Intrinsic Product Integrity Management Infrastructure

Abstract

Intrinsic Integrity Management Infrastructure for Products The invention describes an infrastructure (500) for managing the intrinsic integrity of products (330) throughout their entire life cycle, comprising: - at least one embedded module (20) with a unique identifier, - a plurality of devices constituting the information system (IS), characterized in that said embedded module (20) is arranged to measure the physical quantities and quantities derived from the product (330) and surroundings involved around the product (330) and arranged to communicate with a panel of devices to transmit authenticated information to at least one collection device (40) allowing at least one of the devices of the information system (IS) the storage, processing and dissemination of information in order to demonstrate the state of intrinsic integrity of the products (330).

Description

Title of the invention: Product Intrinsic Integrity Management Infrastructure

[0001] The invention relates to two general fields, that of connected objects and the world of blockchains.

[0002] The world of connected objects or the Internet of Things is the point of convergence of all the techniques of electronics, information systems, modeling of the environment, goods, the human body thanks in particular to the developments in means of telecommunications, microelectromechanical systems (MEMS), artificial intelligence, etc.

[0003] These connected objects are increasingly present in our lives, homes, offices, vehicles, etc. Smartphones and accessories like smartwatches remain the most prevalent connected objects in our daily lives. Generally speaking, connected objects are personal and individual, allowing the detection, measurement, control, and visualization of physical quantities, depending on their arrangement. Settings and configuration are performed locally, directly on the device.

[0004] These devices are designed to communicate information to remote computer servers via the internet.

[0005] These devices function once they have been activated and recognized and linked to a user account provided for this purpose by the manufacturer of the connected device or by a third-party service. The activation phase remains a necessary and sensitive phase that enables the exchange and negotiation of cybersecurity processes, such as signatures, encryption keys for the exchanged data, etc.

[0006] This illustration is not exhaustive; new needs continually arise with new potentials for connected objects.

[0007] The invention also relates to the general field of blockchain and trust transactions.

[0008] New blockchain-type technologies are processes aimed at guaranteeing the identification and authenticity of goods by tracking the recording of each transaction related to the goods and objects in question.

[0009] A blockchain is a list of records, called blocks, that are linked together. Each block contains a pointer that refers to the previous block. Multiple parties can record transactions in the blockchain or verify the previous transactions of other parties. The blockchain is sometimes called a (distributed) ledger. It is common to distinguish between public and private blockchains.

[0010] It is always possible to obtain transaction information concerning an object that is contained in the blocks. It is thus easy to prove all the transaction information concerning the asset or objects in question.

[0011] Many markets have adopted blockchain technologies to provide customers, manufacturers, brands, intermediaries, and companies with a guarantee of traceability and authenticity for products on the market. Blockchain offerings provide sufficient traceability guarantees for contractual frameworks concerning goods.

[0012] In summary, blockchain devices govern contractual aspects by providing a real gain in traceability of contractual exchanges in various fields such as notarial services, banking, trading, transactions, etc. Blockchain devices, however, do not provide any traceability regarding events experienced, changes, the quality status, or the evolution of the intrinsic properties of the object, such as its alteration, improvement, etc., throughout its contractual life. Blockchain devices are useful for demonstrating and proving ownership, identity, and authenticity, but they do not provide any indication of the integrity of the intrinsic characteristics of physical products, objects, or goods by providing proof of proper preservation, use, maintenance, etc.

[0013] Certain markets, such as, for example, the luxury goods market, have adopted the certification of an object's ownership history, guaranteeing its origin and therefore its authenticity through the implementation of blockchain technology. Thus, thanks to this technology, it is possible to be informed about the authenticity of an object from a given luxury brand, provided by the blockchain authentication service. However, it is not possible to obtain guaranteed information or indications about the care taken during the product's lifespan, concerning precautions for use, maintenance, storage, etc. Yet these characteristics contribute to the evolution of luxury goods, conferring a considerable increase in value in the case of optimal preservation. Conversely, if preservation methods are not followed, the value of the luxury item can decrease significantly.

[0014] By way of example, but not limiting, the markets described as examples in this document can have very diverse and heterogeneous universes, such as the world of fine luxury wines, Champagne vintages, but also luxury leather goods, around handbags, briefcases, luggage, not forgetting luxury footwear, etc.

[0015] Advantageously, the market examples cited cannot limit the scope of this present invention but, on the contrary, encompass vast market universes having extreme specific requirements and with a very high sensitivity to the environmental phenomena and parameters in which the products evolve.

