System and method for data management and security for digital manufacturing
A method and system for providing secure delivery, transport, modification, exchange of digital design and build files that have been bundled into a digital asset within a complex digital supply chain. The system also provides for quality standards when the digital asset is used to manufacture a physical part, and provides for secure feedback to stakeholders for the purpose of digital logistics, data analytics, or liability. The system includes, but is not limited to, manufacturing, licensing, modification and delegation policy, generating authorization certificates, authenticating manufacturing devices and provide qualitative and quantitative file consumption data.
1. A digital manufacturing system, comprising:
a hardware computing device configured to:
store one or more digital supply item (DSI) containers configured for use with a first digital manufacturing workflow process and a second digital manufacturing process, the one or more DSI containers comprising a first DSI container comprising:
an encrypted portion including an encrypted version of one or more private files, wherein:
in the encrypted portion, the one or more private files are encrypted with one or more symmetric keys and one or more initialization vectors, and the one or more private files are identified by at least one file information block comprising one or more parameters comprising one or more of a key to encrypt a selected file, at least one initialization vector, a hash digest, a file number, a compression method, an uncompressed size, or a file name, wherein a first private file of the one or more private files represents a payload file, and wherein the first private file comprises one or more of an image file, a schematic file, a build file, or a computer aided design drawing;
obtain one or more authorization authorized policy lists (APLs), a first authorization APL of the one or more authorization APLs associated with at least the first DSI container, the first authorization APL defining criteria for authorizing the first digital manufacturing workflow process based on at least the first DSI container, at least one authorization APL of the one or more authorization APLs defining criteria for authorizing the second digital manufacturing workflow process based on at least one DSI container of the one or more DSI containers;
implement the first digital manufacturing workflow process based on at least the first DSI container and the first authorization APL; and
based on successful completion of the first digital manufacturing workflow process, implement the second digital manufacturing workflow process based on the at least one DSI container and the at least one authorization APL.
2. The digital manufacturing system of claim 1 , wherein to implement the first digital manufacturing workflow process, the hardware computing device is further configured to:
decrypt the encrypted version of the one or more private files of the encrypted portion using the first authorization APL.
3. The digital manufacturing system of claim 2 , wherein the first authorization APL comprises non-private identification information describing the first DSI container.
4. The digital manufacturing system of claim 1 , wherein the at least one file information block comprises an unencrypted parameter configured to identify a file number of a first private file of the one or more private files.
5. The digital manufacturing system of claim 1 , wherein, in the encrypted portion, each of the one or more private files is compressed.
6. The digital manufacturing system of claim 1 , wherein, in the encrypted portion, each of the one or more private files is protected with a cryptographic digital signature.
7. The digital manufacturing system of claim 1 , wherein, in the encrypted portion, a first private file of the one or more private files and one or more of the at least one file information block are encrypted with an RSA encryption key of an authorized receiver.
8. The digital manufacturing system of claim 1 , wherein the first DSI container comprises an uncompressed archive.
9. The digital manufacturing system of claim 1 , wherein the hash digest corresponds to a hash table of the encrypted portion.
10. The digital manufacturing system of claim 1 , wherein to implement the first digital manufacturing workflow process, the hardware computing device is further configured to:
generate a second DSI container of the one or more DSI containers, wherein the at least one DSI container comprises the second DSI container.
11. The digital manufacturing system of claim 1 , wherein to implement the first digital manufacturing workflow process, the hardware computing device is further configured to:
communicate the first DSI container.
12. The digital manufacturing system of claim 1 , wherein to implement the second digital manufacturing workflow process, the hardware computing device is further configured to:
cause a manufacturing device to manufacture an object based on the at least one DSI container.
13. The digital manufacturing system of claim 1 , wherein, in the encrypted portion, each of the one or more private files is encrypted separately with a respective unique symmetric key and a respective initialization vector.
14. The digital manufacturing system of claim 1 , wherein the at least one DSI container comprises the first DSI container, and the at least one authorization APL comprises the first authorization APL.
15. The digital manufacturing system of claim 1 , wherein the at least one DSI container comprises a second DSI container, and the at least one authorization APL comprises as second authorization APL.
16. The digital manufacturing system of claim 1 , wherein the at least one DSI container comprises the first DSI container, and the at least one authorization APL comprises a second authorization APL.
17. The digital manufacturing system of claim 1 , wherein the at least one DSI container comprises a second DSI container, and the at least one authorization APL comprises the first authorization APL.
18. The digital manufacturing system of claim 1 , wherein the first authorization APL indicates a location of a second DSI container, wherein the at least one DSI container comprises the second DSI container.