provide the generated distributed identifiers.
[0193] In response to receiving a distributed identifier from the distributed ID provider 712, the digital twin generator 708 can be configured to retrieve at least one aspect model (not shown) from the aspect model DB 416 and generate digital twin data by applying each retrieved aspect model to the collected data. For example, the digital twin generator 708 can map the collected data to the structure and / or characteristics of the corresponding aspect model. Each aspect model may include at least a portion of the structure and / or characteristics of the digital twin data. The aspect model database may contain aspect models(s) related to environmental attributes associated with the chemical product. Environmental attributes may involve emissions data (e.g., CO2 footprint data), recyclable content, bio-based content, renewable content, certificates, or combinations thereof. Using different aspect models allows for more granular construction of the digital twin data contained in the digital twin, thereby allowing for more granular control over access to the digital twin data and defining the access data for the digital twin data. For example, digital twin data containing access-restricted data (such as data related to environmental characteristics, the composition of chemical products, etc.) can be associated with access data that is subject to strict regulations on access to said digital twin data, while digital twin data containing data required from a regulatory perspective may not be associated with access data or may be associated with access data that is less strictly permitted. At least a portion of the generated digital twin data can be stored on a data storage medium (such as DT storage device 414) (see...). Figure 4A At least a portion of the digital twin data may contain chemical product identifiers to allow linking the generated digital twin data to the corresponding chemical product. Digital twin data generated by applying an aspect model to the collected data and associated with a decentralized identifier of the digital twin can be considered an asset or aspect of the digital twin. Each asset or aspect can be uniquely identified by a digital twin data identifier. Therefore, the combination of a decentralized identifier and a digital twin data identifier allows for the unique identification of digital twin data associated with a chemical product. Furthermore, this combination also allows for the specific retrieval of such digital twin data, for example, via decentralized data consumption network nodes using the decentralized identifier and digital twin location data, as in... Figure 12 As described in the context.
[0194] The digital twin generator 708 can be configured to generate digital twins, for example, in Figure 8In the context of [the above context], generating a digital twin may include assigning a distributed identifier received from the distributed ID provider 712 to at least a portion of the generated digital twin data. For example, the digital twin generator 708 may assign a chemical product identifier contained in at least a portion of the digital twin data to the received distributed identifier, such that at least a portion of the digital twin data is associated with the distributed identifier. Assignment may include associating the distributed identifier with at least a portion of the digital twin data associated with the chemical product and stored in the DT storage device 414. The digital twin may include the distributed identifier and at least a portion of the generated digital twin data. The distributed identifier may include one or more DIDs and / or UUIDs, for example, as described above. The distributed identifier may include one or more DIDs and / or one or more UUIDs. One or more DIDs and / or UUIDs may be associated with the digital twin and / or at least a portion of the digital twin data. One or more DIDs and / or UUIDs may be further associated with the chemical product. The digital twin may further include a chemical product identifier.
[0195] Digital twin generator 710 can be configured to generate digital twin location data. The digital twin location data may include multiple digital representations pointing to the digital twin data. Digital twin generator 710 can be configured to generate a DID document that includes a decentralized identifier received from decentralized ID provider 712 and the generated digital twin location data. The DID document can be propagated to a distributed ledger, such as a blockchain or a decentralized file storage system.
[0196] The digital twin generator 710 can be configured to store the generated digital twin in the DT storage device 414.
[0197] The device 402 for controlling access to the generated digital twin can be configured to generate access data, for example, as in Figure 4A , Figure 4B and Figure 9 As described in the context. Access data may include a distributed digital twin identifier of the corresponding digital twin and one or more authorization rules associated with the distributed digital twin identifier. The one or more authorization rules may define the access and / or use of at least a portion of the digital twin by (multiple) distributed data consuming network nodes associated with (multiple) distributed participant identifiers. Apparatus 402 may generate access data, such as... Figure 10A and Figure 10B The access data can be provided to distributed data providing network node 416, for example, as in... Figure 4AAs described in the context of [the above]. The distributed data providing network node 416 can be associated with chemical production 204, which produces chemical product 206. The distributed data providing network node 416 can be associated with the data owner of the digital twin (such as the chemical product producer). The distributed data providing network node 416 can be configured to control access to the digital twin or a portion thereof (such as a digital twin stored in DT storage device 414) based on access data provided by device 402, for example, as in [the context of the above]. Figure 11 As described in the context, using access data allows filtering of distributed data consumption network nodes based on distributed participant identifiers associated with the nodes, thereby ensuring that only distributed data consumption network nodes associated with distributed participants who receive and consume chemical products can access the digital twin or a portion thereof.
[0198] Figure 7B Examples of apparatus and associated methods for controlling access to digital twins of chemical products produced from one or more chemical input materials through chemical production, and for authorizing access to digital twins of chemical products produced from one or more chemical input materials through chemical production, are shown. The digital twin management system 702 may include apparatus for generating digital twins, for example, in... Figure 7A The device 424 is described in the context of the digital twin management system 702. The digital twin management system 702 may include means for controlling access to the digital twin, for example, in... Figure 4A and Figure 7A The device 402 described in the context of or about Figure 4B The described system 400b (not shown). Digital twin management 702 may include means for generating digital access elements, such as means 426. Digital twin management system 702 may be included in the operating system of chemical production (see, for example...). Figure 2 The digital twin system can be communicatively coupled to the operating system (not shown) of the chemical production process.
[0199] Chemical production can be about Figure 2 and Figure 7A The described chemical production 204. Chemical production 204 can produce at least one chemical product 206 from one or more input materials 202, for example, as in... Figure 7A As described in the context. The produced chemical product 206 can be provided at one or more outlet points of the chemical production. Chemical product 206 can leave the system boundary 704 of the chemical production 204. A digital twin can be generated during the production of chemical product 206 or at the time of its departure from the chemical production 204, for example, as... Figure 7A and Figure 8The requester 706 can be configured to generate a request for generating a digital twin of the produced chemical product 206, for example, as described in... Figure 7A The digital twin is described in the context described above. The generated digital twin can be stored in DT storage device 414. The digital twin can contain distributed identifiers and digital twin data. The distributed identifiers can be assigned to chemical products 206 by ID assigner 706, for example, as described in... Figure 3 and Figure 7A As described in the context.
[0200] The device 402 for controlling access to the generated digital twin can be configured to generate access data, for example, as in Figure 4A , Figure 4B , Figure 7A and Figure 9 As described in the context. Access to data can be provided to distributed data provider network nodes 416, for example, as in... Figure 4A and Figure 7A As described in the context.
[0201] The apparatus 426 for generating digital access elements can be configured to generate digital access elements associated with a chemical product. The digital access element allows indirect access to the digital twin or a portion thereof, i.e., access to the digital twin or a portion thereof via the digital access element. Access to the digital access element itself can remain unrestricted while still allowing controlled access to the digital twin or a portion thereof. The digital access element may include a distributed pass identifier and digital twin location data. The distributed pass identifier is a distributed digital twin identifier of or associated with the digital twin associated with the chemical product. The distributed identifier may be further associated with a data owner. The data owner may be the data owner of the digital twin data contained in the digital twin, such as in... Figure 7A As described in the context. The data owner could be the producer of the chemical product, as in... Figure 7A As described in the context of [the previous sentence]. Distributed identifiers may include one or more UUIDs and / or one or more DIDs, for example, as in [the previous sentence]. Figure 7A As described in the context. One or more DIDs and / or UUIDs may be associated with a digital twin and / or digital twin data contained within a digital twin. One or more DIDs and / or UUIDs may further be associated with a chemical product.
[0202] Digital access elements can correspond to a DID document that includes a distributed digital twin identifier as a DID. This DID document may further include digital twin data identifiers associated with the digital twin data contained within the digital twin, as well as digital twin location data. The digital twin location data may include a digital representation pointing to the digital twin or a portion thereof, for example, as in... Figure 7A As described in the context, a digital access element may correspond to a DID document containing a decentralized pass identifier associated with a digital twin identifier. This DID document may further contain a digital twin data identifier associated with the digital twin data contained in the digital twin, as well as digital twin location data. A digital access element may correspond to a data structure that includes a decentralized pass identifier and digital twin location data.
[0203] A digital access element can be generated in response to the generation of a digital twin. Therefore, for example, when device 424 has already generated a corresponding digital twin, device 424 can trigger device 426 to generate a digital access element. The request for generating the digital access element may include an owner identifier and / or a chemical product identifier, as shown in... Figure 7A As described in the context.
