Abstract:
A secure electronic procurement system allows a user (e.g. pharmacist) to order and confirm receipt electronically over a network (e.g. Internet) goods normally subject to a verifiable chain of custody (e.g. narcotics, controlled drugs and substances, other public distribution regulated goods or valuables). The system includes hardware and software for a user device, a secure procurement system, a supplier system and a certificate authority to authenticate communications, particularly user orders and confirmed receipts. The supplier system may be a legacy EDI based order system. Copies of electronic orders, shipping notices and receipts confirming shipment received together with digital signatures are securely stored for audit trail purposes. Business rules within the secure procurement system operate to ensure proper adherence to the chain of custody.

Description:
CROSS REFERENCE TO A RELATED APPLICATION  
       [0001]    This application claims the benefit of U.S. Provisional Application No. 60/174,510 filed Jan. 5, 2000. 
     
    
     
       TECHNICAL FIELD  
         [0002]    The invention relates to electronic commerce (e-commerce) and a system and method for the secure electronic procurement of goods or services particularly narcotics, controlled drugs and substances or other goods generally subject to a “chain of custody” for ordering and delivering.  
         BACKGROUND OF THE INVENTION  
         [0003]    Definition of E-commerce  
           [0004]    E-commerce is the electronic exchange of commercial information between business to business (B2B) or between business to customers (B2C). The exchange includes commercial information sent via email and websites, and also information sent through traditional communication channels such as Value Added Networks (VANs).  
           [0005]    Limitations of Traditional E-commerce: VAN-based EDI  
           [0006]    Electronic Data Interchange (EDI) refers to the exchange of electronic business data, such as purchase orders and invoices, between computer applications. A goal of the exchange is to eliminate paper and human intervention. EDI requires a network connection between two trading partners exchanging business documentation. Traditionally, this connection has required a dedicated leased line or a dialup connection to a VAN. Through standardization, EDI allows all suppliers and their trading partners to link their computing infrastructures without worrying about the differences in their respective organizations and technology system architectures.  
           [0007]    EDI has resulted in significant competitive advantages and benefits to its users, including lower costs, better responsiveness to customers, improved distribution and production channel management, reduced cycle times, better access to transaction status and reduced payment cycles. However, EDI exists only in situations where trading partners send and receive large numbers of EDI documents on a regular basis, with enough volume to justify the substantial costs associated with establishing a dedicated VAN system. Such large users have been prevented from doing business electronically with smaller companies that cannot afford EDI. For many small and mid-sized companies, the necessary investments in EDI hardware and software and monthly VAN connection fees make EDI cost-prohibitive.  
           [0008]    Limitations of Manual Ordering Processes  
           [0009]    To overcome these shortcomings, large and small organizations are being forced to utilize manual ordering processes for some of their customers, in a manner very similar to the way smaller firms conduct business. The average cost to process a document in a manual environment ranges anywhere from U.S.$50 to U.S.$75. These costs include labor, materials and estimates for the inherent flaws that exist in manual ordering processes such as:  
           [0010]    Possibility of losing the order itself;  
           [0011]    Possibility of re-keying errors;  
           [0012]    Delivery delays due to slower processes;  
           [0013]    Inability of customer to check order status;  
           [0014]    Inability of customer to check shipment accuracy; and  
           [0015]    Inability of customer at time of order to determine price changes, obsolete inventory status and product availability.  
           [0016]    Limitations of HTML-based Internet Ordering Processes  
           [0017]    Much of the information required for e-commerce is already resident on the Web as it is by far the largest repository of information in the world. However, much of this information is maintained in hypertext mark-up language, or HTML documents.  
           [0018]    HTML, due to its inherent ability to hyperlink, is the essential technology that launched the Web. Although HTML has many advantages for the user, it also has many limitations, the most significant of these being that there is no standard mechanism to describe data maintained in HTML. Consequently, users or computer applications do not have a structured way to query and manipulate the data contained in HTML documents.  
           [0019]    Orders may be received electronically via the Internet but because they are received as “structure-less” documents, orders must be manually re-keyed into legacy systems for further processing and fulfillment.  
