| Literature DB >> 32116465 |
Xiaolin Xu1, Fahim Rahman2, Bicky Shakya2, Apostol Vassilev3, Domenic Forte2, Mark Tehranipoo2.
Abstract
Electronic systems are ubiquitous today, playing an irreplaceable role in our personal lives as well as in critical infrastructures such as power grid, satellite communication, and public transportation. In the past few decades, the security of software running on these systems has received significant attention. However, hardware has been assumed to be trustworthy and reliable "by default" without really analyzing the vulnerabilities in the electronics supply chain. With the rapid globalization of the semiconductor industry, it has become challenging to ensure the integrity and security of hardware. In this paper, we discuss the integrity concerns associated with a globalized electronics supply chain. More specifically, we divide the supply chain into six distinct entities: IP owner/foundry (OCM), distributor, assembler, integrator, end user, and electronics recycler, and analyze the vulnerabilities and threats associated with each stage. To address the concerns of the supply chain integrity, we propose a blockchain-based certificate authority framework that can be used to manage critical chip information such as electronic chip identification (ECID), chip grade, transaction time, etc. The decentralized nature of the proposed framework can mitigate most threats of the electronics supply chain, such as recycling, remarking, cloning, and overproduction.Entities:
Year: 2019 PMID: 32116465 PMCID: PMC7047669 DOI: 10.1145/3315571
Source DB: PubMed Journal: ACM Transact Des Autom Electron Syst ISSN: 1084-4309 Impact factor: 0.964