[0204] Digital access elements can be generated by providing a distributed pass identifier and digital twin location data. Providing a distributed pass identifier may include retrieving a distributed digital twin identifier contained in the corresponding digital twin and providing the retrieved distributed digital twin identifier. For example, a distributed identifier included in the generated digital twin may be retrieved from digital twin storage device 414. A corresponding digital twin may be identified using a chemical product identifier contained in a received request. For example, a chemical product identifier may be used to retrieve a distributed digital twin identifier contained in the digital twin associated with the chemical product identifier. Using a distributed identifier contained in the digital twin allows for the avoidance of generating additional distributed identifiers, thereby allowing for more efficient generation of digital access elements.
[0205] Providing a decentralized access identifier may include generating additional decentralized identifiers and providing those additional decentralized identifiers. These additional identifiers may include one or more DIDs and / or one or more UUIDs as previously described. These additional decentralized identifiers may be assigned to the decentralized identifiers contained within the digital twin. This allows the digital twin to be linked to the generated digital access element, thereby allowing access to the digital twin or a portion thereof using the digital access element. Using additional decentralized identifiers allows for the use of different identifier schemes, such as UUIDs and DIDs. This may allow the use of DID documents to store the access data required to access the digital twin or a portion thereof in a decentralized manner, such as a dataset of (multiple) chemical products contained within the digital twin.
[0206] Providing digital twin location data may include generating digital twin location data and providing the generated digital twin location data. Providing digital twin location data may include retrieving digital twin location data stored in DT storage device 414. The digital twin location data may directly or indirectly point to the DT storage device 414 storing the corresponding digital twin. The digital twin location data may refer to any data used to access the digital twin or a portion thereof, for example, as in... Figure 7A As described in the context. For example, digital twin location data may include endpoints (resource endpoints) for data exchange or sharing or endpoints (service endpoints) for service interaction, which are uniquely identified via a communication protocol. Endpoints may be represented by distributed data providing network node 416. Digital twin location data may include multiple digital representations, each pointing to different digital twin data contained within the digital twin. Distributed pass identifiers and digital twin location data may be associated with each other. Thus, for example, the distributed pass identifier on which the digital access element is based may be associated with authentication information used as the digital twin location data on which the digital access element is based.
[0207] A physical identifier associated with a chemical product can be assigned to a distributed pass identifier included in the generated digital access element. Device 426 can be configured to provide the distributed pass identifier to requester 706, which is configured to associate the received distributed pass identifier with the chemical product. For this purpose, requester 706 may include, as in Figure 3 And the ID assigner described in the context of Figure 7. This allows linking distributed pass identifiers, and therefore the digital twins associated with them, to the physical entities of chemical products. The physical identifier can correspond to codes such as barcodes, QR codes, embossed codes, optical holograms (e.g., zero-order diffraction microstructures), or tags (e.g., RFID tags). The physical identifier can be generated by a tagging machine, for example, as in... Figure 7AAs described in the context.
[0208] Device 426 can be configured to provide the generated digital access element to an access element registry accessible by distributed data consuming network node 716. The distributed data consuming network node can use data contained in the digital access element (such as a distributed pass identifier and digital twin location data) to access the digital twin associated with the distributed pass identifier from the distributed data consuming network node 416, for example, as in... Figure 12 As described in the context, the distributed data providing network node 416 can authorize access to the digital twin based on a distributed digital twin identifier associated with the digital access element, a distributed participant identifier associated with the distributed data consuming network node requesting access to the digital twin, and access data provided by device 402.
[0209] Figure 8 A flowchart illustrating a computer-implemented method for generating a digital twin of a physical entity of a chemical product according to an example embodiment of this disclosure is provided. A digital twin can be generated for a chemical product 206 produced by chemical production 204 from one or more incoming materials 202. Chemical production can be chemical production 204, as per [specific example description]. Figure 2 and Figure 3 As described. A digital twin can be generated by an operating system 208 of chemical production 204. The operating system may include means 424 for generating digital twins(s), as described in... Figure 7A As described in the context. Requests to generate digital twins can be manually triggered by the user via a user interface. Requests to generate digital twins can also be automatically triggered, for example, upon detection of the packaging of the produced chemical product, such as in... Figure 3 and Figure 7A As described in the context.
[0210] In box 802, a request for generating a digital twin of a chemical product can be received. This request may include data related to the chemical product. The request may further include data related to at least one aspect model associated with the chemical product. This request can be generated manually or automatically, as previously described. Data related to the chemical product may include chemical product identifiers, such as batch number, LOT number, chemical product name, and / or chemical product ID. Data related to at least one aspect model may include aspect model identifiers(s).
[0211] In box 804, it is determined whether a digital twin of the chemical product already exists. Therefore, it can be determined whether the digital twin has been generated and stored, for example, in DT storage device 414. This determination can be based on data related to the chemical product (such as a chemical product identifier) included in the received request. For example, the chemical product identifier can be used to determine whether a digital twin associated with the chemical product identifier already exists, for example, already stored in DT storage device 414. If a digital twin of the chemical product already exists, the method proceeds to box 806. Otherwise, the method proceeds to box 810, as described later.
[0212] In box 806, it is determined whether to update the existing digital twin. This determination can be based on data contained in the received request. For example, the request could contain data instructing the digital twin to be updated. If the digital twin is to be updated, the method proceeds to box 808. Otherwise, the method ends or proceeds to box 802.
[0213] In box 808, the digital twin is updated. The update may include performing the actions described later in boxes 810, 814, and 816, for example, generating additional digital twin data. The update may also include changing the digital twin data contained within an existing digital twin.
[0214] In box 810, data on at least one measured and / or determined physical and / or chemical properties of the chemical product can be collected based on the data related to the chemical product included in the request received in box 802. This can be done as described in... Figure 7A As described in the context, data can be sourced from one or more data sources (e.g., distributed data sources in data source layer 420 (see...)). Figure 4B Data can be collected directly from one or more distributed data sources in the data source layer 420. This data can be consumed from the service layer 422, for example, as in... Figure 4B As described in the context, device 424 can determine whether the request contains chemical product identifiers. If so, data can be collected from multiple distributed data sources using the chemical product identifiers. Otherwise, device 424 can determine the chemical product identifiers based on data contained in the received request. For example, the chemical product identifiers can be retrieved from a database based on data contained in the received request.
[0215] In box 812, a distributed digital twin identifier associated with the collected data and, optionally, the data owner can be provided. The distributed digital twin identifier can be responded to, for example, by a digital twin generator 708 of device 424 (see [link to device 424]). Figure 7AThe request is generated to provide this information. This request may contain a data owner identifier and / or a chemical product identifier. The data owner may be the owner of the collected data and / or the data contained in the distributed data source. The data owner may be the chemical product producer. The data owner may be the data owner as described above. The distributed digital twin identifier can be requested from centralized or distributed nodes, for example, as in... Figure 7A As described in the context of [the previous sentence]. A distributed identifier can be one or more DIDs and / or UUIDs, for example, as in [the previous sentence]. Figure 7A As described in the context. Box 812 can also be executed after either box 814 or 816.
[0216] In box 814, one can retrieve aspect models(s) associated with a chemical product, for example, as in Figure 7A As described in the context. At least a portion of the (multiple) aspect model may be associated with environmental properties related to the chemical product. The (multiple) aspect model may be retrieved based on the (multiple) aspect model identifier contained in the received request or based on the data contained in the received request. The (multiple) aspect model may be retrieved from a data storage device.
[0217] In box 816, digital twin data can be generated for each aspect model retrieved in box 808. Digital twin data can be generated by applying each aspect model retrieved in box 814 to the data collected in box 810, for example, as in... Figure 7A As described in the context.
[0218] In box 818, a digital twin can be generated. The digital twin may include a distributed digital twin identifier received in box 812 and at least a portion of the digital twin data generated in box 810. The distributed digital twin identifier may be assigned to at least a portion of the digital twin data generated in box 810. The digital twin may further include a chemical product identifier. The chemical product identifier may be a chemical product identifier included in a received request.
[0219] In box 820, the generated digital twin can be stored in DT storage device 414, as in Figure 7A As described in the context, this block is typically optional. Storing the digital twin in the DT storage device 414 can improve the security of access to the digital twin because appropriate authentication and authorization schemes can be implemented between the DT storage device 414 and the distributed data providing network nodes that provide the digital twin or a portion thereof to authorized distributed data consuming network nodes.
[0220] In box 822, a physical identifier can be assigned to a distributed digital twin identifier included in the digital twin; this box is typically optional. This box can be executed, for example, when the distributed identifier included in the digital twin is used to generate a digital access element (see example...). Figure 9 This allows for the linking of distributed identifiers, and thus digital twins, to the physical entities of chemical products. Assigning distributed identifiers to physical identifiers can include generating physical identifiers that embed the distributed identifiers. The physical identifiers can be generated by an ID assigner, for example, as described in the context of Figure 5, and can be attached to the chemical product, for example, using a tagging device.
