SYSTEM AND METHOD FOR SECURE MANUFACTURING OF ARTICLES
The claimed subject matter discloses system for securing a process of manufacturing an article, comprising a facility security node located in a manufacturing facility where the article is manufactured, a security server located remotely from the manufacturing facility, said security server communicates with the facility security node and comprises a key generation module configured to generate a certificate authority (CA) private key in a split manner, one share of the CA private key is stored at the security server and another share of the CA private key is stored at the manufacturing facility. The server also comprises a server Multi-Party Computation (MPC) module configured to perform an MPC process with an article MPC module stored at the article, the output of the MPC process is signing the certificate without reconstructing the entire CA private key.
1 . A system for securing a process of manufacturing an article, comprising:
a facility security node located in a manufacturing facility where the article is manufactured;
a security server located remotely from the manufacturing facility, said security server communicates with the facility security node and comprises:
a key generation module configured to generate a certificate authority (CA) private key in a split manner, one share of the CA private key is stored at the security server and another share of the CA private key is stored at the manufacturing facility;
a server Multi-Party Computation (MPC) module configured to perform an MPC process with an article MPC module stored at the article, the output of the MPC process is signing the certificate without reconstructing the entire CA private key.
2 . The system of claim 1 , wherein the security server is connected to multiple distinct manufacturing facilities, and is configured to secure manufacturing processes in the multiple distinct manufacturing facilities.
3 . The system of claim 1 , wherein the security server further comprises a usage log configured to store metadata associated with generation of the CA private key for each article manufactured in the manufacturing facility.
4 . The system of claim 1 , wherein the CA private key is an elliptical curve signing key.
5 . The system of claim 1 , wherein the CA private key is an RSA key.
6 . The system of claim 1 , wherein the facility security node is a software module operating in a manufacturing machine in the manufacturing facility.
7 . The system of claim 1 , wherein the security server further comprises share usage rules module configured to store usage rules associated with usage or the shares of CA private keys generated by the security server and a processing module configured to determine whether or not to sign the CSR based on the usage rules.
8 . A method for securing a process of manufacturing an article, comprising:
installing a facility security node located in a manufacturing facility and a security server communicatively coupled to the facility security node and located remotely from the manufacturing facility;
generating a certificate authority (CA) private key in a split manner;
storing one share of the CA private key at the security server and another share of the CA private key at the manufacturing facility;
performing an MPC process with an article MPC module stored at the article, the output of the MPC process is signing the certificate without reconstructing the entire CA private key.