Securing Your Business Throughout the Supply Chain
There is growing concern counterfeit electronic parts can cause safety hazards or failure of business critical applications, or that vulnerabilities can be introduced into the supply chain to be exploited later. Current supply chain practices start with trusting the source, but processes are limited for screening out counterfeit components, particularly for products containing many subsystems.
Intel is leading the industry in hardware supply chain assurance with Transparent Supply Chain – a set of tools, policies, and procedures implemented on the factory floor at PC and server manufacturers that help enable enterprises to verify the authenticity and firmware version of systems and their components.
Today’s supply chains are increasingly complex, multi-layered, global, and optimized for speed and cost. Attempts to secure the supply chain have been fragmented and narrow. Moving forward, the industry must work together to advance transparency and integrity across the entire lifecycle of the compute platform.
Intel’s commitments include:
- Strategic investment in developing tools and solutions that improve the integrity of Intel products across every lifecycle stage.
- Contributing best practices and standards in the collection, measurement, stewardship, and reporting of platform data to meet our customers' evolving needs—starting with enabling original device manufacturers (ODMs) with tools that provide greater transparency in the manufacturing process.
- Collaborating with the ecosystem in the development of innovative ways to manage the confidentiality, integrity, and access to platform data. This disparate data offers assurance on sourcing, manufacturing, and transportation but can also inform management of provisioning, attestation, and updates.
Key Features
Security
Digitally signed statement of conformance for every platform attests to authenticity of platform
Traceability
Platform certificates linked to the discrete Trusted Platform Module (TPM) providing system-level traceability
Accountability
Component-level traceability via Direct Platform Data File contains all L9 integrated components including processor, storage, memory, and add-in cards
Assurance
Auto Verify tool compares the “snapshot” of the direct platform data taken during manufacturing with a “snapshot” of the platform components taken at first boot to help detect tampering
Intel Transparent Supply Chain helps assure resellers and end-customers that their products come with a level of accountability and traceability. The end result is a more secure supply chain for the industry.
Resources
Supply Chain Security Solutions from Intel and Lenovo, to help ensure device security from the factory floor through transport to end customer.
Learn more about supply chain transparency in The Next Security Frontier: Taking the Mystery Out of the Supply Chain from Intel and Goldman Sachs.
Supply Chain Threats Against Integrated Circuits Whitepaper