[0221] Figure 9 A flowchart illustrating a computer-implemented method for controlling access to a digital twin of a physical entity of a chemical product, according to an example embodiment of this disclosure, is shown. A digital twin can be generated for a chemical product 206 produced by chemical production 204 from one or more incoming materials 202. Chemical production can be chemical production 204, as per [specific context needed]. Figure 2 and Figure 3 As described. A digital twin can be generated by the operating system 208 of chemical production 204. Access data used to control access to the digital twin can be generated by... Figure 4A The device 402 described in the context of or Figure 4B The system 400b described in the context of [the previous sentence] is used to generate [the digital twins]. The operating system may include means 424 for generating digital twins(s), as in [the previous sentence]. Figure 7A The operating system may include means or systems for controlling access to the digital twin, as described in the context of [the previous sentence]. Figure 4A and Figure 4B As described in the context. Digital twins can be based on... Figure 8 The method described above is used to generate it.
[0222] In box 902, a distributed digital twin identifier is provided. The distributed digital twin identifier can be provided by a distributed digital twin identifier providing unit (e.g., Figure 4A The distributed ID provider (404) provides this. Distributed digital twin identifiers can be provided as follows: Figure 4A Provided as described in the context.
[0223] In box 904, mapping data is provided. The mapping data may include data related to chemical products produced from one or more chemical input materials, which is correlated with corresponding decentralized participant(s) identifiers associated with the decentralized participant(s)(s) participating nodes(s). The mapping data may be generated from data related to chemical products produced from one or more input materials and data related to the decentralized participant(s)(s), for example, as in... Figure 4AAs described in the context. Generating mapping data may include verifying data related to the distributed participating nodes(s), such as in... Figure 4A As described in the context.
[0224] In box 906, access data can be generated for at least a portion of the digital twin based on the provided mapping data. The access data can be as follows: Figure 4A The access data may be generated as described in the context described above. Access data may include a distributed digital twin identifier provided by the distributed ID provider 404 and one or more authorization rules associated with the distributed digital twin identifier. Access data may further include a digital representation pointing to the digital twin or a portion thereof. The digital representation may point to a DT storage device 414 storing the corresponding digital twin of the chemical product. One or more authorization rules may define the access and / or use of at least a portion of the digital twin by the distributed data consuming network nodes associated with the distributed participant(s)(s) distributed participant(s) included in the provided mapping data, for example, as in... Figure 4A As described in the context.
[0225] In box 908, the generated access data can be provided to distributed data providing network nodes, for example, as in Figure 4A As described in the context of distributed data provision, network nodes can be associated with units that generate and access data (see, for example, [example]). Figure 4A and Figure 4B The distributed data providing network node can be configured to control access to the digital twin data by the distributed data consuming network node based on a distributed digital twin identifier associated with the digital twin of the chemical product and corresponding access data stored in database 418. This enables control of the distributed data providing network node's access to the digital twin based on the unique relationship between the distributed digital twin identifier and one or more authorization rules, by using the authorization rules(s) based on the distributed participant(s) identifier(s) associated with the distributed data consuming network node(s), thereby filtering the distributed data consuming network node(s) requesting access to the digital twin(s) or a portion thereof. The distributed data providing network node 416 can be associated with the data owner of the digital twin(s) or a portion thereof. The data owner can be the chemical product producer.
[0226] Figure 10A An example of a relational representation that can be used to generate mapping data is shown. The relational representation can be used by the mapping data provider 406 of device 402 to generate mapping data, for example, as in... Figure 4A , Figure 4B and Figure 9As described in the context, the relationship indicates that chemical product 1002 can be associated with one or more consumers of chemical products 1004, 1008, and 1012.
[0227] Chemical product 1002 can be produced chemically (e.g., in...) Figure 2 , Figure 7A and Figure 7B The chemical product 1002 can be produced by chemical production (e.g., in the context of chemical production 204). Figure 2 , Figure 7A and Figure 7B The chemical product 1002 is produced in the context of the chemical production process 204 described above. The chemical product 1002 may be associated with data related to the chemical product. Such data may include a chemical product identifier, a chemical product name, or a combination thereof. The chemical product 1002 may be associated with each batch of chemical product produced. The chemical product 1002 may represent a batch of chemical product produced.
[0228] One or more consumers may be chemical product processors, for example, those who can receive and process chemical products to produce additional chemical or discrete products. One or more consumers 1004, 1008, 1012 of the chemical product may be associated with distributed participation network nodes 1006, 1010, 1014. The corresponding distributed participation network nodes may be operated by the corresponding consumers. Distributed network participation nodes may correspond to distributed data consumption network nodes. The distributed data consumption network nodes(s) may be configured to request access to the digital twin at a distributed data providing network node associated with the digital twin of the chemical product. Therefore, Figure 10A The relationships shown in the diagram allow for the identification of consumers of chemical products and associated decentralized participating network nodes.
[0229] The relationship representation can be a data structure that defines the relationship between chemical product 1002, the customers of the chemical product, and the distributed network nodes (multiple) associated with the customers.
[0230] Figure 10B Further examples of relational representations that can be used to generate mapping data are shown. The relational representations can be used by the mapping data provider 406 of device 402 to generate mapping data, for example, as in... Figure 4A , Figure 4B and Figure 9 The context described above. The relationship representation can associate chemical product 1002 with data related to chemical products produced from one or more chemical input materials, as well as with data related to (multiple) distributed participating nodes.
[0231] Chemical product 1002 can be produced chemically (e.g., in...) Figure 2 , Figure 7A and Figure 7B The chemical product 1002 can be produced by chemical production (e.g., in the context of chemical production 204). Figure 2 , Figure 7A and Figure 7B The chemical product 1002 is produced in the context of the chemical production process 204 described above. The chemical product 1002 may be associated with data related to the chemical product. Such data may include a chemical product identifier, a chemical product name, or a combination thereof. The chemical product 1002 may be associated with each batch of chemical product produced. The chemical product 1002 may represent a batch of chemical product produced.
[0232] Data related to chemical products may include (multiple) consumer identifiers associated with consumers of the chemical product, such as consumer identifier 1 1018, consumer identifier 2 1020, and consumer identifier 3 1026. These (multiple) consumer identifiers may be related to the chemical production process (e.g., the chemical product is manufactured in the chemical production process). Figure 2 , Figure 7A and Figure 7B A unique identifier used within the chemical production (204). Multiple consumer identifiers may not be unique within the decentralized network associated with the chemical production; for example, they may be provided via decentralized data associated with the chemical production to network nodes (see [link to relevant documentation]). Figure 2 , Figure 4A , Figure 7A and Figure 7B Consumer identifiers (multiple) may be unknown to (multiple) other decentralized network participants. Data related to chemical products may include chemical product identifiers. This allows data related to chemical products to be associated with chemical product 1002 to provide a relationship with chemical product 1002.
[0233] Data associated with (multiple) distributed participant nodes may include (multiple) distributed participant identifiers associated with (multiple) distributed participant nodes, such as distributed participant identifier 1 1016, distributed participant identifier 2 1022, and distributed participant identifier 3 1024. The corresponding distributed participant identifier may include any identifier uniquely associated with a participant in the distributed network and / or with a production site of a participant in the distributed network. Distributed participant identifiers may include letters and / or numbers. Distributed participant identifiers may include one or more Universally Unique Identifiers (UUIDs) and / or one or more Distributed Identifiers (DIDs). Distributed participant identifiers may be associated with or may include verifiable claims or credentials. (Multiple) distributed participant nodes may be associated with consumers of the chemical product associated with (multiple) consumer identifiers. This allows (multiple) consumer identifiers used within chemical production to be associated with corresponding (multiple) distributed participant identifiers of participating network nodes that are consumers of the same chemical product.
[0234] The relationship representation can be a data structure that defines the relationships between chemical product 1002, the customers of the chemical product, and the distributed network nodes associated with the customers. The data structure can contain chemical product identifiers associated with the customer identifiers and associated distributed participant identifiers.
[0235] Figure 11 A flowchart illustrating a computer-implemented method for authorizing network nodes to access a digital twin of a physical entity of a chemical product, according to an example embodiment of this disclosure, is provided. The digital twin of the chemical product can be generated by means of apparatus for generating the digital twin (e.g., in...). Figure 4B , Figure 7A , Figure 7B The device 424 described in the context uses Figure 8 The method described herein is used to generate the digital twin. The digital twin may include a distributed digital twin identifier and at least one measured physical and / or chemical property of the chemical product and / or at least one physical and / or chemical property determined based on data collected in connection with the production and / or use of the chemical product.