           [0020]    Eliminating the E-commerce Bottleneck  
           [0021]    Today, EDI is primarily used by large organizations dealing with other large organizations. Any business entity that wishes to conduct business with smaller clients must utilize other ordering methods. The Internet does not yet represent the perfect solution because it does not enable orders to be automatically processed by legacy systems due to the shortcomings of HTML.  
           [0022]    Procuring Goods Requiring a Verifiable Chain of Custody  
           [0023]    In contrast to many goods, the possession and distribution of narcotics, controlled drugs and substances are controlled in the public interest typically to prevent misuse or abuse. The purchase and sale of such goods among, for example, manufacturer, licensed dealer, value-added supplier and pharmacist or other qualified practitioner is typically regulated to facilitate secure ordering and accountability. In Canada, the industry is federally controlled by the Minister of National Health and the Health Protection Branch of Health Canada. In the United States, federal regulation is primarily the responsibility of the Drug Enforcement Agency (DEA).  
           [0024]    The central issue with respect to an ordering system for narcotics, controlled drugs and substances is the prevention of diversion and loss. The historical regulatory framework for ordering and delivering of such substances mandates a “chain of custody” approach in a paper environment for authentication and verification. At all times, the controlled goods are considered to be the responsibility of the qualified person who has last signed for the goods at the time of a change in custody. For example, in order that a licensed dealer may fill an order for a narcotic, controlled drug or controlled substance from a pharmacist, it is the responsibility of the licensed dealer to authenticate the person to whom the goods are being transferred. The licensed dealer must also verify that the person has ordered the particular goods in the particular quantity to be transferred. It is further a necessity for the licensed dealer to ensure, upon delivery, that the person making the order acknowledges its receipt in a timely manner.  
           [0025]    By means of signed and dated written orders and receipts, as well as record retention, licensed dealers may supply and pharmacists and other practitioners may receive narcotics, controlled drugs and substances.  
           [0026]    It is desirable to facilitate electronic procurement of such goods over a communications network such as the Internet to take advantage of efficiencies achieved with e-commerce, particularly EDI systems, as previously discussed. A proposed electronic system must provide levels of assurance at least as effective as that offered by current primarily paper-based systems. Such an electronic ordering system should comply with any applicable regulatory requirements.  
           [0027]    Ideally, an electronic ordering system must provide means to authenticate and verify orders and be limited to use for electronic ordering only by qualified persons (e.g. pharmacists). The electronic ordering system must provide an equivalent to a “signed receipt” confirming receipt of the drugs ordered and the system must be able to produce reports for audit purposes.  
           [0028]    A threat risk assessment of the electronic system is also recommended. The assessment may be carried out in accordance with  Guide to Threat Risk Assessment for Information Technology, November  1994 from the Royal Canadian Mounted Police. The Threat Risk Assessment must address the following areas:  
           [0029]    User Security:  
           [0030]    Due diligence process to validate identity of pharmacist;  
           [0031]    Authentication of the ownership of digital certificate;  
           [0032]    Safeguarding the validity of personal identification codes;  
           [0033]    Safeguard against loss of personal identification codes.  
           [0034]    System Security:  
           [0035]    Protection of private encryption keys;  
           [0036]    Safeguards against tampering with (ship-to address, amounts shipped);  
           [0037]    Confirmation of receipt of order.  
           [0038]    Database Security:  
           [0039]    Security of internal system database against tampering.  
           [0040]    Encryption and Backup:  
           [0041]    Methods used and reliability;  
           [0042]    Certification Authority.  
           [0043]    Physical Security:  
           [0044]    Web Server—source code security and redundancy.  
           [0045]    Network (Internet) Security:  
           [0046]    Safeguards against unauthorized user access.  
           [0047]    One example of an e-commerce system for processing business transactions is disclosed in U.S. Pat. No. 5,970,475 for an Electronic Procurement System and Method for Trading Partners issued Oct. 19, 1999 of Barnes et al. The patent discloses a plurality of users within a trading organization to procure goods or services from predetermined suppliers. Each user is assigned a level of authorization by an administrator at the organization that limits the nature of the goods/services that may be ordered. The system also allows for automated payments from a financial institution upon delivery. The system does not address the particular requirements for procuring goods requiring a chain of custody such as narcotics or other controlled substances. There is no concern in Barnes et al. for diversion or loss of goods ordered.  
