Classifications

• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/12—Applying verification of the received information
• • Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
  • Y10—TECHNICAL SUBJECTS COVERED BY FORMER USPC
  • Y10S—TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
  • Y10S707/00—Data processing: database and file management or data structures
  • Y10S707/99931—Database or file accessing
  • Y10S707/99933—Query processing, i.e. searching
• • Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
  • Y10—TECHNICAL SUBJECTS COVERED BY FORMER USPC
  • Y10S—TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
  • Y10S707/00—Data processing: database and file management or data structures
  • Y10S707/99931—Database or file accessing
  • Y10S707/99939—Privileged access

Definitions

• the standards ISO 9000 and ISO 9001 are known in particular, which define certain quality-assuring operational processes.
• AS 9000 standard defines procedures to ensure flight safety.
• the HACCP standard which contains regulations for the production, storage and transport of foodstuffs, concerns a completely different area.
• test marks are not only awarded for products, but also for systems, services, manufacturing and organizational processes. Because of the large number of domestic and foreign certification marks, it is almost impossible for the end user to assign the relevant meaning to a certification mark attached to a product. Even for dealers, buyers and warehouse staff, the importance of the individual test marks used in the trade in goods and services can hardly be overlooked.
• Test marks are often used, which are similar to common test marks and mislead traffic.
• This object of the invention is achieved by a method for querying certification information according to claim 1 and by a system for providing certification information according to claim 24.
• the method according to the invention enables certification information to be queried on the basis of an organizational process for a product, a system, a service etc. awarded test mark over the Internet.
• the test mark is provided with a specific identification number.
• a first step the user enters the identification number via his web browser into an input field on a website.
• the address of the website is given on the test mark.
• the identification number thus recorded is then transmitted from the user's web browser via the Internet to a web server structure of the provider.
• a database search query based on the identification number is formulated by the web server structure and transmitted to a web database that is coupled to the web server structure.
• the certification information associated with the identification number is read from the web database and then transmitted from the provider's web server structure via the Internet to the user's web browser.
• test mark used for the method according to the invention is self-explanatory.
• the combination "web address + identification number” can be understood and used worldwide without additional explanations and instructions being required.
• the test mark can be used and understood worldwide without the need for translations ("world symbol").
• the certifying institute's worldwide uniform appearance of the mark creates a high level of awareness and recognition value for the test mark. So far, the has prevented
• a user can query from any Internet-compatible computer which one Properties of the certified product, system, service etc. were checked during certification and which methods were used.
• a user who has a specific product can obtain more detailed information on the most varied properties of his product by means of an Internet query.
• the specific product and certification information can be called up around the clock from anywhere in the world within a short time and is therefore superior to paper documentation.
• Another advantage of the method according to the invention for retrieving certification information is that the user (unlike in the case of paper documentation) always receives current information.
• the user can in particular check whether a certificate has actually been issued for a specific product, system, etc. (proof of legitimation) and whether the manufacturer's information on the properties of the product match the certified test results. As a result, fake test marks can be noticed more often than before.
• the identification number attached to the test mark serves as the key to all the services provided by the certifying institution and gives them in a compressed form
• the central storage of product and certification data creates a powerful trading database that can be used as an orientation for professional buyers of all distribution levels.
• a "virtual market" of comparable products and services is created, which can be accessed using suitable search tools.
• the product database gradually created in the manner described can also be obtained from official bodies (TGA, ZLG, ⁇ co t. P 1 P 1 oo L ⁇ o L ⁇
• the database search query is transmitted and the certification information associated with the identification number is read out using Java beans.