[0236] Chemical products can be produced by chemical processes from one or more input materials, for example, as in... Figure 2 , Figure 7A and Figure 7B This is described in the context of [the previous sentence]. This access can be granted by a device used for authorizing access (e.g., in [the context of the previous sentence]). Figure 7A and Figure 7BThe digital twin management system 702 described in the context is authorized. Digital twin management can be an operating system for chemical production (e.g., the operating system 208 of chemical production 204, see example...). Figure 2 , Figure 7A , Figure 7B It is part of the digital twin management system. The digital twin management system can be communicatively coupled to the operating system.
[0237] In order to access the digital twin or a portion thereof, in box 1102, a distributed data providing network node may receive a request for access to the digital twin of the chemical product. The distributed data providing network node may be associated with the digital twin. The distributed data providing network node may be identified using a digital access element associated with the digital twin, for example, as in... Figure 12 As described in the context. Numeric access elements can be as follows: Figure 7B The request can be generated as described in the context. Requests can be generated by distributed data consumer network nodes and can be provided to distributed data provider network nodes. Distributed data consumer network nodes can be associated with consumers of chemical products (see, for example...). Figure 12 The request may include a distributed digital twin identifier included in the digital twin and a distributed participant identifier associated with a distributed data consuming network node. The request can be transmitted via a peer-to-peer communication channel between the distributed data providing network and the distributed data consuming network node. The distributed digital twin identifier may be encoded in the physical identifier of the chemical product (see, for example...). Figure 12 Alternatively, it can be retrieved from a database based on a physical identifier associated with the chemical product (see, for example...). Figure 12 ).
[0238] Authentication can be performed in box 1104, which is typically optional. Specifically, the decentralized data consuming network node requesting access to the digital twin and / or the decentralized data providing network node providing access to the digital twin can perform authentication, for example, authentication can be executed. This authentication can be based on decentralized participant(s) identifiers and data associated with the authentication mechanism. The authentication mechanism can be associated with the decentralized participant(s) identifiers as described above. The authentication mechanism can be associated with the certificate(s) associated with the corresponding decentralized participant(s). The decentralized participant(s) can verify the received certificate via a centralized or decentralized validator. Authentication can be performed through different communication modes, such as as in... Figure 17A and Figure 17B As described in the context.
[0239] In box 1106, the distributed data providing network node and / or the distributed data consuming network node can determine whether the authentication is valid; this box is typically optional. If the authentication is invalid (e.g., fails), the distributed data providing network node can deny access to the digital twin, and the method terminates.
[0240] If authentication is successful, access data can be determined in box 1108 based on the received distributed digital twin identifier. Access data may include the distributed digital twin identifier and one or more authorization rules. Access data may further include digital twin location data. Access data can be derived from a database of network nodes (e.g., database 418, see [link]). Figure 4A Search within )). Multiple authorization rules can be used in conjunction with, for example, in Figure 6A and Figure 6B The distributed digital twin identifiers described in the context are associated with the distributed digital twin identifiers. Authorization rules can define access to and / or use of at least a portion of the digital twin by (multiple) distributed data consuming network nodes. Access to and / or use of at least a portion of the digital twin can be associated with (multiple) distributed participant identifiers of the distributed data consuming network nodes. For example, authorization rules can define (multiple) distributed participant identifiers that are allowed to access the digital twin data. This allows filtering of requested access by distributed data consuming network nodes based on the associated distributed participant identifiers. One or more authorization rules may include, as described in... Figure 4A The rules and obligations described in the context.
[0241] In box 1112, the distributed data providing network node verifies the request by applying at least a portion of the access data determined in box 1110 to the received request. This may include applying the access data retrieved in box 1110 to the received request based on the received distributed participant identifier. Applying the access data to the received request may include determining whether the distributed participant identifier received with the request is associated with one or more determined authorization rules. For example, one or more authorization rules associated with a distributed digital twin identifier may include distributed participant identifiers(s) associated with distributed data consuming network nodes that are permitted to access the digital twin or a portion thereof. Applying the access data to the received request may include determining whether the distributed participant identifier received with the request is not associated with one or more determined authorization rules. For example, one or more authorization rules associated with a distributed digital twin identifier may include distributed participant identifiers(s) associated with distributed data consuming network nodes that are not permitted to access the digital twin or a portion thereof. The verification request allows filtering of decentralized data consuming network nodes based on associated decentralized participant identifiers, ensuring that only authorized decentralized data consuming network nodes (such as those associated with consumers of chemical products) can access the digital twin or a portion thereof. This allows control over access to the digital twin or a portion thereof, ensuring that the digital twin or a portion thereof can be shared within the decentralized network under the control of the digital twin's data owner. If the request is invalid, for example, if the decentralized data consuming network node is not authorized, the method proceeds to box 1114 and denies access to the digital twin or a portion thereof. If the request is valid, the method proceeds to box 1116.
[0242] In box 1116, a digital twin, or a portion thereof, may be provided based on a distributed digital twin identifier included in the received request. The digital twin may further be provided based on digital twin location data contained in the determined access data. Providing a digital twin may include data from a data storage device (such as DT storage device 414, see...) Figure 4A , Figure 7A , Figure 7BRetrieving the digital twin from the distributed data service. The data storage device can connect to the distributed data service via an additional certified network node. This improves security because it ensures that only properly certified distributed data service(s) can access the database storing the digital twin, and thus avoids unauthorized access to the database. Providing the digital twin may include requesting the digital twin from a component or unit storing the digital twin (e.g., device 424). The component or unit may provide the digital twin in response to a request from a distributed data service network node. Box 1116 may further include signing the electronic contract before providing the digital twin, such as in Figure 12 As described in the context, the use of electronic contracts ensures that decentralized data consuming network nodes and other systems processing digital twins comply with one or more authorization rules associated with the digital twin. Upon signing the electronic contract, decentralized data providing network node 416
[0243] In box 1118, at least a portion of the determined access data may be applied to the provided digital twin or a portion thereof. Applying at least a portion of the access data may include applying one or more authorization rules contained in the determined access data to the digital twin data or a portion thereof. Applying at least a portion of the access data may include adapting access to the digital twin or a portion thereof to conform to one or more authorization rules. The access data applied in box 1118 may be different from the access data applied in box 1112 for verifying the received request. The access data applied in box 1118 may include the access data applied in box 1112. This allows ensuring that the request has been properly verified and preventing unauthorized access to the digital twin or a portion thereof. The access data may be applied before access to the digital twin or a portion thereof or during runtime when accessing the digital twin or a portion thereof.
[0244] In box 1120, a digital twin or a portion thereof may be provided to distributed data consuming network nodes based on the applied access data. Providing a digital twin or a portion thereof may include pushing data generated by applying access data to the provided digital twin or a portion thereof to the distributed data consuming network nodes.
[0245] Figure 12 This illustration demonstrates an authorized network node, provided by a distributed data provider, to access a digital twin or a portion thereof associated with a chemical product using digital access elements. Access to the digital twin or a portion thereof can be requested by a distributed data consumption service. This can be achieved through chemical production (e.g., in...). Figure 2 , Figure 7A and Figure 7B The chemical production 204 described in the context of the chemical production process is used to produce chemical product 206. The digital twin may include a distributed digital twin identifier and at least one measured physical and / or chemical property of the chemical product and / or at least one physical and / or chemical property determined based on collected data associated with the production and / or use of the chemical product.
[0246] Digital access elements can be generated during or after the production of chemical products, for example, as in... Figure 7B As described in the context. A digital access element may be associated with a digital twin or a portion thereof. A digital access element may contain a distributed pass identifier and digital twin location data. The distributed pass identifier may correspond to or be associated with a distributed digital twin identifier of the digital twin. The digital twin location data may include multiple digital representations pointing to the digital twin or a portion thereof. The digital twin location data may include multiple digital twin data identifiers associated with the digital twin data contained within the digital twin (see, for example...). Figure 15 and Figure 16 ). Figure 15 and Figure 16 An example of a digital access element is shown. The digital access element may further include or involve authentication and / or authorization information linked to a distributed pass identifier. Authentication and / or authorization information may be provided for authentication and / or authorization of distributed data providing network node 416 and / or distributed data providing network node 716. The digital access element may be provided to distributed registry 718, for example, as in... Figure 7B As described in the context, the decentralized registry 718 can store (multiple) decentralized pass identifiers and associated digital twin location data.