[0016] Current processes can demonstrate the authenticity of an identified product and certain information concerning its maintenance by the brand, but they cannot faithfully and comprehensively represent and record all the environmental parameters in which the product has evolved over time, giving it characteristic aging traits that define its intrinsic state. Therefore, existing processes can provide assistance regarding a product's authenticity but not its integrity.

[0017] Finally, all these processes have very little effect on reducing a brand's exposure to usurpation or on product counterfeiting, the detection of which still remains a matter of expertise. Solution provided by the invention

[0018] In order to better understand the solution provided by the invention, it is useful to characterize the meaning of the authenticity of a product which represents the guarantee that the product in question and present is indeed from the brand and was manufactured in its workshops; thus integrity is characterized by the authenticity of the product and the guarantee of regular monitoring of the evolution of the intrinsic state of the product throughout its life course, from production by the brand to consumption / use by the customer.

[0019] The present invention aims to address the drawbacks of the prior art, in particular by the ability to guarantee the integrity of an asset, an object, a product, by providing in addition to proof of authenticity, proof of proper use, optimal preservation, regular maintenance carried out by expert hands throughout the life of the object.

[0020] According to one embodiment, authenticity and integrity information concerning a product is only accessible to persons who have been invited to contribute and / or view information and events according to defined accessibility criteria.

[0021] This provision ensures that all connections are strictly authenticated and encrypted.

[0022] According to one embodiment, proof of a product's integrity is based on secure, end-to-end encrypted communication devices using cryptographic keys and signatures, called a communication chain or channel, which guarantees the integrity of the transmitted data, information, and events. This dedicated and secure communication channel is an inalienable and inviolable link between each device.

[0023] According to one embodiment, a first embedded device with a unique identifier is sealed to the product, giving it its inalienable and inviolable character.

[0024] This provision ensures that the embedded device containing a unique identifier is sealed to the product using an inalienable and tamper-proof process guaranteeing a unique and authentic identification of the products concerned.

[0025] According to one embodiment, the inalienable and uniquely identified embedded device is arranged to establish the characterization of the environment over time by collecting data, events and information by measuring physical quantities.

[0026] This provision allows the faithful characterization of the environment in which the product evolves throughout its life, by recording sampled measurements of the appropriate physical quantities of the environment, of a product, of a good, of a living being.

[0027] According to one embodiment, the embedded device with a unique identifier that faithfully characterizes the environment is capable of communicating, securely by cryptography and signature, to a panel of trusted devices integrated into the communication channel, paired and authenticated.

[0028] This provision allows communication to the information system of data, information, events, alerts, etc. recorded and contained in the embedded devices by means of third-party devices, in addition to the classic linking and coordination devices dedicated and provided for in the present invention.

[0029] According to the same embodiment, the embedded device is arranged according to the requirements, so as to communicate locally, by means of RF links such as BLE, WiFi, ZigBee, Matter, IR, etc.

[0030] This provision allows connections to third-party devices, coordinators, etc.

[0031] According to the same embodiment, trusted third-party devices are integrated into the communication channel, for the benefit of using an installed and configured software device guaranteeing the authenticity of the identification allowing secure connection to the communication channel and encrypted exchanges of bidirectional events and information with the information system and embedded devices.

[0032] This provision allows third-party equipment such as smartphones, tablets, computers, etc. to be authenticated on the communication channel enabling them to transmit and receive information and events in a secure and encrypted manner from the embedded devices and the information system.

[0033] According to one embodiment, the embedded device is arranged to communicate directly with the collection SI brick to transmit directly data, events, alerts, etc., via cellular link such as 4G, 5G LTEM, satellite, NblOT, RF, LoRa, etc.

[0034] According to the same embodiment, the devices embedded in the products are arranged so as to be integrated into the communication channel, to the benefit of a cellular link allowing secure connections to the communication channel and encrypted exchanges of data, events, bidirectional information with the information system and the embedded devices.

[0035] This provision benefits, for example, from cellular links with the use of private and / or public APNs depending on the security need, as well as presumably the implementation of a VPN tunnel.

[0036] According to one embodiment, a local and / or remote connection to the device embedded and sealed to the product is only possible by means of an encrypted link and account authenticated by the information system allowing exchanges and visualization of data, information, alerts and events recorded locally and thus knowing its authenticity and the level of integrity of the product.

[0037] According to one embodiment, the information system is arranged so as to update the application of the deployed remote coordinators and embedded devices.

[0038] According to one embodiment, the information system is arranged to ensure the collection of data, information, alarms and events from third-party devices and / or coordinators and / or cellular links via dedicated, encrypted and authenticated links.