         SUMMARY OF THE INVENTION  
         [0048]    It is an object of the invention to provide a secure electronic procurement system and method providing a verifiable chain of custody.  
           [0049]    In accordance with an embodiment of the invention there is provided an electronic commerce system for procuring goods/services subject to a chain of custody when transferred from a supplier to a user. The system comprises three main components, namely a user system, a secure procurement system and a supplier system. The user system for procuring the goods by the user comprises means for electronically receiving and transmitting user private procurement transactions; and security means operable only by the user for authenticating electronically the user private procurement transactions (comprising orders and confirmations of receipt) in a non-repudiatable manner to the secure procurement processor.  
           [0050]    The supplier system for supplying the goods for procuring by the user comprises means for electronically receiving authenticated user private procurement transactions and means for transmitting supplier private procurement transactions. The supplier private procurement transactions comprise a notification of provision of goods/services.  
           [0051]    The secure procurement system comprises user system communication means for transmitting and receiving the user private procurement transactions with the user system; supplier system communication means for transmitting and receiving the supplier private procurement transactions with the supplier system. Security means are also provided for receiving the authentication of the user private procurement transactions and for authenticating electronically in a non-repudiatable manner the user private procurement transactions (comprising orders and confirmations of receipt) as the secure procurement system&#39;s transactions. Also provided is a database server for storing the authenticated private procurement transactions and for storing a product catalog representing the goods from the supplier available for procuring by a user; and, a procurement transaction processor for processing the private procurement transactions transmitted and received between the user and the supplier.  
           [0052]    Also included in the electronic commerce system, according to the embodiment, is a certificate authority for facilitating the authentication electronically of the user private procurement transactions comprising orders and confirmations of receipt in a non-repudiatable manner; a network connection linking the user system, secure procurement system and certificate authority; and a supplier network connection linking the supplier system and secure procurement system.  
           [0053]    In accordance with the e-commerce system of the present invention, the secure procurement system, in cooperation with the certificate authority, processes and stores orders, notifications, and confirmations of receipt to provide a verifiable chain of custody for goods/service procured by the user.  
           [0054]    In accordance with a further aspect of the invention the procurement transaction processor comprises means for performing business rules analysis using the order, notification or confirmation of receipt; and means for alarming potential instances of diversion or loss of goods/services. The means for performing business rules analysis and means for alarming are preferably configured to: upon receiving a notification of provision of goods/services at the secure procurement system, initiate a timer for a predetermined period of time within which to receive the confirmation of receipt corresponding to the notification; if the timer expires, alarm a potential instance of diversion or loss of goods/services and prevent further orders from the user.  
           [0055]    When the notification of provision includes a count of the quantity of the goods/services provided and the confirmation of receipt includes a count of the quantity of the goods/services received, the means for performing business rules analysis and means for alarming are preferably configured to: upon receiving the confirmation of receipt at the secure procurement system, compare the count from the confirmation of receipt to the count from the corresponding notification and if there is a discrepancy, alarm a potential instance of diversion or loss of goods/services.  
           [0056]    In accordance with an aspect of the invention the user system security means includes a certificate from the certificate authority for authenticating user to the secure procurement system and the secure procurement system security means includes a certificate from the certificate authority for authenticating the secure procurement system to the user.  
           [0057]    Preferably, the certificate authority comprises means for generating encryption/decryption key pairs unique to each user and the secure procurement system to enable encryption/decryption, integrity and authentication of transmitted user private procurement transactions between the user and secure procurement systems. The supplier system includes means for processing user orders and may include means to interface to a legacy supplier order system.  
           [0058]    To further reduce opportunity for diversion or loss, the supplier system includes a database for storing the user&#39;s ship to address for provision of said goods/services to the user. Any user ship to address in the user order is ignored during processing by the supplier system. 
