Blockchain Component Validation for Software Supply Chain Integrity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current blockchain technology does not provide assurance on the quality and security of third-party software components added to the software supply chain, as it lacks validation history.
Innovation Solution
A primary blockchain for software applications is created with component blockchains that track events associated with software components, linking them to the primary blockchain to manage and validate the quality and security of new components.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If current blockchain technology is used to track software components, then the software component tracking is simple and uniform, but no validation history or quality assurance is provided for third-party components
Solution Approach 1:
The patent divides the blockchain system into two distinct types: primary blockchains for tracking software components and component blockchains for recording validation history and quality events. This segmentation allows the system to maintain both simplicity in component tracking and comprehensive quality assurance without excessive complexity, as each blockchain type serves a specific purpose with optimized structure.
Solution Approach 2:
The patent implements a nested blockchain structure where component blockchains (containing validation history and quality events) are linked to and nested within the broader primary blockchain system. This nesting allows detailed quality information to be organized in subordinate blockchains while maintaining the overall integrity and traceability of the primary software component tracking system.
2Loss of information
If a single blockchain is used for all software components, then the system is easy to manage, but it cannot provide detailed validation history for quality control
Solution Approach 1:
The patent segments the blockchain system into primary blockchains for component tracking and separate component blockchains for validation history. This segmentation ensures that detailed validation information is not lost while keeping the overall system structure manageable through clear functional separation.
Solution Approach 2:
The patent introduces component blockchains as intermediary structures that bridge the primary blockchain and detailed validation information. These intermediary blockchains capture and preserve validation history without requiring the primary blockchain to directly store all detailed quality data, thus preventing information loss while maintaining system organization.
Data Source
AI summary
A primary blockchain for a software application is created that comprises a first block associated with a software component of the software application. An event is received that is associated with the software component. In response to receiving the event, a component blockchain is created that is associated with the software component. The component blockchain comprises a second block associated with the event. The component blockchain links to the primary blockchain. This provides a structure for managing supply chains of software components. As new software components are received, the new software components can be managed and tracked for quality/security.