[0039] This provision ensures good communication of information and events, guaranteeing their integrity and their non-alteration by any interception or modification by a malicious third party.

[0040] According to one embodiment, the information system is arranged to store and process the data, information, alerts and events collected.

[0041] This provision makes it possible to ensure the supervision and analysis of the operating state of the device as a whole.

[0042] According to one embodiment, the IS system is arranged to guarantee the confidentiality, compliance, invulnerability of each of the data of each of the remote embedded devices and of each of the brand products.

[0043] According to one embodiment, the information system is arranged so as to build and make available visualization interfaces for users.

[0044] This provision makes it possible to make available information on ownership, authenticity, integrity, alerts, etc. by means of a secure account, with an authenticated customer identification giving specific limited access to the products which he owns.

[0045] According to the same embodiment, the information system is arranged to process data and generate product administration screens, visualization of indicators allowing analysis, from all collected and uncollected data, to assist management, such as automatically establishing stock, depletion, batch traceability, location in the storage location, geolocation, transfer, counterfeiting, parallel market, visibility of the entire logistics flow, speed of consumption, breakage, loss, theft, etc.

[0046] This provision is accessible by means of a connection to a dedicated customer area and accessible via a website and / or a dedicated application and allows the administration of a product and / or a plurality of products, in particular the management of their properties by the transfer and acquisition of products, their geolocations, their levels of integrity, etc. Description of the implementation methods

[0047] The present invention will be better understood upon reading the following description, with reference to the accompanying schematic drawings provided by way of illustration and which shall in no way be considered as limiting the scope of the present invention. Brief description of the drawings

[0048] [Fig-1]: represents a synoptic diagram of one embodiment of a chain logistics including a plurality of logistical steps necessary from the sale of the brand's products to the consumption or use of the product by the end consumer.

[0049] [Fig.2]: represents a synoptic diagram of an embodiment detailing an overall system illustrating the different functional modules implemented according to the invention. Context of the invention Life stages of a consumer good

[0050] Fig. 1 illustrates a deliberately simplified standard flow, starting with the manufacture of a product (300), from sub-assemblies (1). Thus, during the manufacturing steps, an embedded module is implemented consisting of a first optional unique identification device (10) mechanically inseparable without physical alteration or malfunction of the product (300), and linked to a second electronic device (20) allowing the environment to be characterized by detecting, measuring, recording surrounding physical quantities and communicating information in a secure, encrypted, signed and bidirectional manner.

[0051] According to this simplified representation, each product (300) advantageously equipped with devices (10) and (20) becomes a product of the brand (330). This communicating product (330) is capable of transmitting information as soon as it is switched on.

[0052] Advantageously, the commissioning of devices (10) and (20) can be effective from the final production phase but also at different stages (3; 4; 5) of the distribution chain.

[0053] The product (330), from the moment it is put into operation, is capable of securely transmitting information about its environment by measuring physical quantities and derived quantities such as temperature, humidity, electromagnetic spectrum, brightness, vibrations, acceleration, acoustics, etc.

[0054] Advantageously the embedded module (20) is arranged so as to measure all the physical and derived quantities of the product (330) and surroundings necessary and useful to characterize the aging, improvement, maturity, degradation, intrinsic state of the product (330).

[0055] Advantageously the characterization of the state of the product (330) is optimized according to the product considered and its intrinsic fragility.

[0056] Advantageously the sampling frequency and the quantity of physical and derived quantities taken into account by the embedded module (20) of the product (330) are adapted to determine the intrinsic state of the product, since the commissioning of the embedded module (20) of the product (330).

[0057] Advantageously, the product (330) equipped with the embedded module (20) is capable of recording in its own internal memory, according to the defined sampling frequency, all the measurement data of the physical quantities of the environment used to characterize the state of the product since it has been put into operation.

[0058] Throughout the logistics chain described, in particular the steps (2), (3), (4), (5) but also during the intermediate phases of physical transfers of the products (330), i.e. between the steps (2), (3), (4), (5) and throughout their life in step (5) with the customers (200); the customers (200) who are authenticated by at least one SI module (100) equipped with secure connections to their appropriate and valid accounts, can then connect locally to the embedded devices (20) of each of the products (330) to obtain the information contained in the embedded devices (20) since their commissioning, to know the intrinsic states of each of the products (330).

[0059] At each stage (2; 3; 4; 5) of the supply chain, the module (20) is capable of communicating with a communications coordinating device (30) in charge of managing the collection of information and coordinating transmissions.

[0060] Advantageously and by way of example, coordinating devices (30) are present and judiciously arranged within manufacturing units (2), distribution platforms (3) and sales centers or points of sale (4), and potentially customer facilities (5).