       
    
    
     BRIEF DESCRIPTION OF THE DRAWINGS  
       [0059]    Further features and advantages of the present invention will become apparent from the following detailed description taken in combination with the appended drawings, in which:  
         [0060]    [0060]FIG. 1 is a general schematic representation of the e-commerce system demonstrating the major participants and relationship among them in accordance with an embodiment of the invention;  
         [0061]    [0061]FIG. 2 is a general schematic representation of a user system, secure procurement system and Certificate Authority in accordance with a preferred embodiment of the invention;  
         [0062]    [0062]FIG. 3 is a general schematic representation of a value added supplier (VAS) supplier system in accordance with a preferred embodiment of the invention;  
         [0063]    [0063]FIG. 4 is a flowchart demonstrating the method by which an Entrust User Certificate is created.  
         [0064]    [0064]FIG. 5 illustrates a high level flowchart demonstrating the functionality of the preferred embodiment of FIG. 2 and FIG. 3;  
         [0065]    [0065]FIG. 6 is a flowchart demonstrating the steps by which a purchase order may be initiated using a supplier catalog according to the preferred embodiment of FIG. 2 and FIG. 3;  
         [0066]    [0066]FIG. 7 is a flowchart showing the steps by which shipment of ordered product is processed according to the preferred embodiment of FIG. 2 and FIG. 3; and  
         [0067]    [0067]FIG. 8 is a flowchart demonstrating the signature process for narcotic or other controlled substances orders according to the preferred embodiment of FIG. 2 and FIG. 3. 
     
    
       [0068]    It is noted that throughout the appended drawings, like features are identified by like reference numerals.  
       DETAILED DESCRIPTION OF PREFERRED EMBODIMENTS  
       [0069]    Referring to FIG. 1, there is shown an embodiment of an e-commerce system in accordance with the present invention for the secure electronic procurement of goods. The system is primarily suited for procuring goods requiring a verifiable chain of custody such as narcotics, controlled drugs and substances by pharmacists and other practitioners from licensed dealers. Additional goods that may take advantage of a chain of custody approach are goods of high value such as securities, precious metals, jewelry or the like or other public distribution regulated goods such as firearms. However, it is understood that the system may also be used to purchase other goods or services that may be offered by suppliers or sellers such as office supplies, books or other catalog order products.  
         [0070]    According to an embodiment of the invention, the system, generally designated by reference number  25 , comprises a plurality of user systems  21 ,  22 , and  23  each connected through respective network connections  26 ,  28  and  30  to a network  32  (eg. Internet) for communication with a Secure Procurement System (SPS)  38 . SPS  38  is connected to the Internet  32  via network connection  34  and connected to a Supplier system  44  via a supplier network connection  42 . A Certificate Authority (CA) system  40  is also connected to the Internet  32  to authenticate communications as will be explained further below. System  25  permits a user such as a pharmacist to send digitally signed and secured orders over the Internet  32  for products such as narcotics or controlled substances from a supplier as discussed further below.  
         [0071]    The Internet  32  is presently the preferred network for communication among a user system  21 ,  22  or  23  and SPS  38  and CA  40  due to its public availability at a relatively low cost. The communications link  42  is preferably a private link such as an EDI VAN, a virtual private network (VPN) or other communications link. While only a single supplier  44  is illustrated, it is understood that system  25  may be scaled for multiple suppliers particularly if supplier  44  is a value added supplier (VAS) representing many source suppliers.  
         [0072]    User systems  21 ,  22  and  23  and SPS  38  are generally configured in a thin client/server arrangement. Illustrated in FIG. 2 is a preferred embodiment  21 ′ of user systems  21 ,  22  and  23 . System  21 ′ comprises a computing device  50  of the personal computer-type configured for Internet communication and capable of running a Java-enabled web browser  52  such as Microsoft® Internet Explorer or Netscape® Navigator. The term personal computer is used broadly incorporating workstations, portable computers, minicomputers, etc. In addition, user system  21 ′ is configured for transmitting and receiving with SPS  38  and CA  40  using PKI decryption/encryption and digital signatures with certificates for private authenticated communications with integrity. In accordance with the preferred embodiment of FIG. 2, Entrust 3.0 client software  54  is used as a means for security. A web browser helper application  56  is also installed on user system  21 ′ for assisting with user authentication and ordering as described further below. It is understood that user system  21 ′ transparently communicates with CA  40  either directly as shown or via a TCP/IP redirector service  41  (FIG. 4). While user system  21 ′ is shown directly connected to the Internet, it is understood that the system may connect through a LAN, Internet or other means provided adequate security measures are taken.  
