Brand Authentication & AIDC

1. Brand Authentication & AIDC Craig K. Harmon, Chair RFID Experts Group (REG) Clive P. Hohberger, PhD Board Chair, AIM Global Posted at http://www.autoid.org/presentations/presentations.htm

2. AIM Global represents… Leading companies in Automatic Identification and Mobility Technologies, worldwide

3. AIM Global • A global trade association of over 700 members • 35 years of leadership in Automatic Identification and Mobility, including bar code and RFID • Leader in ISO technical standards development • Unbiased • Professional • Innovative

4. AIM’s strategic focus • Standards • Long track record of industry expertise in developing AIM and ISO technical specifications and industry applications guidelines • Advocacy • Congress, government, press, sister associations • Education and Outreach • Chapter Network of Solution Providers • Assisting users in the field

5. AIM Global committees • Board of Directors • Education and Public Policy • Standards Advisory Group • Technical Symbology Committee (TSC) • RFID Experts Group (REG) • U.S. Technical Advisory Group to ISO/IEC JTC 1/SC 31

6. Supply chain security • Requires a secure chain of custody • Requires timely communications between trading partners • Requires uniqueness of items • Products • Product packages • Transport units • Returnable transport items / unit loads • Freight containers • Data entry automation • Improves the speed of data capture • Improves the accuracy of data capture

7. Using AIDC technologiesin brand authentication Authentication requires a secure chain of custody This is provided by • Trusted partner communications • Unique product identification • Near real-time tracking of product movement with continual database update • Combination of TID and UII to reflect secure RFID media • Security spot checks

8. Chain of custody links Final customer Point of purchase Distribution facilities Additional carrier(s) Carrier transit point Carrier Shipping Finished goods inventory Manufacturing

9. What is a secure chain of custody? At each point where the custody of the item changes, capture: • Who Individual Identity card • What Product code Product symbol/tag • Which Unique identity Serialization • When At what time Timestamp • Where Location Unique location L/L/A • Why Authority Shipping instructions • How Conveyance Unique conveyance ID I keep six honest serving-men, (They taught me all I knew); Their names are What and Why and When And How and Where and Who. ~ Rudyard Kipling

10. Trading partner communications • Communication of which serialized items appear in which box on which pallet within which shipment • Identification of the shipping date and time • Identification of the carrier • Identification of the seal (container) • Route plan and ETA • Cargo type

11. Container ID Tag - ISO 10891 Supply Chain TagISO 17363 Electronic Seal ISO 18185 Three container tags, each with a different purpose

12. Chain of Custody Manifest ID Originator Seal ID, etc. Custodian Data 1: Carrier Type, ID, etc. Transport Type, Status, ID, etc. Custodian Type, ID, etc. Container Type, ID, Status, etc. Seal Type, ID, Status, etc. Route Plan & Actual Cargo Type, ID, etc. Custodian Data 2… Custodian Data 3... Custodian Data 4... Custodian Data 4... Recipient Data n… E-seal Event Data 1: Seal ID & Condition Seal Container ID Transport Type & ID Carrier Type & ID Event Type Date, Time, Location Relinquished By Received By Container ID & Condition Manifest ID Data Source IDs Event Data 2... Event Data 3... Event Data 4... Event Data 5... Event Data n... e-seal ORIGINATOR E-reading seal triggers auto-info flow RECIPIENT Operational scenario (page 1 of 2): Cumulative Chain of Custody Data Ancillary Data Primary Event Data

13. QUERY / RESPONSE Manifest ID Originator Seal ID, etc. Custodian Data 1: Carrier Type, ID, etc. Transport Type, Status, ID, etc. Custodian Type, ID, etc. Container Type, ID, Status, etc. Seal Type, ID, Status, etc. Route Plan & Actual Cargo Type, ID, etc. Custodian Data 2… Custodian Data 3... Custodian Data 4... Custodian Data 4... Recipient Data n… Event Data 1: Seal ID & Condition Seal Container ID Transport Type & ID Carrier Type & ID Event Type Date, Time, Location Relinquished By Received By Container ID & Condition Manifest ID Data Source IDs Event Data 2... Event Data 3... Event Data 4... Event Data 5... Event Data n... Gate: access, entrance, exit Customs Weigh Station Enforcement Operational scenario (page 2 of 2): DATA USERS Cumulative Chain of Custody Data Ancillary Data Primary Event Data ORIGINATOR RECIPIENT