[0061] Advantageously, a coordination device (30) can be a specific module enabling long-distance communication with the products (330), according to various technologies such as Bluetooth Low Energy (BLE), WiFi, LoRa, LoRaWAN, Zigbee, Matter, etc.

[0062] Advantageously the coordinating devices (30) are arranged to connect to the GSM, 4G, 5G, LTEM, Nb-IOT, Internet, etc. network to communicate securely with at least one collection SI device (40).

[0063] Advantageously, communications with the coordinating devices (30) are possible by means of third-party user terminals such as smartphones, tablets, computers on which a specific application is installed and having obtained customer consent, allowing secure administration of the coordinating device (30), collection of its intrinsic location information, operating states, etc. and viewing, collecting information, administering (software update, etc.) the communicating products (330) in its vicinity and with which the coordinator communicates.

[0064] Advantageously, communications with the products (330) are possible by means of third-party user terminals such as smartphones, tablets, computers on which a specific application is installed and which has obtained customer consent, allowing the information from the communicating products (330) to be collected securely and transmitted to the SI device (40).

[0065] Advantageously, the infrastructure thus described is compatible with the network optimization method such as "edge computing".

[0066] This operating principle allows the device (500) to be supplied with data and information from the communicating products (330) according to several possible logistical flows, namely and by way of example: A) At each stage of the logistical chain, B) In the transfer phases between logistical stages, C) On requests from approved customers, authenticated by an active account.

[0067] Advantageously, the device (500) can be constructed according to a blockchain operation in which the communicating products (330), having a unique identifier, declare and write their own authenticated and encrypted data and information. Consensus validation is verified through the information arriving from the communicating products (330) via the various possible flows. Consultation of the information contained in the databases is possible after authentication validated by the SI device (100).

[0068] An authenticated client (200) must follow a protocol beginning with a personal invitation assigning him specific access rights according to his need. Once authenticated, the customer (200) will be able to become an acquirer, seller, consumer of a product (330) whose information will be written in blockchain.

[0069] Advantageously, the stages of the manufacturing supply chain (2), distribution platforms (3) and centers or points of sale (4), and product customers (5) have specific access linked to their respective roles within the supply chain granting them a right to read and write certain information.

[0070] The infrastructure (500) adopts a self-declared dynamic operation of data and information from the communicating products (330) which naturally feeds the entire device.

[0071] Advantageously, the infrastructure (500) is adapted to blockchain technology with dynamic and automatic operation without the need for human action.

[0072] Advantageously the infrastructure (500) provides the guarantee of a high completeness of data and information concerning the communicating products (330), providing in addition to the authenticity guaranteed by current blockchain devices, a guarantee of the integrity of the product by access to information on the environmental, usage, consumption conditions supported and acting on the intrinsic state of the product (330).

[0073] According to an embodiment illustrated in [Fig. 2], the invention relates, in a general and without limitation or exhaustive sense, to a comprehensive infrastructure (500) that is secure and encrypted end-to-end using cryptographic keys and signatures, linking together a plurality of devices that can be scaled according to needs and thus forming a dynamic, secure communication chain comprising, in particular, a plurality of information system (IS) processes: - (100) for managing and controlling access to clients (200), - (80) for publishing, disseminating, and visualizing information stored in a database, - (70) for storing, operating, maintaining, and monitoring the ecosystem thus constituted, - (60) for integrating information into a database, - (40) for data collection, - (50) for monitoring, remote management (RMM), operation, and control, and a plurality of remote devices such as: - local communications coordination devices for data collection (30), or third-party devices equipped with a secure application and a valid authenticated customer account (200), - embedded modules integrated into the objects, each consisting of a first specific and unique means (10), mechanically inseparable without physical alteration or malfunction of the object or product, and linked to a second device (20) enabling the characterization of the environment by detecting, measuring, recording surrounding physical quantities and communicating information in a secure, encrypted and bidirectional, characterized in that said specific means (10), unique and mechanically inseparable from the object considered (330), may be optional in an implementation of the invention.

[0074] Advantageously, the device (10) is arranged to provide unique, individualized information, specifically related to the object, intended for the second embedded device (20) arranged in such a way: - to ensure its sovereign functions specifically expected of measuring physical quantities used to characterize the environment in which the object (330) or product is located, - to process, record, store and transmit this unique link information, thereby creating an inalienable link between them in order to guarantee the authentication of the object, - to process and record over time all measurement data, alarms, alerts, operating states, and processed information for characterizing the environment over time, - to communicate information bidirectionally.