• Java beans are self-contained micro programs in the Java programming language, each of which can perform a specific task. Java beans can be used across platforms. If an additional function is required, this function can be integrated into the existing software using an additional Java bean. In this respect, Java beans allow great flexibility.
• test mark is advantageously affixed to the product or its packaging. This can be done by printing, stamping, embossing, etc. In the case of garments, the test mark can be attached to patches and labels. If the test seal is applied directly to the goods, this has the advantage that every owner of the goods can use the test seal to query the product properties and the meaning of the test seal over the Internet. For this he only needs the goods themselves; there is no need for any additional documentation.
• test mark it is advantageous to affix the test mark in a catalog, in a document, in a user manual or in advertising materials. Placing the test mark in a catalog in which the goods are described enables potential customers to check the information given in the catalog. It would also be conceivable for a manufacturer to include a document with his product in which he explains the meaning of the test mark and on which the test mark is printed. For example, the test seal could be printed on a guarantee card included with the goods.
• the test mark according to the invention is also shown in a small representation easily understandable and therefore suitable to be used in business papers and advertisements to accompany the product. The test mark can, for example, be copied into an advertisement that appears in a print medium and contains an image of the product. This enables a prospective buyer to query the properties of the product over the Internet.
• the test mark can be a PSQ (Product Safety Quality) test mark.
• the test mark can be a TQM (Total Quality Management) test mark.
• TQM Total Quality Management
• a further advantageous embodiment of the invention provides for the authenticity of the certification information transmitted to the user to be guaranteed by means of a digital watermark. Digital watermarks are difficult to fake. If the certification pages retrieved from the Internet have the digital watermark of the TÜV, the user can be sure that they have received the authentic test results.
• a user group "dealer” can advantageously be defined, the users of which are assigned product-related search functions in particular. In this way, users of the "Dealer” group have the opportunity to carry out a detailed comparison between different products in a product group and to compare all the certification data available for these products.
• Certification information he is interested in (user-related content management). For example, the user can have the new entries in certain product groups queried by default in order to be able to follow the market development in this way.
• An advantageous embodiment of the invention provides that the web database receives the certification information intended for the public from a master database by means of data transfer, the certification database storing more extensive, partially not intended for the public certification information. On > L co ro P 1 P "
• the notification of the responsible certifier sets a time limit for updating the certification information in the web database in order to keep the web database up to date. Otherwise, the web database would contain more and more incorrect information and thus become worthless.
• a further advantageous embodiment of the invention provides for a session ID to be assigned for each connection of a user to the server structure, the response to queries being slowed down or stopped when predetermined access frequencies or predetermined access times are exceeded.
• the purpose of this measure is to prevent the web database from being read out completely.
• the identification number is transmitted from the user to the web server structure and the certification information is transmitted from the web server structure to the user in a radio-assisted manner in accordance with the WAP standard.
• This allows a user to access the web databases using a WAP-enabled cell phone or a WAP-enabled Personal Digital Assistant (PDA).
• PDA Personal Digital Assistant
• a consumer sees a product with a TÜV test seal when shopping, he can, if he has a WAP-compatible cell phone, use the WAP interface offered by TUN to request information about this product and the test seal issued. To do this, he establishes the connection to the TÜV with his cell phone and types the identification number given on the test seal into his cell phone.
• CD 0 3 Hi ⁇ tr HS D. 3 3 ⁇ N 3 ⁇ Hi • P- HS CO P- ⁇ Hi ⁇ tr
• Hi ⁇ 3 LQ et 3 ⁇ rt X 3 TJ Hj tr CQ 3 3 ⁇
• FIG. 1A shows a test mark according to the invention, which contains the necessary information for access to a product, system or service certificate;
• 1B shows a test mark according to the invention which enables access to certification data for an ISO 9001 certification
