An Innovative Strategy Based on Secure Element for Cyber–Physical Authentication in Safety-Critical Manufacturing Supply Chain
Source abstract
Abstract
The accurate tracking of every production step and related outcome in a supply chain is a stringent requirement in safety-critical sectors such as civil aviation. In such a framework, trusted traceability and accountability can be reliably and securely managed by means of blockchain-based solutions. Unfortunately, blockchain cannot guarantee the provenance and accuracy of the stored information. To overcome such a limitation, this paper proposes a secure solution to strongly rely on the tracking information of the physical assets in the supply chain. The proposed solution exploits Hardware Security Modules (HSMs) to provide required cryptographic primitives through a Near-Field Communication (NFC) connection. In our approach, each transfer of the assets is authenticated, verified, and recorded in the blockchain through the HSM. Transaction entries are signed, thus providing a guarantee of ownership and authenticity. The proposed infrastructure has been subject of an exhaustive security analysis and proved resilient against counterfeiting attempts, stakeholder repudiations, and misleading information.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Physical Unclonable Functions (PUFs) and Hardware Security · Blockchain Technology Applications and Security · Recycling and Waste Management Techniques
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
Infineon Technologies AG, 85579 Neubiberg, Germany
Applied Research & Technology, Collins Aerospace, 00185 Rome, Italy
Departamento de Electrónica y Tecnología de Computadores, Universidad de Granada, 18071 Granada, Spain
Funding
European Union’s Horizon 2020 Research and Innovation program
References (55)
Show source-provided references
1. Industry 4.0 in logistics and supply chain management: A systematic literature review10.1080/10429247.2020.1783935 ↗
2. Industry 4.0 and supply chain sustainability: Framework and future research directions
3. Stadtler, H. (2014). Supply Chain Management and Advanced Planning: Concepts, Models, Software, and Case Studies, Springer.10.1007/978-3-642-55309-7 ↗
4. OECD/EUIPO (2023, July 31). Global Trade in Fakes: A Worrying Threat; In OECD-iLibrary. Available online: https://www.oecd.org/publications/global-trade-in-fakes-74c81154-en.htm.
5. Supply chain integration and Industry 4.0: A systematic literature review10.1108/BIJ-08-2020-0428 ↗
6. Industry 4.0 and digital supply chain capabilities: A framework for understanding digitalisation challenges and opportunities10.1108/BIJ-12-2018-0435 ↗
7. Impact of Industry 4.0 on supply chain performance10.1080/09537287.2020.1712487 ↗
8. Supply chain transparency through blockchain-based traceability: An overview with demonstration10.1016/j.cie.2020.106895 ↗
9. When blockchain meets supply chain: A systematic literature review on current development and potential applications10.1109/ACCESS.2020.2983601 ↗
10. Blockchain and supply chain management integration: A systematic review of the literature10.1108/SCM-03-2018-0143 ↗
11. Wüst, K., and Gervais, A. (2018, January 20–22). Do you need a blockchain?. Proceedings of the Crypto Valley Conference on Blockchain Technology (CVCBT), Zug, Switzerland.10.1109/CVCBT.2018.00011 ↗
12. Caldarelli, G. (2020). Understanding the blockchain oracle problem: A call for action. Information, 11.10.3390/info11110509 ↗
13. Aich, S., Chakraborty, S., Sain, M., Lee, H.I., and Kim, H.C. (2019, January 17–20). A review on benefits of IoT integrated blockchain based supply chain management implementations across different sectors with case study. Proceedings of the 21st International Conference on Advanced Communication Technology (ICACT), PyeongChang, Republic of Korea.10.23919/ICACT.2019.8701910 ↗
14. You Can Clone But You Cannot Hide: A Survey of Clone Prevention and Detection for RFID10.1109/COMST.2017.2688411 ↗
15. Elkhiyaoui, K., Blass, E.O., and Molva, R. (2012, January 16–18). CHECKER: On-site checking in RFID-based supply chains. Proceedings of the 5th ACM Conference on Security and Privacy in Wireless and Mobile Networks, Tucson, AZ, USA.10.1145/2185448.2185471 ↗
16. Designing secure lightweight blockchain-enabled RFID-based authentication protocol for supply chains in 5G mobile edge computing environment10.1109/TII.2019.2942389 ↗
17. Ultralightweight Mutual Authentication RFID Protocol for Blockchain Enabled Supply Chains10.1109/ACCESS.2018.2890389 ↗
18. A survey on near field communication (NFC) technology10.1007/s11277-012-0935-5 ↗
19. The elliptic curve digital signature algorithm (ECDSA)10.1007/s102070100002 ↗
20. Blockchain technology in supply chain operations: Applications, challenges and research opportunities10.1016/j.tre.2020.102067 ↗
21. Global supply chain design: A literature review and critique10.1016/j.tre.2005.06.003 ↗
22. Hui, X., Li, K., Wang, C., Zhang, C., and Gu, Z. (2022, January 23–25). Risk Management of Aerospace Stand-Alone Device Supply Chain. Proceedings of the International Conference on Industrial IoT, Big Data and Supply Chain (IIoTBDSC), Beijing, China.10.1109/IIoTBDSC57192.2022.00057 ↗
23. Lanotte, H., Ferreira, A., and Brisset, P. (2020, January 2–4). Lean supply chain and designing a customer-oriented dashboard: The case of an aerospace company. Proceedings of the IEEE 13th International Colloquium of Logistics and Supply Chain Management (LOGISTIQUA), Fez, Morocco.10.1109/LOGISTIQUA49782.2020.9353919 ↗
24. Howard, M., and Lipner, S. (2006). The Security Development Lifecycle, Microsoft Press.
25. Impact of IoT challenges and risks for SCM10.1108/SCM-03-2018-0142 ↗
26. Study on the Application of the QRcode Technology in the Farm Product Supply Chain Traceability System10.4028/www.scientific.net/AMM.321-324.3056 ↗
27. Hsu, Y.C., Chen, A.P., and Wang, C.H. (2008, January 1–3). A RFID-enabled traceability system for the supply chain of live fish. Proceedings of the IEEE International Conference on Automation and Logistics, Qingdao, China.
