Securing supply chains through real-time electronic chip traceability
1. Securing your supply
chain from counterfeit
parts through real-time,
electronic chip traceability
Symposium on Counterfeit Parts and Materials
June 2016
Yaacov De Russo, Optimal+ Dir. Biz Dev
yaacov.derusso@optimalplus.com
2. OCM Assembly
Necessity for Device Authentication
Modern supply chain is very complex
Devices move around the globe before being used in system
Devices and systems are subject to attacks
Systems fail in use; loss of business, reputation and trust
> 50 billions IoTs in the supply chain by 2020
Each IoT device must be authenticated In-Use; Secure upgrade
needs authentication
2
Identification /
Authentication
Identification /
Authentication
OEM In-Use
Identification /
Authentication
4. Cisco’s Call to Action
4
log Chip ID & Board ID
First time
?
Counterfeit
suspect
Is
in OCM
list ?
Compare Chip ID
Reads Chip IDs
from Boards
Shared Chip ID
Data repository
Creates Data
Repository
Programs Chip ID into
Chip
Authentic
Chip
http://www.scmagazine.com/detecting-and-reducing-counterfeit-chips/article/414290/
OCM OEM
Board/System Test
No
Yes
No
Yes
5. What has Changed?
Existing Electronics counterfeit detection solutions are
incomplete!
Verification is done on a sample of chips
Ineffective for mass production environments – cost, speed and design
implications
Chips are compared to “Spec” or to “Golden” part
OCMs and OEMs are silos, so online traceability is not possible
Optimal+ has the missing ingredients to solve the problem
Already collecting and storing chip ID and “fingerprint” data of billions of chips
Well-established and trusted partner, managing sensitive semiconductor data
Big Data highway infrastructure to connect OEMs to OCMs
Authentication and identification solutions can easily be built on our existing
infrastructure
5
6. About O+
The de-facto Manufacturing Intelligence
leader and trusted third-party for
semiconductor companies
Collecting and managing sensitive product
data for many of the world’s largest OCMs
Handling data for 35 Billion chips a year
Deployed at over 90% of the outsourced
semiconductor supply chain
Physically installed on thousands of testers
Tremendous ROI
6
100%
of the Chips
90%
Coverage
7. O+ Infrastructure in Semi
7
CLIENT APPLICATIONS
• Analytics
• Queries
• Rules
• Simulations
APPLICATION
SERVERS
PROXY SERVER
E-TEST
DATA LOG
OPERATIONS CLIENT
Foundry/OSAT Test Floors OCM: Fabless / IDM
Factory A
Factory B
Factory C
One Point of Truth
between Engineering,
Operations, planners,
Finance and
Management
Alerts
& Linked
Reports
Guidance &
Requests
WAFER SORT
TESTER
FINAL TEST
TESTER
SLT TESTER
MES
OPTIMAL+ DATABASE
(Cloud or On-Premise)
Extreme
Analytics
OCM
Chip Data
Repository
Information
Highway
Chip Data
Collection
8. Our Solution - Introduction
Through our presence in semiconductor testers we
already collect any form of Chip ID (ECID or UID)
Comparing Chip IDs along the supply chain supports
authentication and traceability
Our trusted infrastructure can safely connect OEMs,
CMs, and OCMs
8
9. 9
Enrollment & Authentication Flow
Trusted
OCM
Untrusted
CM
Board / System
Untrusted
Foundry
Or OSAT
Trusted
OEM
Anti-Counterfeit Con
OCM 1
Optimal+ Exchange
OEM
OCM 2
2
2
3
3
4
5
6
Reportboard/partsassociation
8
Finalizeboard/partsassociation
Customer
Home/Business
Enrollment and Authentication Hub
Infrastructure Already Exists
O+ can provide unique and trusted authentication service
by gathering authentication data during test and using
them for integrity verification during chip life cycle.
10. Chip Enrollment
Chip fabricated by foundry is enrolled in database at the OCM
Electronic Chip IDs (ECIDs)
Unclonable IDs (UIDs)
All test and binning data
Collected by Optimal+ directly of the tester at Chip test
10
UntrustedTrusted
OCM
Enrolled ECID + UID
Foundry
Test history and Binning
1
2
11. Chip Authentication & Board Enrollment
Chip authentication request generated at Board test at the CM
Hub aggregate requests and route to relevant OCMs
Chip Authentication and Board Enrollment information stored at
the OEM database
11
Pass / Fail
UntrustedTrusted
OCM
Authentication
Request
CM (Boards)
Authentication: Pass/Fail for every chip
Enrollment: Board/Chip Association
Trusted
OEM
Trusted
Optimal+ Hub
Authentication
Request
12
3
4
OEM: Board Pass / Fail
12. Open for Collaboration with Ecosystem
12
EDA
Company
3PIP
Vendors
Security IP
Vendors
Chip
Design
Chip
Foundry
Chip
Assembly
PCB
Assembly
System
Assembly
13. Call to Action – Seeking Design Partners
What are we looking for?
Design partners - at least one OEM and one of its OCM suppliers
(preferably O+ customer)
What is required from the design partner?
Provide use-case process, requirements and access to Board data
Review outputs and provide feedback and guidance
Participate in a production pilot
What do the design partners get?
Influence the direction of the O+ solution
Early access to the final solution
13