Supply chain security manager

Patent metadata

Field	Value
Publication number	US-2024427921-A1
Application number	US-202418739831-A
Country	US
Kind code	A1
Filing date	Jun 11, 2024
Priority date	Jun 23, 2023
Publication date	Dec 26, 2024
Grant date	—

Abstract

A system receives, from a first provisioning entity, a request for first secure device data related to a semiconductor device. The first secure device data is associated with one or more provisioning operations performed, on the semiconductor device, by a second provisioning entity. Based on determining that the first provisioning entity has permission to access the first secure device data, the first secure device data is provided to the first provisioning entity. Second secure device data associated with one or more provisioning operations performed by the first provisioning entity on the semiconductor device is received from the first provisioning entity.

First claim

What is claimed is:

1 . A method comprising:
receiving, from a first provisioning entity, a request for first secure device data related to a semiconductor device, wherein the first secure device data is associated with one or more provisioning operations performed, on the semiconductor device, by a second provisioning entity; determining whether the first provisioning entity has permission to access the first secure device data; based on determining that the first provisioning entity has permission to access the first secure device data, providing to the first provisioning entity the first secure device data; and receiving, from the first provisioning entity, second secure device data associated with one or more provisioning operations performed by the first provisioning entity on the semiconductor device.

2 . The method of claim 1 , wherein the first secure device data comprises at least one measurement value that represents an object or state of the semiconductor device, or a secure data asset.

3 . The method of claim 1 , further comprising:
generating an authentication report comprising a recorded trail of the first secure device data and the second secure device data.

4 . The method of claim 3 , wherein the authentication report further comprises third secure device data associated with a composite device, wherein the composite device comprises the semiconductor device and at least one other semiconductor device.

5 . The method of claim 1 , further comprising:
maintaining, in a data structure, metadata indicative of access permissions for particular secure device data with respect to each provisioning entity of a plurality of provisioning entities.

6 . The method of claim 1 , wherein the first provisioning entity and the second provisioning entity are each operations along a supply chain associated with producing a composite device comprising the semiconductor device and at least one other semiconductor device.

7 . The method of claim 1 , wherein the first secure device data and the second secure device data are stored in a cloud-based environment.

8 . The method of claim 1 , wherein the first secure data is used by the first provisioning entity or by one or more subsequent provisioning entities to perform at least one of an authentication operation or an attestation operation to verify authenticity of the semiconductor device.

9 . A system, comprising:
a memory device; and a processing device, coupled to the memory device, to perform operations comprising:
receiving, from a first provisioning entity, a request for first secure device data related to a semiconductor device, wherein the first secure device data is associated with one or more provisioning operations performed, on the semiconductor device, by a second provisioning entity;
determining whether the first provisioning entity has permission to access the first secure device data;
based on determining that the first provisioning entity has permission to access the first secure device data, providing to the first provisioning entity the first secure device data; and
receiving, from the first provisioning entity, second secure device data associated with one or more provisioning operations performed by the first provisioning entity on the semiconductor device.

10 . The system of claim 9 , wherein the first secure device data comprises at least one measurement value that represents an object or state of the semiconductor device, or a secure data asset.

11 . The system of claim 9 , wherein the operations further comprise:
generating an authentication report comprising a recorded trail of the first secure device data and the second secure device data.

12 . The system of claim 11 , wherein the authentication report further comprises third secure device data associated with a composite device, wherein the composite device comprises the semiconductor device and at least one other semiconductor device.

13 . The system of claim 9 , wherein the operations further comprise:
maintaining metadata, in the data structure, indicative of access permissions for particular secure device data with respect to each provisioning entity of a plurality of provisioning entities.

14 . The system of claim 9 , wherein the first provisioning entity and the second provisioning entity are each operations along a supply chain associated with producing a composite device comprising the semiconductor device and at least one other semiconductor device.

15 . The system of claim 9 , wherein the first secure device data and the second secure device data are stored in a cloud-based environment.

16 . The system of claim 9 , wherein the first secure data is used by the first provisioning entity or by one or more subsequent provisioning entities to perform at least one of an authentication operation or an attestation operation to verify the authenticity of the semiconductor device.

17 . A non-transitory computer-readable medium comprising instructions that, based on execution by a processing device, cause the processing device to perform operations comprising:
receiving, from a first provisioning entity, a request for first secure device data related to a semiconductor device, wherein the first secure device data is associated with one or more provisioning operations performed, on the semiconductor device, by a second provisioning entity; determining whether the first provisioning entity has permission to access the first secure device data; based on determining that the first provisioning entity has permission to access the first secure device data, providing to the first provisioning entity the first secure device data; and receiving, from the first provisioning entity, second secure device data associated with one or more provisioning operations performed by the first provisioning entity on the semiconductor device.

18 . The non-transitory computer-readable medium of claim 17 , wherein the first secure device data comprises at least one measurement value that represents an object or state of the semiconductor device, or a secure data asset.

19 . The non-transitory computer-readable medium of claim 17 , wherein the operations further comprise:
generating an authentication report comprising a recorded trail of the first secure device data and the second secure device data.

20 . The non-transitory computer-readable medium of claim 17 , wherein the operations further comprise:
maintaining metadata, in the data structure, indicative of access permissions for particular secure device data with respect to each provisioning entity of a plurality of provisioning entities.

Assignees

• Cryptography Res Inc

Inventors

• Orzen Matthew E
• Wittenauer Joel

Classifications

• G06F21/6218 Primary

  to a system of files or objects, e.g. local or distributed file system or database · CPC title

• G06F2221/2141

  Access rights, e.g. capability lists, access control lists, access tables, access matrices · CPC title

• G06F21/44 Primary

  Program or device authentication · CPC title