Event Attestation for Electronic Device Manufacturing

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The manufacturing process of electronic devices is complex and costly due to the need for device-specific cryptographic keys and extensive network communication, especially for low-resource devices like IoT devices, where verifying the entire manufacturing process and ensuring security is challenging.

Innovation Solution

The method involves providing event attestations for specific events during the device's lifecycle, which are cryptographically authenticated and shared among multiple manufacturers, allowing devices to attest to receiving these attestations without the need for a single device-specific key, simplifying the manufacturing process and reducing communication overhead.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If device-specific cryptographic keys are used for authentication, then security is improved, but manufacturing complexity and cost increase

Engineering Contradiction:
ImprovesecurityVSAvoidmanufacturing complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments the authentication system into two parts: device-independent event attestations that can be batch-processed during manufacturing, and device-specific cryptographic keys that are embedded separately. This segmentation allows the manufacturing process to be simplified while maintaining security, as the event attestations can be verified without requiring complex device-specific key management during the manufacturing phase.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent applies preliminary action by embedding device-independent event attestations into devices during manufacturing before the devices are deployed. These attestations pre-record information about manufacturing events, allowing verification to occur later without requiring complex real-time authentication during manufacturing. This preliminary embedding simplifies the manufacturing process while maintaining security.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If extensive network communication is used for verification, then authentication reliability is improved, but energy consumption and communication overhead increase

Engineering Contradiction:
Improveauthentication reliabilityVSAvoidenergy consumption
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The patent extracts the verification process from requiring extensive network communication by embedding self-contained event attestations directly into the devices during manufacturing. These attestations contain cryptographic proof of manufacturing events that can be verified locally or with minimal network communication, reducing energy consumption and communication overhead while maintaining authentication reliability.

Inventive Principle:
Principle #2Taking out (Extraction)

3Reliability

If device-specific keys are required for each manufacturer, then security is improved, but ease of manufacture deteriorates

Engineering Contradiction:
ImprovesecurityVSAvoidease of manufacture
Core Design Contradiction:
ReliabilityVSEase of manufacture

Solution Approach 1:

The patent implements universality by creating device-independent event attestations that can be used across multiple manufacturers and device types. Instead of requiring each manufacturer to implement complex device-specific key management, the system uses a universal attestation format that can be embedded by any manufacturer using standardized processes, significantly improving ease of manufacture while maintaining security through cryptographic verification.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentEP3591564B1Event attestation for an electronic device
Publication Date: 2021.05.05 TRUSTONIC
  • EP3591564B1 patent drawingFigure 1
  • EP3591564B1 patent drawingFigure 2~3
  • EP3591564B1 patent drawingFigure 4~5

AI summary

A method for validating an electronic device 2 comprises receiving attestation information provided by the electronic device 2 attesting that the electronic device 2 has received a plurality of event attestations, each event attestation providing a cryptographically authenticated attestation to the occurrence of a respective event during a lifecycle of the electronic device, and determining a validation result indicating whether the attestation information is valid. By providing separate cryptographically authenticated attestations for respective events in the lifecycle of the device, this can simplify manufacturing of the devices in a multistage manufacture process compared to an approach using a single device-specific attestation attesting that the entire process is trusted.