14. Supported byAIDC technologies • Two-dimensional symbols (2D) • Radio frequency identification (RFID) PDF417 Data Matrix UHF tag HF tag UHF tag

15. PDF417 Data Matrix Two-dimensional Symbols • Benefits • Low-cost • Can be serialized • Can be encrypted • Readers off the shelf • Drawbacks • Can be photocopied • User programs all data

16. The Layers of Logistic Units (Optically Readable Media - ORM) Layer 5ISO TC 204 (None)ISO TC 8 (None)AIAG B-15 Movement Vehicle (truck, airplane, ship, train) Layer 4ISO 6346 (OCR)(Freight containers) Container (e.g., 40 foot Sea Container) Layer 3ISO 15394(Returnable transport items)ANS MH10.8.1GS1 Gen Spec (GRAI) Unit Load “Pallet” Unit Load “Pallet” Layer 2 ISO 15394(Transport units)ANS MH10.8.1GS1 Gen Spec (SSCC) Transport Unit Transport Unit Transport Unit Transport Unit Layer 1 ISO 22742(Product packaging)ANS MH10.8.6GS1 Gen Spec (GTIN) Pkg Pkg Pkg Pkg Pkg Pkg Pkg Pkg Layer 0 ISO 28219(Product tagging)ANS MH10.8.7GS1 Gen Spec (GTIN) Item Item Item Item Item Item Item Item Item Item Item Item Item Item Item Item

17. RFID tags • Benefits • Tag ID (serialized) can programmed by tag manufacturer • Counterfeiter difficulty in duplicating Tag ID • Unique Item Identifier (UII) programmed by item manufacturer • If UII and TID are both read and compared with the received manifest, added complexity occurs to introduce counterfeits • Data can be encrypted • Drawbacks • Unsure of which tag is read • Moderate cost (≈US$ 0.21) HF tag UHF tag

18. ISO/IEC 18000 - 6c & -3m3Tag Memory

19. The Layers of Logistic Units (Optically Readable Media - ORM) Layer 5ISO TC 204 (None)ISO TC 8 (None)AIAG B-15 Movement Vehicle (truck, airplane, ship, train) Layer 4ISO 6346 (OCR)(Freight containers) Container (e.g., 40 foot Sea Container) Layer 3ISO 15394(Returnable transport items)ANS MH10.8.1GS1 Gen Spec (GRAI) Unit Load “Pallet” Unit Load “Pallet” Layer 2 ISO 15394(Transport units)ANS MH10.8.1GS1 Gen Spec (SSCC) Transport Unit Transport Unit Transport Unit Transport Unit Layer 1 ISO 22742(Product packaging)ANS MH10.8.6GS1 Gen Spec (GTIN) Pkg Pkg Pkg Pkg Pkg Pkg Pkg Pkg Layer 0 ISO 28219(Product tagging)ANS MH10.8.7GS1 Gen Spec (GTIN) Item Item Item Item Item Item Item Item Item Item Item Item Item Item Item Item

20. RFID for Authentication • Zebra card printer color ribbon application • Each uses a 13.56 MHz ring transponder • Factory programmed tag ID (TID) • Zebra authentication code related to TID is programmed and stored at the factory • TID and stored auth. code used as a pair • When put in printer, a security chip uses the TID to recompute the authentication code, verify the one stored on the chip has the same value to authenticate ribbon • Counterfeiter would have to clone RFID chip, >$1m cost

