Logistics / Pharmaceutical Cold Chain

Cold-Chain Integrity Recorder

Battery-Powered Excursion Detection That Survives 14 Days Off-Grid

Cold-Chain Integrity Recorder
Logistics
Industry
11 months
Duration
3 → 9
TRL
4
Disciplines

Background

A pharmaceutical distributor shipping temperature-controlled product across Australia relied on single-use chart recorders. A recorder only revealed an excursion after the pallet arrived, by which point the consignment was already at the receiving dock and the product was written off rather than recovered.

The problem

What made it hard.

The recorder had to run fourteen days on a single primary cell while sampling often enough to catch short excursions, which meant the radio had to stay off almost all the time. Simple threshold alarms produced constant false positives — a door opening at a cross-dock looks identical to a failing compressor for the first several minutes. Distinguishing them needed pattern recognition, but there was no power budget for a general-purpose processor.

Approach

What we built.

We designed a sealed logger around an STM32U5 with a 6 µA/MHz low-power core and ran a small temporal convolutional model in TensorFlow Lite Micro directly on the MCU. The model reads a rolling window of temperature, humidity and 3-axis accelerometer data and classifies the thermal signature — door event, transient ambient, or genuine refrigeration failure — in 4 KB of RAM. Only a genuine-failure classification wakes the NB-IoT modem, so the radio duty cycle stays under 0.1%. Everything else is logged locally and offloaded over BLE when the pallet reaches a gateway. The result is a device that spends 99.4% of its life asleep and still catches a compressor fault within eleven minutes.

Outcome

What it measured.

16 days
battery life on a single primary cell
87%
reduction in false excursion alerts
11 min
median time to detect a genuine refrigeration failure

Field trials across 1,400 shipments cut false excursion alerts by 87% against the incumbent threshold recorder, while catching every genuine refrigeration failure in the validation set. Because alerts now arrive in transit rather than at delivery, the distributor recovered 62% of at-risk consignments by rerouting to the nearest cold store. Measured battery life came in at 16 days against the 14-day requirement.

Our role

Hardware design; low-power firmware; on-device model design and quantisation; cloud ingest; regulatory validation support.

Technologies

STM32U5TensorFlow Lite MicroBLE 5.3NB-IoTFreeRTOSZephyrAWS IoT Core

Gallery

Inside the build.

Exploded render of the enclosure: PCB, primary cell, gasket, vented sensor window.

Figure 1 — Exploded render of the enclosure.

Annotated power-budget timeline showing sleep, sample, classify and the rare radio wake.

Figure 2 — Annotated power-budget timeline showing sleep, sample, classify and the rare radio wake..

Three overlaid temperature traces labelled door event / ambient transient / compressor failure, showing why thresholds fail.

Figure 3 — Three overlaid temperature traces labelled door event / ambient transient / compressor failure, showing why thresholds fail..

Web console view of a consignment timeline with an in-transit alert and reroute decision.

Figure 4 — Web console view of a consignment timeline with an in-transit alert and reroute decision..

Next case study

Trackside Pantograph Wear Scanner Rail

Carbon Strip Wear Measured at 80 km/h, Without Taking Trains Out of Service

Trackside Pantograph Wear Scanner

±0.3 mm
measurement accuracy at line speed
80 km/h
maximum scan speed, no service interruption

Tell us what you’re building.

Send the constraint that worries you most — a latency budget, a power budget, a certification date. We’ll tell you straight whether we’re the right team.