28. Harun, K., Cheng, K., and Wibbelmann, M. (2008, January 8–11). RFID-enabled aerospace manufacturing: Theoretical models, simulation and implementation issues. Proceedings of the IEEE International Conference on Industrial Engineering and Engineering Management, Singapore.10.1109/IEEM.2008.4738187 ↗
29. Gassend, B., Clarke, D., Van Dijk, M., and Devadas, S. (2002, January 18–22). Silicon physical random functions. Proceedings of the 9th ACM Conference on Computer and Communications Security, Washington, DC, USA.10.1145/586110.586132 ↗
30. (2023, July 31). OSTP Alliance™ Cipurse™ v2 Cryptographic Protocol Revision 2.0. Available online: https://www.cardlogix.com/downloads/support/CIPURSE_V2_Revision_2_0_Document_Overview.pdf.
31. Dworkin, M., Barker, E., Nechvatal, J., Foti, J., Bassham, L., Roback, E., and Dray, J. (2023, July 31). Advanced Encryption Standard (AES), Available online: https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.197.pdf.
32. Madlmayr, G., Langer, J., Kantner, C., and Scharinger, J. (2008, January 4–7). NFC Devices: Security and Privacy. Proceedings of the 3rd International Conference on Availability, Reliability and Security, Washington, DC, USA.10.1109/ARES.2008.105 ↗
33. Blockchain Inspired RFID-Based Information Architecture for Food Supply Chain10.1109/JIOT.2019.2907658 ↗
34. Biro, A., Kristo, G., and Remenyi, P. (2017). Security Element and Method to Inspect Authenticity of a Print. (EP2815567B1), European Patent.
35. Picard, J., Landry, P., and Bolay, M. (2021, January 24–27). Counterfeit Detection with QR Codes. Proceedings of the 21st ACM Symposium on Document Engineering, Limerick, Ireland.10.1145/3469096.3474924 ↗
36. (2022, July 25). Dust Identity. Available online: https://dustidentity.com/products.
37. Nakamoto, S. (2023, July 31). Bitcoin: A Peer-to-Peer Electronic Cash System. Available online: https://bitcoin.org/bitcoin.pdf.
38. Ethereum, W. (2020, July 07). Ethereum Whitepaper. Ethereum. Available online: https://ethereum.org.
39. Androulaki, E., Barger, A., Bortnikov, V., Cachin, C., Christidis, K., De Caro, A., Enyeart, D., Ferris, C., Laventman, G., and Manevich, Y. (2018, January 23–26). Hyperledger fabric: A distributed operating system for permissioned blockchains. Proceedings of the 13th EuroSys Conference, Porto, Portugal.10.1145/3190508.3190538 ↗
40. Blockchain-based security attack resilience schemes for autonomous vehicles in industry 4.0: A systematic review10.1016/j.compeleceng.2020.106717 ↗
41. Miraz, M.H. (2020). Advanced Applications of Blockchain Technology, Springer.
42. (2013). ISO/IEC JTC 1/SC 6 Telecommunications and Information Exchange between Systems (Standard No. ISO/IEC 18092:2013).
43. RFID security and privacy: A research survey10.1109/JSAC.2005.861395 ↗
44. Using RFID/NFC and QR-code in mobile phones to link the physical and the digital world
45. Lahtela, A., Hassinen, M., and Jylha, V. (February, January 30). RFID and NFC in healthcare: Safety of hospitals medication care. Proceedings of the 2nd International Conference on Pervasive Computing Technologies for Healthcare, Tampere, Finland.
46. Anderson, R. (2020). Security Engineering: A Guide to Building Dependable Distributed Systems, John Wiley & Sons. Chapter 16.10.1002/9781119644682 ↗
47. (2022). Information Security, Cybersecurity and Privacy Protection—Evaluation Criteria for IT Security—Part 5: Pre-Defined Packages of Security Requirements (Standard No. ISO/IEC 15408-5:2022).
48. Technologies, I. (2022, August 18). SECORA™ ID Security Solutions. Available online: https://www.infineon.com/cms/en/product/security-smart-card-solutions/secora-security-solutions/secora-id-security-solutions/.
49. Martintoni, D., Senni, V., Gomez Marin, E., and Cabrera Gutierrez, A.J. (2022, January 1–3). Sensitive information protection in blockchain-based supply-chain management for aerospace. Proceedings of the IEEE International Conference on Omni-Layer Intelligent Systems (COINS), Barcelona, Spain.10.1109/COINS54846.2022.9854974 ↗
50. Miličević, K., Omrčen, L., Kohler, M., and Lukić, I. (2022). Trust model concept for IoT blockchain applications as part of the digital transformation of metrology. Sensors, 22.10.3390/s22134708 ↗
51. Foundation, L. (2023, June 29). HLF Private Collection. Available online: https://hyperledger-fabric.readthedocs.io/en/release-2.2/private-data/private-data.html.
52. (2022, August 11). Node.js®. Available online: https://nodejs.org/en/.
53. Foundation, H. (2023, July 31). Hyperledger Protocol Specification. Available online: https://hlf.readthedocs.io/en/v0.6/protocol-spec.html.
54. Foundation, E. (2023, July 31). Transactions. Available online: https://ethereum.org/en/developers/docs/transactions/.
55. (2023, July 31). COLLABS-871518 Project Website. Available online: https://www.collabs-project.eu/.