21. Direct Part Marking • Direct part marking is the future of product and component unique item identification (UII) • Based around use of Data Matrix an ISO standard 2D error correcting symbols • First major applications: • US DoD military UID program (all safety-related products, weapons and objects costing >$ 5000) • Aerospace components • Goal is tracking and anti-counterfeiting support

22. Direct Part Marking Stds • AIM DPM-1-2006 - Direct Part Mark (DPM) Quality Guideline approved 12/2006, in process to become ISO/IEC 29158 • MIL-STD-130N, Identification Marking of U.S. Military Property - Approved 12/2007 • AIAG B-4, Part Identification and Tracking Application Standard - Under revision to update Direct Part Marking and RFID

23. NASA Direct Part Marking Project Presentation by Fred Schramm Marked Parts Go Wherever… or not… Humans Go

24. NASA Direct Part Marking Project A Solution from Challenger • Permanent marking methods unfriendly to stress sensitive parts, like turbine blades and landing gear • Post Challenger “Return to Flight” activities involved studies on information management • Space Shuttle Main Engine (SSME) evaluated direct marking of bar codes and matrix codes on parts----matrix codes were recommended for SSME AIT • NASA developed Data Matrix symbol marking methods for improved configuration management • NASA developed technology to avoid adverse effects on flight program

25. NASA Direct Part Marking Project A Database of Piece Parts • NASA’s Primary Emphasis….Item-Level Traceability….Piece Parts • Know the Pedigree……Track the Piece……Age is measured by operating seconds • NASA Marking Requirements • Provide no detrimental affects on the performance, reliability or durability of the product • Withstand all conditions and environments to which the product will be exposed • Remain readable throughout the normal life of product • A mark is a“Controlled Defect” • An engineered mark is a“FLAWLESS IMPERFECTION”

26. NASA Direct Part Marking Standard 6002 and Handbook 6003 Intended Results • Configuration management as easy as checking out at the grocery store • Identification on the smallest part—some only a matrix symbol • Use of Standard 6002 not mandatory—program impact sensitivity • Supplement to MIL STD 130 (some methods not suitable for machine readable symbols) • Technical detail where possible • Recommends good practices--prohibits certain bad practices • Sends user to Engineering for piece-by-piece analysis • Handbook 6003 said to be first methods cookbook compiled • Bring management attention to operations • A “sleeper” safety issue addressed 10x10 matrix symbol on the head of a straight pin

27. Item-Level Formats Derived from Container Level Info Piece Parts Level Business Solution Container Level Business Solution 10x10 matrix symbol on the side of a turbine blade Selected Label Information 14 x 14 Matrix 16 Characters Supplier Code + Serial Number 04089875*0000005 All Label Information 24 x 24 Matrix

28. Automotive Part and NASA Part Marked with Piece Part Identifiers Fuel Injector Space Shuttle Main Engine High Pressure Fuel Turbopump Turbine Blade

29. International Space Station Materials Experiment M-ISS-E

30. NASA Direct Part Marking Project A Legacy System NASA has been direct part marking since it was established Item-level traceability inherent to the aerospace culture Catastrophic failures start with piece part failure The legacy system is overwhelming so just add the matrix NASA has marked parts scattered all over our solar system

31. Conclusions • Authentication systems require chain of custody tracking to ensure pedigree • Unique identification of the product, package, shipping unit and shipping container is required to enable chain of custody tracking • AIDC technologies such as bar codes and RFID support unique identification and enable automatic real time data capture • Direct marking of items with unique IDs is supported by emerging AIDC standards and technology

32. ???

33. Thank you!!! Craig K. Harmon, President & CEO Q.E.D. Systems 3963 Highlands Lane, SE Cedar Rapids, IA 52403-2140 USA (V): +1 3152403-21409/364-0212 (M): +1 319/533-8092 (E): craig.harmon@qed.org (U): http://www.autoid.org Clive Hohberger, Vice President Zebra Technologies Corporation 333 Corporate Woods Parkway Vernon Hills, IL 60061-3109 (V): +1 847/793-2740 (M): +1 847/910-8794 (E): chohberger@zebra. (U): http://www.zebra.com