• FIG. 2 is an overview picture which shows the different possibilities of access to the certification databases
• FIG. 3 is a block diagram of the system architecture used to implement the invention.
• 1A shows the test mark according to the invention, which is awarded by the respective test institute (here the TÜV Rheinland) after successful certification.
• the name of the test institute that carried out the certification is clearly visible in the middle.
• the Internet address 1 of the TÜV homepage "www.tuv.com” is given at the top of the test seal. According to the invention, this Internet address 1 can be used to access a website set up by the test institute, via which further information on the certification can be found have it determined.
• a 10-digit identification number 2 is attached to the lower edge of the test seal.
• a user can access the TÜV homepage via any PC that is equipped with a modem and an Internet browser, and this identification number ⁇ J to t P "P 1
• HS 3 P- X 3 3 Di 3 P- ⁇ X 3 P- ⁇ Hi P> ⁇ tr co ⁇ «• ⁇ Hi ⁇ ⁇ ⁇ 3 Q ⁇ Hi 0 3 ⁇ OX tr DJ LQ X 3 3 N D. HS 3 TJ o ⁇ ! 3 3 CQ ⁇ Hi 3 Hj
• N ⁇ ⁇ N tr 3 M 0 ⁇
• the identification number shows in which country and by whom the certificate was issued. At first glance, however, this identification number cannot be found, and this contributes to the counterfeit security of the test marks.
• an end user can view all certificates issued for this product as well as all certificates of the manufacturer. It is not necessary for the end user to legitimize himself to the system (for example by entering a user ID and / or a password). For the users of the "end user" user group, the present system implementation basically no registration was carried out. This simplifies and speeds up system access for this user group.
• the "manufacturer” and “dealer” user groups are also defined in the present implementation. Users of these two user groups must authenticate themselves to the system at the beginning of the query by entering a user ID and a password. A new user of the "Manufacturer” or “Dealer” user groups receives his user ID and password during the registration process when he logs in for the first time.
• certification information and product-related additional information creates a powerful product database.
• registered searchers from the "Manufacturer" and “Dealer” groups are provided with convenient search tools. These search tools make it possible to formulate search queries regarding product groups, product types, manufacturers, etc. In addition, a full-text search is possible in the entire database.
• the users of the "Manufacturer” and “Dealer” groups have access to all the functionalities that are available to non-registered users of the "End user” group.
• Registered users are also offered the opportunity to participate in user-related content management.
• the user determines which product and certification information he is particularly interested in.
• a personalized data model is then stored together with the user ID of the registered user. Each time you log in, the information relevant to this user is individually queried and compiled according to the data model.
• the product database gradually created in the manner described can also be used by official bodies (TGA, ZLG, OSHA, ZVI etc.). In this way, these offices gain quick and uncomplicated access to information that is relevant to the pursuit of counterfeiting, product piracy and unauthorized use of the mark. ) to t P 1
• TJ Hi CQ TJ 3 H ⁇ Di ⁇ CQ Hj ⁇ ⁇ . 3 N LQ ⁇ Hi ' ⁇ ) D. 0 ⁇ ;
• Another Java bean contained in the bean container 25 is used to carry out a so-called "session tracking". This Java bean counts how many accesses to the web databases 35, 36 are made by a specific user in the course of a session. If the number If the access exceeds a certain limit, the answering of queries from this user can be slowed down, the user can also be sent a corresponding warning. In the event that further query attempts are made, the relevant access session can be ended after a predetermined period of time (time Out Feature) These measures prevent third parties from pulling a copy of the certification database from repeated search queries, thus preventing the database from being completely read out.
• a number of basic services 28 are implemented on the web application server 22 and are required for the data exchange between the web application server 22 and database servers.
• the "Naming and Directory” service 29 manages user profiles for the various registered users. For each user, a personalized data model can be used to determine which data should be queried and displayed by default for the user concerned. In the event of an interrupted or disturbed data connection, the “Persistence” service 30 enables the data transmission to be continued exactly at the point at which the disturbance, the crash, etc. occurred.