         [0073]    Further illustrated in FIG. 2 is a preferred SPS  38 . In the preferred embodiment, SPS  38  comprises web server hardware and software such as a Compaq® Proliant 5000 Pentium Pro server running Microsoft® Windows NT operating system (not shown) and Netscape® Suitespot integrated software for the network enterprise (not shown). Further SPS  38  comprises a web server application  58  to generate HTML pages for transmission and also to receive user system communications for use within the system  25 . Secure Socket Layer (SSL) technology provided by Suitespot is used to secure HTML communications between user system  21 ′ web browser  52  and SPS  38  web application  58 . Application  58  also generates ANSI X12 version 3060 EDI transaction sets for communication via file transfer protocol (FTP)  60  to supplier system  44  (FIG. 3). To facilitate digitally signed and secured ordering in a PKI environment with certificates throughout system  25 , SPS  38  further comprises Entrust Client 3.0  62  as a means for security. FTP communications providing means for transmitting and receiving between SPS  38  and supplier  44  are also encrypted/decrypted using Entrust  62 . SPS  38  further comprises DB Server  64  such as Oracle® or Microsoft® SQL for accessing databases (not shown) such as a supplier product catalog and a procurement transaction archive.  
         [0074]    While not shown, it is preferred that SPS  38  communicates through an effective configured firewall to the open Internet  32  and user system  21 ′. It is also preferred that PB server resides on hardware isolated from the Internet. The data therein related to ordering should be encrypted. Web Application  58  source code should not reside on SPS  38 . Preferably a redundant server and site should be made available to operate SPS  38  in a disaster scenario.  
         [0075]    In order to provide physically secure service due to the nature of the transactions processed by SPS  38  particularly in relation to narcotic, controlled drug and controlled substance procuring, SPS  38  preferably is located in an approved secure facility and operated by approved personnel. The facility and personnel should meet regulatory or governmental security agency standards (for example in Canada, RCMP and in U.S., the NSA). Offsite storage vaults for storing backups of information should also be located in approved secure facilities. Similarly, CA  40  is preferably located in an appropriate secure facility and has a redundancy capability.  
         [0076]    Optionally, but not shown, SPS  38  may be connected to a Credit Validation Server through a private network or over the Internet  32  for real-time on-line verification of a user&#39;s ability to purchase goods by credit card or other means. Typically, payment in a B2B purchase of narcotics and other controlled substances is invoiced by a supplier and is not sold by credit card.  
         [0077]    Supplier system  44  may take many different forms depending, for example, on whether the supplier is an intermediary such as a value added supplier (VAS) providing sales and logistical services to one or more manufacturers/sellers or a direct supplier. FIG. 3 illustrates schematically a preferred supplier system  44 ′ for a VAS. VAS system  44 ′ comprises typically a hardware/software server configuration including a communications server implementing FTP  68  for communicating with SPS  38  and Entrust Client  70  for communication decryption/encryption service preferably in a PKI environment with certificates. System  44 ′ further includes an EDI server  72  or interface to a legacy EDI system as a means for processing order transactions. Database server  74  is also included for a supply catalog (not shown) and for storing order transactions for reporting and audit purposes. The details of such an EDI processing system are not shown but are commonly understood. The system  72  may include an order management system (OMS), an inventory or warehouse management system (WMS) and a transportation management system (TMS) in cooperation to process an order and issue invoices, pick and pack items for shipping (not shown).  
         [0078]    VAS system  44 ′ further includes in the preferred embodiment an EDI communication interface  76  to one or more suppliers to VAS. It is understood that FTP  68  may be used to provide EDI communication service to suppliers to VAS. While system  44 ′ is shown as an integrated system, it is understood that FTP server  78  may be separate from the remaining EDI processing system collectively indicated by reference  79 . In turn, EDI server  72  and DB Server  74  may be configured on separate hardware.  
