System and method for data management and security for digital manufacturing
A method and system for providing secure delivery, transport, modification, exchange of digital design and build files that have been bundled into a digital asset within a complex digital supply chain. The system also provides for quality standards when the digital asset is used to manufacture a physical part, and provides for secure feedback to stakeholders for the purpose of digital logistics, data analytics, or liability. The system includes, but is not limited to, manufacturing, licensing, modification and delegation policy, generating authorization certificates, authenticating manufacturing devices and provide qualitative and quantitative file consumption data.
1. A digital manufacturing system, comprising:
a digital supply item (DSI) container for use in a digital manufacturing workflow on the digital manufacturing system; and
a digital manufacturing device configured to store the digital supply item (DSI) container and the digital manufacturing workflow, the digital manufacturing device further configured to store in the digital supply item (DSI) container:
an unencrypted portion representing one or more public files; and
an encrypted portion representing one or more private files,
wherein each of the one or more public files of the unencrypted portion is protected with a cryptographic digital signature, and any application in the digital manufacturing workflow can access the one or more public files of the unencrypted portion, and each private file of the encrypted portion being encrypted separately with a unique symmetric key and an initialization vector, and
each private file identified by a file information block, wherein the file information block includes one or more parameters selected from the group consisting of: a key to encrypt a selected file, an initialization vector, a hash digest, a file number, a compression method, an uncompressed size, and a file name.
2. The digital manufacturing system of claim 1 , wherein each private file can be decrypted by an enforcement component that has access to an authorized policy list, the authorized policy list being separately maintained and controlled from the digital supply item container in the digital manufacturing workflow.
3. The digital manufacturing system of claim 2 , wherein the authorized policy list includes all non-private identification information necessary to describe the digital supply item container to a management license server.
4. The digital manufacturing system of claim 1 , wherein the unencrypted portion includes one or more data fields organized as an extensible markup language file.
5. The digital manufacturing system of claim 4 , wherein the one or more data fields includes at least one of a version field, a unique ID field, a design name field, a user name field, a date created field, a public key field, a company name field, a key role field, a custom ID field, a description field, a multi-platen field, and an image field.
6. The digital manufacturing system of claim 1 , wherein the file information block includes an unencrypted parameter that identifies a file number representing a selected encrypted file.
7. The digital manufacturing system of claim 1 , wherein each public file is compressed.
8. The digital manufacturing system of claim 1 , wherein each private file is compressed.
9. The digital manufacturing system of claim 1 , wherein each of the one or more private files of the encrypted portion is protected with a second cryptographic digital signature.
10. The digital manufacturing system of claim 1 , wherein a selected private file of the encrypted portion represents a payload file and includes an identifier file, an image file, a schematic file, and one or more encrypted computer aided design drawings.
11. The digital manufacturing system of claim 1 , wherein all the one or more private files of the encrypted portion and the corresponding file information block are encrypted with an RSA encryption key of an authorized receiver.
12. The digital manufacturing system of claim 1 , wherein the digital supply item container is an uncompressed archive.
13. The digital manufacturing system of claim 1 , wherein the encrypted portion is hashed using a hash table, a hash digest being stored in the file information block.