• the "Security” service 31 monitors the identifiers of the various servers involved in the data exchange and interrupts the data traffic in the event of unauthorized access. All transactions taking place between the different servers are recorded by the "Transaction” service 32. Based on this data, the current degree of utilization of the individual machines can be determined. The various user inquiries should, if possible, be distributed to the various servers in a cluster in such a way that the machines are utilized to the greatest possible extent. This task is performed by the "workload” service 33.
• CORBA Common Object Request Broker Architecture
• the CORBA backbone 27 enables a cross-platform exchange of data and especially objects between the connected systems.
• the Java bean provided for this purpose must be called up, which transmits a corresponding SQL query to the web database 35 via the CORBA backbone 27 and the JDBC interface 34.
• JDBC stands for Java DataBase Connectivity, the common standard for connecting a database server to a Java environment.
• the certification information associated with the identification number is then transmitted in the opposite direction, that is to say via the JDBC interface 34 and the CORBA backbone 27 to the middleware 23 and from there via the TCP / IP connection 21 to the web gateway 18.
• the certification information is built into suitable websites; these websites are then transmitted to the user's web browser 16 via the internet connection 17.
• the CORBA backbone 27 can also be used to transmit other product and manufacturer information from other sources to the middleware 23 and from there to the user's web browser 16. It is particularly advantageous that CORBA is a cross-platform system.
• FIG. 3 shows how a COM / environment 38 implemented in the Microsoft COM + standard can be connected to the CORBA backbone 27 via a COM / CORBA bridge 37.
• An XML loader 39 can also be coupled to the CORBA backbone 27, for example.
• Such an XML loader enables the integration of documents which are written in the page description language XML (Extensible Markup Language).
• CORBA backbone 27 are connected to the web application server 22.
• FIG. 4 shows how the data exchange takes place between the publicly accessible part of the system and the servers of the TÜV-internal intranet.
• the TÜV must make a selection of which of the internally available certification data should be made available to the public. This process is known as content administration.
• Certification data is recorded at 13 different locations worldwide and each is managed in a database on a local server 41, 42, 43.
• files are created by each of the local servers 41, 42, 43 which contain all changes to the database which have taken place from a certain point in time.
• Such files with the updates of the database are available to everyone LO ⁇ to to P 1 P 1
• the system automatically determines whether a change in the master database affects the database in the web database. If a data record in the web database needs to be changed or added, the certifier responsible for the certificate will be notified by email. With the notification, the certifier is given a deadline for processing the data record. If the set deadline passes without result, the next person in a notification chain is informed that the web database must be updated.
• Those data records from the master database 46 that are to be transferred to the web database 56 can be transferred from the master database 46 via the JDBC interface 45 and the administration server 44 to the web application server 54 and from there via the JDBC interface 55 to the web database 56 become (57).
• the administration server 44 and the master database 46 must always be decoupled from the Internet. Even during data transfer 57, access to must be prevented via the Internet the administration server 44 and the master database 46 take place. Therefore, the web application server 54 is disconnected from the internet 50 during the data transfer 57.
• the web application server is implemented as a cluster of servers, it is sufficient to decouple those web servers and database servers from the Internet via which the data transfer 57 is carried out.
• the remaining web servers can also remain connected to the Internet 50 during data transfer 57 and can answer user queries.

Landscapes

• Engineering & Computer Science (AREA)
• Computer Security & Cryptography (AREA)
• Computer Hardware Design (AREA)
• Computing Systems (AREA)
• General Engineering & Computer Science (AREA)
• Computer Networks & Wireless Communication (AREA)
• Signal Processing (AREA)
• Management, Administration, Business Operations System, And Electronic Commerce (AREA)

Applications Claiming Priority (1)

Publications (1)

Family

ID=8164286

Family Applications (1)

Country Status (3)

Families Citing this family (24)

Citations (2)

Family Cites Families (6)

• 2001
  • 2001-02-11 EP EP01909739A patent/EP1358590A1/fr not_active Withdrawn
  • 2001-02-11 WO PCT/EP2001/001532 patent/WO2002065357A2/fr active Application Filing
  • 2001-08-30 US US09/941,549 patent/US6850913B2/en not_active Expired - Lifetime

Patent Citations (2)

Also Published As

Similar Documents

Legal Events