[0247] Chemical products 202 produced by chemical production network 204 can be provided to consumers in association with digital access elements. Consumers can process chemical products to produce additional chemical products and / or discrete products. Chemical products 206 can be linked to codes, such as barcodes or QR codes, that have been encoded with distributed pass identifiers. Consumers of chemical products 206 can read the codes using code readers 1202. Code readers 1202 can be smartphones running code reading applications (such as QR code reader apps). Data obtained from the code reading application can be used to determine distributed pass identifiers. Data obtained from the code reading application can be used to determine distributed digital twin identifiers. Data obtained from the code reading application can be used to determine chemical product identifiers. Data obtained from the code reading application can be used to determine digital twin location data. Distributed pass identifiers, distributed digital twin identifiers, chemical product identifiers, and digital twin location data can all be determined by code readers 1202. For example, the distributed pass identifier determined by code reader 1202 can be a DID, and code reader 1202 can be configured to, for example, use a DID resolver to retrieve an associated DID document containing the distributed digital twin identifier and digital twin location data (see also...). Figure 15 In another example, the chemical product identifier is determined by code reader 1202 and used, for example, to retrieve a distributed access identifier and associated digital twin location data from a database (such as distributed registry 718). Therefore, code reader 1202 can be configured to retrieve a digital access element containing the distributed access identifier and digital twin location data from distributed registry 718. Code reader 1202 can be configured to provide the distributed access identifier and / or distributed digital twin identifier to a database 1206 associated with a consumer of the chemical product. Code reader 1202 can be configured to provide the determined distributed access identifier, distributed digital twin identifier, and digital twin location data to distributed data consumer network node 716.
[0248] Code reader 1202 can be configured to display the identified / retrieved data on a user interface as shown by reference numeral 1204. The user interface can display the identified distributed pass identifier (PP identifier), the identified distributed digital twin identifier (DT identifier), and the identified digital twin location data (DT location). In this embodiment, the distributed pass identifier and the distributed digital twin identifier are different from each other. In another embodiment, the distributed pass identifier is equal to the distributed digital twin identifier. The user interface can further display the identified chemical product identifier (CP identifier). The user interface can also allow retrieval of the digital twin or a portion thereof based on the distributed pass identifier and the digital twin location data, as described below. This process can be initiated via a button labeled “Access DT”. Upon pressing the button, code reader 1202 can send a request to the distributed data consuming network node 716 to access the digital twin or a portion thereof.
[0249] A distributed data consuming network node can generate a request for accessing a digital twin or a portion thereof. The distributed data consuming network node can generate this request based on data received from code reader 1202. For example, the distributed data consuming network node can generate the request based on a distributed digital twin identifier received from code reader 1202. The data consuming network node can also generate the request based on a distributed pass identifier and / or a distributed digital twin identifier provided to database 1206. For example, the distributed data consuming network node can be configured to retrieve a distributed digital twin identifier and digital twin location data from distributed registry 718 based on a distributed pass identifier stored in database 1206. The request generated by the distributed data consuming network node may include a distributed digital twin identifier and a distributed participant identifier associated with distributed data consuming network node 716. Distributed data consuming network node 716 can be configured to determine the distributed data providing network node 416 associated with the digital twin based on digital twin location data provided by code reader 1202 or retrieved from distributed registry 718.
[0250] The distributed data consuming network node 716 can send requests for access to the digital twin or a portion thereof to the identified distributed data providing network node 416, as indicated by arrow 1208. The distributed data providing network node 416 can be associated with a chemical product producer. The distributed data providing network node 416 can be associated with a chemical production facility that produces the chemical product. The distributed data providing network node 416 can be associated with the data owner of the digital twin. In addition to the request, the distributed data consuming network node 716 can also provide authentication and / or authorization information, for example, as in... Figure 17A and Figure 17BAs described in the context.
[0251] This request can be authenticated (see [link]). Figure 17A and Figure 17B The request can be verified by distributed data from network nodes 416, for example, as in... Figure 11 As described in the context of [the previous sentence]. For example, a distributed data providing network node can retrieve access data from DB 418 based on a distributed digital twin identifier included in a received request. At least a portion of the retrieved access data can be applied to the received request, as in [the context of the previous sentence]. Figure 11 As described in the context, this allows filtering of the network nodes based on the decentralized participant(s) identifier(s) associated with the decentralized data consuming network node requesting access. If the request is invalid, for example, if the decentralized data consuming network node is not authorized to access the digital twin data, the decentralized data providing network node will terminate the peer-to-peer communication channel and will not provide the digital twin.
[0252] If the request is valid, the distributed data providing network node 416 can initiate contract negotiation with the distributed data consuming network node. The distributed data providing network node 416 can provide an electronic contract to the distributed data consuming network node. The electronic contract may include one or more authorization rules associated with the distributed digital twin identifier. This allows the data consumer to determine the access and usage conditions associated with the desired data. The distributed data providing network node 416 and the distributed data consuming network node 716 can be configured to negotiate and sign the negotiated electronic contract. The use of the electronic contract ensures that the distributed data consuming network node and other systems processing the digital twin comply with one or more authorization rules associated with the digital twin. Upon signing the electronic contract, the distributed data providing network node 416 can retrieve or request the digital twin stored in the DT storage device 414 based on the distributed digital twin identifier included in the received request, as indicated by arrows 1210 and 1212 (see also...). Figure 11 Distributed data provision network node 416 can apply the determined access data to retrieved or received digital twins, for example, as in... Figure 11 As described in the context. Subsequently, the distributed data providing network node can provide a digital twin or a portion thereof to the distributed data consuming network node 716 based on the applied access data, as indicated by arrow 1214 (see also...). Figure 11 ).
[0253] The digital twin provided by the distributed data providing network node 416 can be stored in the database 1206 associated with the distributed data consuming network node, as shown by arrow 1216, based on the access data stored therein.
[0254] Through decentralized digital twin identifiers, digital twin data can be uniquely associated with chemical products. Through decentralized networks, digital twins, or portions thereof, can be transferred in a standardized and secure manner between producers and consumers of chemical products, allowing producers to control access to the digital twins or portions thereof across multiple decentralized data-consuming network nodes within the decentralized network. In this way, digital twins, or portions thereof, can be shared directly among participants in the chemical product ecosystem through their unique association with the chemical product and without central intermediaries. This achieves transparency in digital twins within the chemical product ecosystem.
[0255] Figure 13 A flowchart illustrating a computer-implemented method for processing a physical entity, such as a digital twin or a portion thereof, of a chemical product according to an example embodiment of this disclosure is shown. This can be achieved through chemical production (e.g., in...). Figure 2 , Figure 7A and Figure 7B The chemical production process described in the context of chemical production 204 is used to produce chemical products. The digital twin may include a distributed digital twin identifier and at least one measured physical and / or chemical property of the chemical product and / or at least one physical and / or chemical property determined based on collected data associated with the production and / or use of the chemical product.
[0256] In box 1302, a request is made to access the digital twin or a portion thereof. This request can be made by nodes in a distributed data-consuming network (such as nodes associated with consumers of chemical products) (see also...). Figure 12 Access can be requested at nodes in a distributed data delivery network associated with a digital twin (see, for example...). Figure 12 The request may include a decentralized digital twin identifier associated with the digital twin and a decentralized participant identifier associated with a decentralized data consuming network node.
[0257] In response to a request, access to a digital twin or a portion thereof can be authorized by distributed data provision network nodes, for example, as in Figure 11 and Figure 12 As described in the context. Where access to the digital twin is authorized, in box 1304, the digital twin or a portion thereof may be provided to distributed data-consuming network nodes (see also...). Figure 11 and Figure 12 The provision may include pushing digital twins to a database associated with nodes in a distributed data consumption network. The provision may also include receiving digital twins from nodes in a distributed data delivery network.
[0258] In box 1306, a digital twin or a portion thereof may be processed. Processing may include using the provided digital twin or a portion thereof to determine additional data. Processing may include aggregating the provided data. Processing may include using the provided data to generate control data to control the production of additional chemical and / or discrete products from received chemical products.
[0259] The output generated through processing can be provided in box 1308.
[0260] Figure 14 A flowchart illustrates a computer-implemented method for authorizing decentralized data consumption network nodes to access a digital twin or a portion thereof of the physical entity of a chemical product using a digital access element associated with that chemical product. This can be achieved through chemical production (e.g., in...). Figure 2 , Figure 7A and Figure 7B The chemical production process described in the context of chemical production 204 is used to produce chemical products. The digital twin may include a distributed digital twin identifier and at least one measured physical and / or chemical property of the chemical product and / or at least one physical and / or chemical property determined based on collected data associated with the production and / or use of the chemical product.
[0261] In box 1402, a numeric access element can be generated. The numeric access element can be as follows: Figure 7B The digital access element is generated as described in the context. It may include a distributed pass identifier and digital twin location data. The distributed pass identifier may correspond to or be associated with a distributed digital twin identifier, for example, as in... Figure 7A and Figure 12 As described in the context, a digital access element can correspond to a DID document associated with a distributed pass identifier that serves as a DID.