         [0079]    [0079]FIG. 5 illustrates a high-level flowchart demonstrating the functionality of system  25  including initiating, processing, delivering, receiving and acknowledging receipt of an order; initiating a request for a digital certificate to permit use of system  25 , and supplier order catalog updating.  
         [0080]    Before an order for narcotics or other controlled substance may be successfully made using system  25  by user who is a qualified person such as a pharmacist having current and appropriate credentials to deal in such goods, the qualified person must make an application to a local regulatory authority (LRA) for user approval and certificate and public/private key generation in accordance with PKI procedures commonly understood in the art. A local regulatory authority may be a body that licenses or otherwise governs the applicant user or another trusted agency that may verify the applicant&#39;s credentials such as a VAS served by the system  25 . With reference to FIG. 4 and steps  200  to  208  of FIG. 5, a pharmacist desiring to take advantage of system  25  applies to LRA for permission to use system  25  and the provision of the necessary Entrust digital certificate and keys to make the pharmacist&#39;s user system  21 ′ compliant with system  25 . To approve such a request, LRA verifies the credentials in support of the application and requests a certificate from CA for approved applicants. Pharmacist initiates a certificate on user system  21 ′ in cooperation with CA  40 . Should a user&#39;s status as a qualified person change, making the user no longer qualified to deal in controlled substances, LRA may inform CA to suspend the user&#39;s certificate to prevent further ordering capabilities.  
         [0081]    With reference to FIG. 5, there is shown the steps by which an exemplary user at a hospital uses system  25  for procuring goods from VAS. It is clear from FIG. 4 that only when an order includes narcotics or other controlled substances that a pharmacist need be involved in the order process. Thus, system  25  integrates ordering goods subject to a verifiable chain of custody with ordering other products. Step  100  illustrates a user choosing to place an order electronically via system  21 ′. At step  102 , User connects to SPS  38  login web page via the Internet  32  and logs in using a predefined user identity and password. As noted previously all such HTML communications between user system  21 ′ and SPS  38  employ SSL technology for security to create user private procurement transactions.  
         [0082]    Once logged in, user creates an order, entering a purchase order number and user reference as well as line items and quantities to request at step  104 . Reference may be had to FIG. 6 which illustrates in more detail a flowchart demonstrating the steps by which a purchase order may be initiated using a supplier catalog to select items, determine availability, etc, through SPS  38  as is well understood to persons skilled in the art.  
         [0083]    Once the purchase order is completed and submitted, with reference again to FIG. 5, SPS  38  determines if the order includes any narcotic or other controlled substances that are subject to ordering restrictions at step  106 . For such an order, SPS  38  communicates with user pharmacist and Certificate Authority to authenticate pharmacist as entitled to order such goods. These steps are described in further detail with reference to FIG. 8 below. Briefly, pharmacist is prompted at step  108  to enter a further user identity and password to activate a personal digital signature and certificate through Entrust Client  54  for transmission to CA  40 . The qualified person entitled to order such goods must keep the user identity and password secret to avoid unauthorized use. If the order is validated to SPS  38  by CA  40  at step  110 , SPS  38  stores the digitally signed order (step  112 ), and processes it for order information and formats and transmits an EDI  850  purchase order to VAS  44 ′ (step  114 ).  
         [0084]    As is well understood to those in the art, EDI messages are well defined by ANSI X12 standards in various versions (e.g. 3060, 3050 etc.) and individual messages are often referred to by an assigned message code. For example, an  850  message refers to a purchase order, an  861  message indicates confirmation of delivery of ordered goods and  832  indicates supplier catalog update information, etc.  
         [0085]    VAS  44 ′ receives the order via FTP  68 , decrypts it and passes it on to EDI server  72  for processing (step  116 ). Once the order is processed, the goods are shipped to user at a “ship to address” registered in the VAS database server  74  for the qualified person listed in the purchase order (step  118 ). The ship to address is entered by the VAS at the time a relationship is established between VAS and its customer. The address is not included in the  850  message so that an address different from the user&#39;s address is not selectable by an unauthorized person using user system  21 ′ to divert an order. Additionally, at step  126 , EDI messages  820  and  867  may be sent by EDI interface  76  advising the supplier of the sale.  