[0075] Two-way communication can be achieved using several devices such as: - a communication coordinator device (30) using Bluetooth Low Energy, WiFi, RF, PLC, 4G, 5G, etc.; and / or - after authentication of a customer account (200) by the SI process (100) allowing connection to the communicating embedded devices (20) in order to allow the communication of information with at least one SI device, through compatible third-party devices of customers authenticated by internet connection, 4G, 5G, LTE, LTE-M, LPWA, NB-IoT, LoRaWAN, etc; and / or - directly to at least one SI device, via 4G, 5G, LTE, LTE-M, NB-loT, LoRaWAN, LPWA, etc. connection.

[0076] Advantageously, all connections and communications between all devices are authenticated and encrypted in such a way as to provide optimal security in relation to the sensitivity of the data transmitted.

[0077] Advantageously, the information collected by the coordinating devices (30) and / or collected with a third-party client device (200) equipped with an authenticated and secure account is transmitted to the IS collection process (40) arranged so as to ensure a single writing of each of the data in the database which are made available to the IS device (60) to ensure the verification of the quality of the data entered in the database.

[0078] Advantageously all records of data, information, alerts, events, etc. in the database are unmodifiable and cannot be falsified in any way.

[0079] The SI device (70) is responsible for data storage and performs operation, maintenance, and monitoring functions. These functions are essential to ensure the operational readiness of the entire device (500).

[0080] Advantageously, the SI device (70) is connected to the SI device (50) allowing the coordinating devices (30) to be solicited to obtain their geolocated positions, their event logs, their operating states and potentially additional information from the on-board devices (20) present in their vicinity.

[0081] By these same provisions, updates to the various software of the coordinators, embedded devices are possible.

[0082] This operating principle makes it possible to avoid network overloads in order to obtain an optimal service rate.

[0083] The SI modules (40, 50, 60, 70) operate independently of each other, remaining autonomous in their functionalities and according to the configuration parameters, thus have the ability to diagnose themselves, to interpret, to control the communication modalities, such as automatic restarts in case of failure over a permitted period of time and over which there is less congestion of communications.

Claims

Demands

1. Infrastructure (500) for managing the intrinsic integrity of products (330) throughout their entire lifecycle, comprising: - at least one embedded module (20) with a unique identifier, - a plurality of devices constituting the information system (IS), characterized in that said embedded module (20) is arranged to measure the physical quantities and quantities derived from the product (330) and surroundings involved around the product (330) and arranged to communicate to a panel of devices to transmit authenticated information to at least one collection device (40) allowing at least one of the devices of the information system (IS) the storage, processing and dissemination of information in order to demonstrate the state of intrinsic integrity of the products (330).

2. Infrastructure (500) for managing the intrinsic integrity of products (330), according to claim 1, characterized in that the integrity of the products (330) is determined by the authenticated information of the environmental, use, consumption conditions, supported and acting on the intrinsic state of the product (330).

3. Infrastructure (500) for managing the intrinsic integrity of products (330), according to claim 1, characterized in that the information determining the intrinsic integrity of a product (330) is recorded in the internal memory of its embedded module (20) and can be communicated to a third-party user terminal of the customer (200).

4. Infrastructure (500) for managing the intrinsic integrity of products (330), according to claim 1, characterized in that the infrastructure includes communication devices further using at least one coordination device (30) communicating with at least one embedded module (20) and at least one device of the information system (IS).

5. Infrastructure (500) for managing the intrinsic integrity of products (330), according to claim 1, characterized in that the infrastructure includes communication devices further using at least one software embedded on a user terminal communicating with at least one embedded module (20) and at least one device of the information system (IS).

6. Infrastructure (500) for managing the intrinsic integrity of products (330), according to the preceding claims, characterized in that all communications are secured end-to-end by means of, in addition, at least cryptographic keys and signatures.

7. Infrastructure (500) for managing the intrinsic integrity of the products (330), according to claim 1, characterized in that at least one of the storage devices (70) of the information system (IS) is configured to ensure that all database records are unmodifiable, and cannot be falsified in any way.

8. Infrastructure (500) for managing the intrinsic integrity of products (330), according to claim 1, characterized in that only connections of authenticated users to their customer spaces by at least one of the devices of the information system (IS) for managing and controlling authenticated access (100) of users (200) have access to the integrity data of the products (330) via viewing screens.

9. Infrastructure (500) for managing the intrinsic integrity of products (330), according to any one of the preceding claims, is characterized in that it includes display screens arranged to further deliver an individualized representation of information or for a plurality of products (330) concerning their respective integrity and of all information collected, processed and generated over the entire life course of the products (330).