[0262] The generated digital access element can be provided in box 1404. This may include providing the digital access element to a distributed registry, such as distributed registry 718 (see example...). Figure 7B and Figure 12 This could include encoding digital access elements in a physical identifier attached to a chemical product.
[0263] In box 1406, access to a digital twin or a portion thereof can be authorized based on the provided digital access element, the distributed digital twin identifier, and the distributed participant identifier associated with the distributed data consuming network node requesting access to the digital twin. Authorization of access can be as follows: Figure 11 and Figure 12 It shall be executed as described in the context.
[0264] Figure 15 Examples of owner data 1502 based on decentralized identifiers, digital access element 1504 based on decentralized identifiers, and decentralized identity manager 1506 are shown.
[0265] Distributed identifiers may include Distributed Identifiers (DIDs). In this case, the digital access element based on the distributed identifier can be a DID document 1504 associated with the DID. In addition to the DID document 1504 used as a digital access element, Figure 15 Also shown is a DID owner data element 1502 including owner data based on a decentralized identifier. Typically, owner data based on a decentralized identifier can include a decentralized identifier associated with a subject (such as (multiple) chemical product datasets) and can include one or more authentication mechanisms. Owner data based on a decentralized identifier 1502 can include owner data electronically owned and controlled by the DID owner. In this context, electronic ownership can refer to data stored in an owner's repository or wallet. This data can be securely stored and / or managed on an organization's server or client device. Owner data based on a decentralized identifier 1502 can include a DID, a private key, and a public key. The DID owner can own and control the DID representing the identity associated with the DID subject, and the private and public key pair associated with the DID. A DID can be understood as an identifier and authentication information associated with or uniquely linked to that identifier.
[0266] A DID (Digital Ingredient) entity can be a raw material, a basic substance, a chemical product, or a final product. A DID entity can be a machine, system, or equipment used to produce a raw material, basic substance, chemical product, intermediate product, or final product, or a collection of such machines, equipment, and / or systems. A DID owner can be a supply chain participant or manufacturer, such as a chemical manufacturer that produces chemicals. A DID owner can be an upstream participant in a chemical manufacturer's supply chain, such as a supplier that provides raw material chemicals or precursors to produce the chemical product. A DID owner can be a downstream participant in a chemical manufacturer's supply chain, such as a consumer that consumes the chemical product to produce intermediate products, components, component parts, or final products. A DID owner can be any participant in the supply chain, including raw material chemical product suppliers, intermediate chemical product manufacturers, intermediate component manufacturers, component manufacturers, component assembly manufacturers, or final product manufacturers.
[0267] A DID can be any identifier associated with the DID subject and / or the DID owner. Preferably, the identifier is unique to the DID subject and / or the DID owner. The identifier can be unique at least within the scope of the intended use of the DID. The identifier can be a locally or globally unique identifier for: raw materials, precursors, base substances, chemical products, intermediate products, components, component assemblies, final products, or a collection thereof; machines, systems, or equipment used to produce raw materials, base substances, chemical products, intermediate products, components, component assemblies, or final products, or such machines, equipment, and / or systems; chemical manufacturers that produce chemicals, upstream participants in the chemical manufacturer's supply chain, downstream participants in the chemical manufacturer's supply chain, or a collection thereof; any participant in the supply chain that includes raw material chemical product suppliers, intermediate chemical product manufacturers, intermediate part manufacturers, component manufacturers, component assembly manufacturers, or final product manufacturers, or a collection thereof.
[0268] A DID can be any identifier associated with a DID subject and a DID owner. Preferably, a DID is unique to both the DID subject and / or the DID owner. A DID can be unique at least within the scope of its intended use. A DID can be a locally or globally unique identifier for any of the aforementioned possible DID subjects. A DID can also be a Uniform Resource Identifier (URI), such as a Uniform Resource Locator (URL). Furthermore, a DID can be an Internationalized Resource Identifier (IRI). A DID can be a random string of numbers and letters to improve security. In one embodiment, a DID can be a 128-letter string of letters and numbers, for example, according to the scheme `did:methodName:methodSpecificDID`, such as `did:example:ebfeb1f712ebc6f1c276e12ec21`. A DID can be a decentralized ID independent of a centralized third-party management system and under the control of the DID owner.
[0269] The digital access element of DID document 1504 can be associated with a DID (i.e., the DID included in the owner data 1502 based on a distributed identifier). Therefore, the digital access element can include a reference to a DID associated with the subject of the DID described by DID document 1504. DID document 1504 may also include authentication information such as a public key. The public key can be used by a third-party entity granted access to information and data owned by the DID owner / subject. The public key can also be used to verify whether the DID owner actually owns or controls the DID. The DID document may include authentication information and authorization information, for example, to authorize a third-party entity to read the DID document or certain portions of the DID document, without granting the third party the right to prove ownership of the DID.
[0270] Digital access element 1504 may include one or more representations that are digitally linked, for example, via a service endpoint to digital twin data included in the digital twin associated with the digital access element. The service endpoint may include a network address that runs a service on behalf of the DID owner. Specifically, the service endpoint may refer to a service provided by the DID owner to access the digital twin data, such as a data service. This service may include services for reading or analyzing data contained in the digital twin data. The data contained in the digital twin data may include chemical product declaration data, chemical product safety data, analytical certificate data, emissions data, product carbon footprint data, product environmental footprint data, chemical product specification data, product information, technology application data, production data, chemical composition data, or combinations thereof.
[0271] Digital access element 1504 may include additional identifiers, such as digital twin data identifiers and chemical product identifiers.
[0272] The digital access element 1504 may include various other information, such as metadata specifying the creation time of the digital access element, the last modification time of the digital access element, and / or the expiration time of the digital access element.
[0273] DID and digital access element 1504 can be associated with data registration nodes, such as a centralized data service system or a decentralized data service system 1506 (e.g., a distributed ledger, blockchain, or decentralized file system). The distributed ledger or blockchain can be used to store a representation of the DID pointing to digital access element 1504. The representation of the DID can be stored on distributed computing nodes of the distributed ledger or blockchain 1506. For example, a DID hash can be stored on multiple computing nodes of the distributed ledger and point to the location of digital access element 1504. In some embodiments, digital access element 1504 can be stored on distributed ledger 1506. Each of the computing nodes can store a copy of distributed ledger 1506. In this way, each DID hash can be redundantly stored, thereby allowing for improved data security. DIDs associated with multiple different digital access elements 1504 can be included in distributed ledger 1006.
[0274] In some embodiments, the digital access element 1504 may be stored on the distributed ledger 1506, i.e., as a supplement to or alternative to storing the associated DID representation on the distributed ledger 1506. In other embodiments, the digital access element 1504 may be stored in a data storage device (not shown) associated with the distributed ledger, blockchain, or decentralized file system.
[0275] A distributed ledger or blockchain 1506 can be any decentralized distributed network comprising various computing nodes that communicate with each other. For example, a distributed ledger 1506 may include a first distributed computing node, a second distributed computing node, a third distributed computing node, and any number of additional distributed computing nodes (not shown). A distributed ledger or blockchain 1506 may include known technology stacks such as Bitcoin (see, for example, the Bitcoin documentation published November 11, 2022, https: / / en.bitcoin.it / wiki / Protocol_documentation), Ethereum (see, for example, the Ethereum documentation published August 15, 2022, at https: / / ethereum.org / en / developers / docs / ), Solana (see, for example, the Solana documentation published November 11, 2022, at https: / / spl.solana.com / ), Polygon (see, for example, the Polygon documentation published November 11, 2022, at https: / / wiki.polygon.technology / ), or other implementations that perform data transactions to varying degrees on the distributed ledger. The description of the example framework is for illustrative purposes only and should not be considered limiting.
[0276] Figure 16Examples of certificate data 1602, digital access element data 1604, and international data space (IDS) infrastructure 1608 are shown.