         [0086]    With reference to FIG. 7 showing a flowchart for steps to process an order shipment, following step  118  an advance shipment notice (EDI message  856 ) is also sent via FTP server  78  to SPS  38  advising of the shipment (steps  120  to  122 ). Supplier network link is preferably a VPN employing digital certificates with a certificate authority to provide private procurement transaction communications between VAS system  44 ′ and SPS  38 . SPS  38  uses the receipt of an  856  message (step  124 ) that indicates shipment of narcotic or other controlled substances to begin a count down timer within which time the user must initiate a  861  message acknowledging receipt of the shipment in a manner discussed below.  
         [0087]    According to business rules implemented by SPS  38 , if a  856  message is not properly confirmed by the qualified person to whom the product was shipped with a digitally signed and certified  861  message, further orders for narcotics or other controlled substances will be denied pending a satisfactory resolution. The  861  message must be received by SPS  38  within a predefined period of time. Currently the defined period is five days under the Canadian regulatory framework. Additional rules ensure that variances between quantity shipped and quantity confirmed received are promptly noted to VAS or a regulatory authority (eg. DEA).  
         [0088]    Following the shipment of the ordered product to the user at the hospital, the hospital receives the shipment at step  128  and user logs into SPS  38 . For orders including narcotic or other controlled substance product, it is necessary for the qualified person who ordered such product to timely acknowledge its receipt. Once logged into SPS  38 , user selects a screen to process the receipt of an order and enters a product order reference number (steps  130 - 132 ). SPS  38  retrieves order information using the reference number from database server  64  for displaying to the user at step  134 . The user compares the product received to the order (step  136 ) and either confirms receipt (step  138 ) or enters the actual quantity received to SPS  38  (step  140 ). User may choose to repeat the confirmation process for additional orders (step  142 ) or exit the confirmation process (step  144 ). On the SPS  38  side, the confirmed receipt information is processed in a manner similar to an original order (step  106 , FIG. 5).  
         [0089]    If the received product includes narcotic or other controlled substances, the qualified person who ordered the product must digitally sign and certify its receipt to SPS  38  using CA  40  (steps  106  to  110 ). SPS  38  stores the receipt and performs any necessary business rule processing to ensure message  856  is matched to its confirmation  861  message thus permitting continued ordering rights. EDI message  861  is formatted and transmitted to VAS system  44 ′ (step  114 ) to conform that system&#39;s records (step  146 ) and thus close the chain of custody procurement (step  148 ).  
         [0090]    There is shown in more detail in FIG. 8 a flowchart demonstrating the steps for signing orders or receipts for narcotics or other controlled substances by an exemplary user, namely a pharmacist at a hospital. The flow is described with reference to signing a  850  order but it is understood that processing a  861  confirmation receipt is comparably. At step  200 , SPS  38  receives an order from user system  21 ′ for narcotics or other controlled substances and requests CA  40  to verify SPS  38  certificate that SPS  38  will use to sign the formatted  850  order (step  202 ). If the certificate is not validated, the pharmacist is informed and may call for assistance (step  204 ). If the certificate is validated, SPS  38  signs the  850  order, encrypts it and sends it to pharmacist&#39;s web browser  52  with a web helper app  56  triggering name (e.g. MIME extension .pesx) at steps  206  to  208 . Upon recognition of the MIME extension by browser  52 , helper app  56  is initiated and in turn calls Entrust Client  54  (steps  210  to  212 ).  
