Supply Chain Security Manager for Semiconductor Provisioning

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The verification of semiconductor devices and composite devices traveling along a supply chain of multiple provisioning entities becomes increasingly complex due to the need to verify provisioning operations from each entity, requiring a system to manage and authenticate cryptographic data across the chain.

Innovation Solution

Implementing a supply chain security manager that collects and stores secure device data from each provisioning entity, providing a layer of security by managing access requests and generating authentication reports to ensure the authenticity and trustworthiness of semiconductor devices and composite devices.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If cryptographic keys are programmed on factory floors of multiple provisioning entities, then security functionality is provided, but verification complexity increases due to need to verify provisioning operations from each entity

Engineering Contradiction:
Improvesecurity functionalityVSAvoidverification complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a supply chain security manager as an intermediary system that centralizes the verification of provisioning operations. This manager collects and stores secure device data from multiple provisioning entities, allowing consumers to verify device authenticity without directly interacting with each provisioning entity. The intermediary consolidates complex verification tasks into a single manageable system.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent segments the verification process into distinct components: provisioning entities perform their individual provisioning operations, the supply chain security manager collects and stores data from all entities, and consumers query the manager for verification. This segmentation allows each component to focus on specific tasks, reducing overall system complexity while maintaining comprehensive security verification.

Inventive Principle:
Principle #1Segmentation

2Reliability

If secure device data is collected and stored from each provisioning entity, then authentication efficacy is enhanced, but system complexity increases

Engineering Contradiction:
Improveauthentication efficacyVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The supply chain security manager performs multiple functions within a single system: collecting secure device data from various provisioning entities, storing this data in a centralized database, managing access requests, and generating authentication reports. This multi-functionality consolidates what would otherwise require multiple separate systems into one unified platform, enhancing authentication efficacy without proportionally increasing complexity.

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Reliability

If access requests are managed and authentication reports are generated, then trust level evaluation is enabled, but processing time increases

Engineering Contradiction:
Improvetrust level evaluationVSAvoidprocessing time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The supply chain security manager performs preliminary actions by collecting and storing secure device data from all provisioning entities in advance, before authentication requests are made. This pre-processing of data collection and storage means that when authentication requests arrive, the manager can quickly query pre-existing data rather than performing time-consuming data collection operations during the authentication process itself.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS20240427921A1Supply chain security manager
Publication Date: 2024.12.26 CRYPTOGRAPHY RESEARCH INC
  • US20240427921A1 patent drawing
  • US20240427921A1 patent drawing
  • US20240427921A1 patent drawing

AI summary

A system receives, from a first provisioning entity, a request for first secure device data related to a semiconductor device. The first secure device data is associated with one or more provisioning operations performed, on the semiconductor device, by a second provisioning entity. Based on determining that the first provisioning entity has permission to access the first secure device data, the first secure device data is provided to the first provisioning entity. Second secure device data associated with one or more provisioning operations performed by the first provisioning entity on the semiconductor device is received from the first provisioning entity.