[0277] and Figure 15 Compared to the example, Figure 16 The example is certificate-based. Certificate data 1602 may include authentication data for the subject and certificate issuing authority. The subject may be the data owner or an IDS connector 1606 operated by or under the control of the data owner. Certificate data 1602 may further include the name of the subject issuing the certificate, such as the data owner name, data owner ID, IDS connector name, IDS connector ID, or a combination thereof. The certificate may be an X.509 certificate, such as X.509v3. Certificate data 1602 may be associated with an IDS infrastructure 1608, which includes, for example, a Certificate Issuance Service (CA) 1610 and / or a Dynamic Provisioning Service (DAPS) 1612 that provides dynamic attribute tokens (e.g., OAuth access tokens). Certificate data 1602 may further include various other information, such as metadata specifying the certificate's creation time, the last modification time, and / or expiration time. The information required to verify certificate data 1102 may be provided via a certification registry associated with the Certificate Issuance Service and / or the Dynamic Provisioning Service. For example, in the IDSA Reference Architecture Model version 3.0 of April 2019, IDS connector 1606, associated with or under the control of the data owner, Certificate Authority (CA) 1610, Dynamic Attribute Provisioning Service (DAPS) 1612, and IDS connector associated with the data consumption service (not shown), are used to verify identity before performing data exchange (see example). Figure 11 , Figure 12 , Figure 17A and Figure 17B ).
[0278] Certificate data 1602 and digital access element data 1604 can be stored within IDS connector 1606 (also referred to as providing services for the data). IDS connector 1606 can be associated with or under the control of the data owner of the chemical product data.
[0279] The digital access element data 1604 may include a distributed identifier, authorization data, and an endpoint associated with the chemical product data. The distributed identifier may be a universally unique identifier (UUID), such as UUIDv4. UUIDv4 may conform to the following format: [0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}. Authorization information may be used to control access to the chemical product data or a portion thereof, for example, as in... Figure 17A and Figure 17B As described in the context. Endpoints can include any digital representation pointing to digital twin data or a portion thereof (see, for example...). Figure 12 Digital twin data can include... Figure 15 The data mentioned in the context.
[0280] The digital access element data 1604 may include various other information, such as metadata specifying the creation time of the digital access element, the last modification time of the digital access element, and / or the expiration time of the digital access element.
[0281] Figure 17A and Figure 17B Each example method is shown for authenticating access to a digital twin or a portion thereof associated with a chemical product.
[0282] During the authentication process, various communication modes can be implemented to verify identity. Figure 17A An example communication pattern can occur between a distributed data providing network node 416 and a distributed data consuming network node 716. In this scenario, the distributed data providing network node 416 can act as an authentication entity and can perform authentication without using a separate service. The distributed data consuming network node 716 can request services from the distributed data providing network node 416 (see [link to documentation]). Figure 17A The steps [1] may include a decentralized participant identifier (such as a DID), a certificate of the decentralized data consumer network node 716, an access token associated with the certificate of the decentralized data consumer network node 716, or a verifiable credential associated with the owner of the decentralized data consumer network node 716.
[0283] In response to the request, the distributed data providing network node 416 can access a registry (such as a centralized or distributed authentication registry) to retrieve data related to the (multiple) authentication mechanisms associated with the distributed identifier. For example, a centralized authentication registry can provide data related to the authentication mechanism via an authentication service that issues access tokens. Further, for example, a distributed authentication registry can provide data related to the authentication mechanism by generating a request token. The data related to the authentication mechanism may include the public key of the distributed data consuming network node 716.
[0284] Based on the retrieved data related to (multiple) authentication mechanisms, the distributed data provider network node 416 can generate authentication requests (e.g., corresponding to authentication request tokens or dynamic attribute tokens) (see [link to data]). Figure 17AStep [2]). The authentication request can be generated based on the public key of the distributed data consuming network node 716 and / or the private key of the distributed data providing network node 416. The generated authentication request can be sent to the distributed data providing network node 416 (see Step 2). Figure 17A Step [3]).
[0285] Based on the received authentication request, the distributed data consumption network node 716 can generate authentication data for responding to the authentication request (see [link]). Figure 17A Step [4]). The generated authentication data can be sent back to the distributed data providing network node 716 (see step 4). Figure 17A Step [5]).
[0286] After receiving a response including authentication data from distributed data consumer network node 716, distributed data provider network node 416 can then verify the authentication data (see [link]). Figure 17A Step [6]). In response to this verification, distributed data providing network node 416 can grant or deny service requests from distributed data consuming network node 716 (see step [6]). Figure 17A Step [7]). In the case of authenticated access, the distributed data consumer network node 716 can provide a distributed digital twin identifier and a distributed participant identifier associated with the distributed data consumer network node 716, and the distributed data provider network node 416 can authenticate the received request and, upon authentication, can provide a digital twin or a portion thereof, for example, as... Figure 11 and Figure 12 As described.
[0287] Figure 17B This demonstrates another example communication pattern that can occur between distributed data providing network node 416, distributed data consuming network node 716, and authentication service 1704.
[0288] First, the distributed data consumer network node 716 can request services or initiate communication with the distributed data provider network node 416 (see [link]). Figure 17B Step [1]). The request may include, for example, regarding Figure 17A The decentralized participant identifier, such as DID, for node 716 of the described decentralized data consumption network.
[0289] Upon receiving a request, the distributed data providing network node 416 can access the distributed ledger to retrieve one or more authentication mechanisms associated with the distributed identifier. Based on the retrieved authentication mechanisms, the distributed data providing network node 416 can generate an authentication request (see [link to documentation]). Figure 17B Step [2]).
[0290] Here, at least one of the retrieved authentication mechanisms can be provided via authentication service 1704. Thus, in some embodiments, the generated authentication request can be sent directly to authentication service 1704 (see [link to authentication service]). Figure 17B Step [3]). After receiving the authentication request from the distributed data provider network node 416, the authentication service 1704 can generate authentication data (see step [3]). Figure 17B Step [4]).
[0291] The authentication data generated by authentication service 1704 can be sent to distributed data consumption network node 716 (see [link]). Figure 17B Step [5]).
[0292] Then, the distributed data consumer network node 716 can transmit the authentication data to the distributed data provider network node 416 (see...). Figure 17B Step [6]). After receiving the authentication data, the distributed data provider network node 416 can then verify the authentication data (see step [6]). Figure 17B Step [7]). In response to this verification, distributed data providing network node 416 can permit or deny the service request of distributed data consuming network node 716 (see step [7]). Figure 17B Step [8]). In the case of authenticated access, the distributed data consumer network node 716 can provide a distributed digital twin identifier and a distributed participant identifier associated with the distributed data consumer network node 716, and the distributed data provider network node 416 can authenticate the received request and, upon authentication, can provide a digital twin or a portion thereof, for example, as... Figure 11 and Figure 12 As described.
[0293] Alternatively, in some embodiments, after the distributed data providing network node 416 can generate an authentication request, the distributed data providing network node 416 can send the authentication request to the distributed data consuming network node 716. The distributed data consuming network node 716 can then pass the authentication request to the authentication service 1704.
[0294] Furthermore, after authentication service 1704 generates authentication data, in some embodiments, authentication service 1704 only contacts distributed data consuming network node 716 to notify it of receiving the authentication request and to obtain its consent. When distributed data consuming network node 716 receives the notification, it consents and sends the consent back to authentication service 1704. After receiving the consent, authentication service 1704 then sends the authentication data directly to distributed data providing network node 416.
[0295] Finally, in many transactions, authentication can be performed mutually by both parties. In this case of mutual authentication, each participant is both a principal entity and a verification entity. The distributed data consuming network node 716 and the distributed data providing network node 416 can control their distributed identities. Initially, the services exchange their distributed identities. Next, each of these services accesses the distributed ledger to obtain each other's (multiple) authentication mechanisms. Then, each service generates its own authentication request based on the other IDs' (multiple) authentication methods. The generated authentication data is then sent to the other services. Upon receiving each other's authentication data, each service verifies the received authentication data. Based on the verification results, these services can then perform additional communication, such as one service granting or denying another service's service request, as previously described.
[0296] Figure 17A and Figure 17B Only an example of an authentication protocol is shown. Furthermore, although the communication arrows are discussed in a certain order or shown in a communication sequence, a specific order is not required unless specifically stated or because a particular communication depends on the completion of another communication before it can be transmitted.
[0297] This disclosure has also been described in conjunction with various preferred embodiments and examples. However, by studying the accompanying drawings, this disclosure, and the claims, those skilled in the art, as well as those who practice the claimed invention, will understand and implement other variations.
[0298] Any steps presented in this document can be performed in any order. The methods disclosed herein are not limited to a specific order of these steps. Nor is it required that different steps be performed in a particular place or on a particular computing node in a distributed system; that is, each step can be performed on different computing nodes using different devices / data processing.
[0299] As used herein, "determine" also includes "initiating or causing determination," "generate" also includes "initiating and / or causing generation," and "provide" also includes "initiating or causing determination, generation, selection, sending, and / or receiving." "Initiating or causing an action" includes any processing signal that triggers a computing node or device to perform a corresponding action.
[0300] In the claims and description, "comprising" does not exclude other elements or steps, and the indefinite article "a" or "an" does not exclude multiple. A single element or other unit can perform the function of several entities or items recited in the claims. The fact that certain measures are recited only in mutually different dependent claims does not indicate that a combination of these measures cannot be used for advantageous implementations.