         [0091]    As described earlier with reference to FIG. 5 at step  108 , Entrust Client  54  prompts the pharmacist for a user identity and password for validation. Following successful entry of the requested information by the pharmacist (step  214 ), Entrust Client  54  communicates with CA  40  to validate the pharmacist&#39;s digital certificate (step  216 ). If the certificate is not valid, the pharmacist is informed and may call for assistance (step  218 ). As indicated by steps  219 - 222 , provided the pharmacist&#39;s certificate is valid, helper app  52  calls Entrust Client  54  to sign and encrypt the .pesx file containing the  850  order for return to SPS  38 . Upon receipt of the twice signed and encrypted  850  order, at steps  224 - 228 , SPS  38  removes the outer layer of encryption with the public key retrieved from CA  40 . The file is checked for SPS&#39;s signature added at step  206  to ensure there file is an original comparing the certificate stored at SPS  38  with that received. The pharmacist user may be notified of any error for the pharmacist&#39;s follow-up (steps  230  to  236 ). For a file having a matched certificate, SPS  38  decrypts the first encryption layer on the file to remove SPS  38  encryption performed at step  208  and stores an encrypted pharmacist digital signature file as a record of the transaction (step  238 ). As described earlier with reference to FIG. 5, at step  114 , SPS  38  thereafter sends an appropriate  850  message to VAS system  44 ′.  
         [0092]    All products available for order using system  25  are stored in a supplier catalog database at SPS  38  accessible via DB server  64 . The database may be updated using the EDI message interface (FTP server  78 ) from VAS and VAS Supplier generated EDI  832  update messages. With reference to FIG. 5, there is demonstrated the steps to update the supplier catalog database. In the preferred embodiment of FIG. 2 and FIG. 3, following the internal updating of a supply catalog (whether digitally stored or not) at a supplier to VAS, at step  300 , VAS supplier sends product information to VAS who in turn communicates via FTP the catalog update information in the form of an encrypted EDI  832  message to SPS  38  (step  302 ). SPS  38  receives the information via FTP  60 , decrypts same and updates the catalog server database through DB Server  64  (steps  304  and  306 ).  
         [0093]    Thus, through use of digitally signed and encrypted communications through Certification Authority  40 , user system  21 ′ and SPS  38  may produce secure authenticated orders and receipts incorporating non-repudiation technology to provide guarantees that a particular transaction has taken place as between a user and supplier.  
         [0094]    From a user&#39;s front-end perspective, the present invention provides the following advantages:  
         [0095]    Orders can be created and receipt of product confirmed using any standard web browser, eliminating the need for additional complex end user software;  
         [0096]    Assurance that an order is private;  
         [0097]    Users usually require zero training and little or no on-going support;  
         [0098]    Orders can be placed/received 7/24/365;  
         [0099]    The amount of time spent placing orders is significantly reduced because the system is simple and easy-to-use;  
         [0100]    Errors are virtually eliminated as catalogue, pricing and other information is always up-to-date and the procurement system will not accept orders for non-listed catalogue items; and  
         [0101]    A Pharmacist can permit others to prepare orders yet know only the pharmacist can approve an order for narcotics or controlled drugs.  
         [0102]    From a supplier&#39;s back-end perspective the present invention offers the following advantages:  
         [0103]    Orders can be automatically processed by any legacy application and sent directly to a picker or receiver on a warehouse floor or to a transportation company;  
         [0104]    The service enables connectivity of disparate legacy systems over the Internet, which historically was only available to organizations utilizing a VAN;  
         [0105]    All relevant information pertaining to an electronic order can easily be shared between all participants in an organization&#39;s supply chain;  
         [0106]    Paper catalogues no longer need to be printed and distributed;  
         [0107]    Only valid orders are accepted as all entries are cross-referenced against an on-line catalogue, significantly reducing processing costs and the costs associated with handling returns;  
         [0108]    Market reach can be extended as the present invention makes it economical to receive orders from customers who are distant, small and technically limited;  
         [0109]    The number of telephone order status queries can be dramatically reduced as better and more up-to-date information, including real-time information regarding delivery schedules, can be placed in the hands of trading partners and customers;  
         [0110]    Opportunity for channel reconfiguration as organizations can cost effectively sell directly to consumers, compressing the length of their supply chains and eliminating any unnecessary intermediaries;  
         [0111]    Verified chain of custody order and fulfillment;  
         [0112]    Verification of user&#39;s identity;  
         [0113]    Assurance that transaction received is identical to that sent;  
         [0114]    Proof that a transaction actually took place between identified parties; and  
         [0115]    Discrepancies between quantity shipped and received or failed confirmations notified.  
         [0116]    The embodiments of the invention described above are intended to be exemplary only. The scope of the invention is therefore intended to be limited solely by the scope of the appended claims.