iv been thinking lately about this problem. ( how to verify some one/something with having to relay lots of information/over the internet.)

we put a lot of trust in venders doing the right thing, and the lives of a few who make the first leap(first buys)

we need a conciseness network. where you have a public and private key, and only the holder of the private key can sign under the public one. bitcoins blockchain solves this problem nicely. now what we need to do is:

*hash each transaction/item/COA/data/etc + sign it under your keys.

*this would solve the "fake COA" problem.

it would work like this:

ceretropic(example) would have a public and private key( kinda like email and password) and a 3rd party lab would have the same.

ceretopic would take all the data they have on what ever product (batch number, what its suppose to be, etc) hash and sign all that data.

now a 3rd party enters, Colmaric Analytics (testing lab), they receive the file along with the hash of that file(so it cant be faked) and the item to test.

they run and make an analysis as normal. once made: they take the hash provided from ceretropic, + the data from their analysis and hash/sign it with THEIR own keys. now we have a file containing all the info from both party's involved, and the data.

so whats gains? well neither party's can cheat each others data because its unique. ceretropic cant fake Colmaric Analytics analysis because ceretropic dose not have there private key, so they cant sign it as legit.

+you get a nice and tidy file containing all the info about a each batch of every product, timestamped and signed.