Claims
1. An apparatus for controlling access to a digital twin of a physical entity of a chemical product produced from one or more chemical input materials, wherein, Access to the digital twin by one or more distributed data consuming network nodes in a distributed network is controlled by a distributed data providing network node associated with the digital twin, and wherein the digital twin includes a distributed digital twin identifier and at least one measured physical and / or chemical property of the chemical product and / or at least one physical and / or chemical property determined based on collected data associated with the production and / or use of the chemical product, the device comprising: - At least one distributed digital twin identifier providing unit, the at least one distributed digital twin identifier providing unit being configured to provide the distributed digital twin identifier, - At least one mapping data providing unit, configured to provide mapping data including data related to chemical products produced from the one or more chemical input materials, the data being associated with corresponding decentralized participant(s) identifiers associated with the decentralized participant(s)(s), wherein the mapping data is generated based on the data related to the chemical products produced from the one or more chemical input materials and the data related to the decentralized participant(s)(s). - At least one access data generation unit, configured to generate access data for at least a portion of the digital twin based on the mapping data, wherein the access data includes the distributed digital twin identifier and one or more authorization rules associated with the distributed digital twin identifier, wherein the one or more authorization rules define the access and / or use of the digital twin by distributed data consuming network nodes associated with the distributed participant(s)(s) identifier(s) included in the mapping data for at least a portion of the digital twin. - The distributed data providing network node associated with the digital twin, wherein the distributed data providing network node is configured to control access to at least a portion of the digital twin by one or more distributed data consuming network nodes based on generated access data.
2. A system for controlling access to a digital twin of a physical entity of a chemical product produced from one or more chemical input materials, wherein, Access to the digital twin by one or more distributed data consuming network nodes in a distributed network is controlled by a distributed data providing network node associated with the digital twin, and wherein the digital twin includes a distributed digital twin identifier and at least one measured physical and / or chemical property of the chemical product and / or at least one physical and / or chemical property determined based on collected data associated with the production and / or use of the chemical product, the system comprising: - Optionally, a digital twin provider layer is configured to provide a digital twin of the physical entity of the chemical product. - Access provider layer, which is configured as follows: • Provide a distributed digital twin identifier included in the digital twin. • Provide mapping data, which includes data related to chemical products produced from the one or more chemical input materials, and this data is associated with corresponding decentralized participant(s) identifiers associated with the decentralized participant(s)(s), wherein the mapping data is generated based on the data related to the chemical products produced from the one or more chemical input materials and the data related to the decentralized participant(s)(s). • Based on the mapping data, access data for at least a portion of the digital twin is generated, wherein the access data includes the distributed digital twin identifier and one or more authorization rules associated with the distributed digital twin identifier, wherein the one or more authorization rules define the access and / or use of at least a portion of the digital twin by distributed data consuming network nodes associated with the distributed participant(s)(s) identifier(s) included in the mapping data, and • The distributed data providing network nodes control access to at least a portion of the digital twin by one or more distributed data consuming network nodes based on the generated access data.
3. The apparatus of claim 1 or the system of claim 2, wherein, Data related to chemical products produced from one or more chemical input materials includes consumer identifiers associated with the chemical product.
4. The apparatus or system as claimed in any of the preceding claims, wherein, Generating the mapping data involves associating data related to a chemical product produced from the one or more chemical input materials with corresponding decentralized participant identifiers contained in data related to the decentralized participant node(s), based on a relational representation, wherein the data related to the chemical product is associated with the data related to the decentralized participant node(s).
5. The apparatus or system as claimed in any of the preceding claims, wherein, The one or more authorization rules include computer-executable instructions to allow access to the digital twin associated with the distributed digital twin identifier, deny access to the digital twin associated with the distributed digital twin identifier, modify access to the digital twin associated with the distributed digital twin identifier, or modify the digital twin associated with the distributed digital twin identifier.
6. The apparatus or system as claimed in any of the preceding claims, wherein, One or more authorization rules include one or more rules specific to the distributed participant(s).
7. The apparatus or system as claimed in any of the preceding claims, wherein, The one or more authorizing rules include one or more local rules specific to a particular location, wherein the location is associated with a jurisdiction and the local rules of that location are associated with legal requirements relating to the supply of the chemical product.
8. The apparatus or system as claimed in any of the preceding claims, wherein, The one or more authorization rules include one or more rules specific to attribute values associated with decentralized network participants.
9. The apparatus or system as claimed in any of the preceding claims, wherein, One or more authorization rules include at least one regulatory directive configured to provide access to a digital twin or a portion thereof in connection with regulatory requirements relating to the supply of chemical products.
10. The apparatus or system as claimed in any of the preceding claims, wherein, One or more authorizing rules include one or more prescribed rules relating to emissions data, production data, recycled content data, bio-based content data, source data, working conditions data, or a combination thereof.
11. The apparatus or system as claimed in any of the preceding claims, wherein, One or more authorization rules include the obligations of the distributed data consuming network nodes associated with the corresponding distributed participant identifier and / or the obligations of the distributed network nodes using the digital twin or a portion thereof accessed by the distributed data consuming network nodes associated with the corresponding distributed participant identifier.
12. A computer-implemented method for controlling access to a digital twin of a physical entity of a chemical product produced from one or more chemical input materials, wherein, Access to the digital twin by one or more distributed data consuming network nodes in a distributed network is controlled by a distributed data providing network node associated with the digital twin, and wherein the digital twin includes a distributed digital twin identifier and at least one measured physical and / or chemical property of the chemical product and / or at least one physical and / or chemical property determined based on collected data associated with the production and / or use of the chemical product, the method comprising: - Provide this decentralized digital twin identifier, - Provide mapping data, which includes data related to chemical products produced from the one or more chemical input materials, and this data is associated with corresponding decentralized participant(s) identifiers associated with the decentralized participant(s)(s), wherein the mapping data is generated based on the data related to the chemical products produced from the one or more chemical input materials and the data related to the decentralized participant(s)(s). - Based on the mapping data, access data for at least a portion of the digital twin is generated, wherein the access data includes the distributed digital twin identifier and one or more authorization rules associated with the distributed digital twin identifier, wherein the one or more authorization rules define the access and / or use of at least a portion of the digital twin by distributed data consuming network nodes associated with the distributed participant(s)(s) identifier(s) included in the mapping data. - Provide the generated access data to the distributed data providing network node to control the access of the one or more distributed data consuming network nodes to at least a portion of the digital twin based on the access data.
13. An apparatus for authorizing distributed data provision network nodes to access a digital twin of a physical entity of a chemical product, wherein, The digital twin includes a distributed digital twin identifier and at least one measured physical and / or chemical property of the chemical product and / or at least one physical and / or chemical property determined based on collected data associated with the production and / or use of the chemical product, wherein at least a portion of the access data of the digital twin has been generated by the apparatus or system as described in any one of claims 1 to 11 and provided to the distributed data providing network node, the apparatus comprising: - A digital twin provider configured to provide a digital twin of the physical entity of the chemical product. - This distributed data provider network node is configured as follows: • Receive a request from a distributed data consumer network node for accessing the digital twin or a portion thereof, the request including a distributed digital twin identifier associated with the digital twin and a distributed participant identifier associated with the distributed data consumer node. • Collect the digital twin or a portion thereof from the digital twin provider based on the received distributed digital twin identifier. • Based on the received distributed digital twin identifier and distributed participant identifier, access data is determined and the determined access data is applied to the collected digital twin or a portion thereof. • Provide the digital twin or a portion thereof to the distributed data consumption network node based on the access data applied, or deny access to the digital twin or a portion thereof based on the access data applied.
14. A computer-implemented method for authorizing distributed data consumption network nodes to access a digital twin or a portion thereof of the physical entity of a chemical product using a digital access element associated with the chemical product, wherein, The digital twin includes a distributed digital twin identifier and at least one measured physical and / or chemical property of the chemical product and / or at least one physical and / or chemical property determined based on collected data associated with the production and / or use of the chemical product. The method includes the following steps: • Provides digital access elements including a distributed pass identifier and digital twin location data, wherein the distributed pass identifier is or is associated with the distributed digital twin identifier. • Access to the digital twin, as authorized by the apparatus of claim 13, is provided based on the provided digital access element, the distributed digital twin identifier, and the distributed participant identifier associated with the distributed data consumption network node requesting access to the digital twin.
15. A computer element having instructions that, when executed on one or more computing nodes, are configured to perform the steps of the method as claimed in claim 12 or 14, or are configured to be executed by an apparatus or system as claimed in any one of claims 1 to 11 and claim 13.