Back to results
US 11,455,379 B2Granted
Control system and method thereof for secure manufacturing
AssigneeECOLUX Technology Co., Ltd.
InventorsYu-Cheng Lai, Chia-Yen Lu
Life of this patent
Estimating the term…
Abstract
A control system and method thereof for secure manufacturing, comprising a source end, a verification end, and a production end. Providing a source file, the source end encrypting and signing the source file to generate a transfer file and to generate an authorization information simultaneously, the transfer file being transferred to the production end, and the authorization information being transferred to the verification end. After the production end is authorized by the verification end, the transfer file is verified and decrypted, and can be re-encrypted or not re-encrypted to be written into a product or to generate a product.
Claims11
A control system for secure manufacturing, the control system for secure manufacturing comprising:
- a source unit, comprising a source firmware and software, having a first security module, an encryption module, and a secure transfer processing module, generating an authorization information and a transfer file;
- the first security module comprising an encryption key, an encryption public key, and a signature private key;
- a verification unit, comprising a verification software having security verification module;
- and
- a production unit, comprising a second security module, a security processing module, and a manufacturing module;
- said second security module and security processing module configured to be a control center for the production unit, and the second security module comprising a verification public key, a decryption private key, and a decryption key;
- wherein the encryption module having a micro-processor configured to use the first security module and the encryption key to perform a firmware encryption process on a source firmware to generate an encrypted firmware, and the decryption key is used to decrypt the encrypted firmware;
- wherein the secure transfer processing module having a micro-processor configured to use the first security module, the encryption public key, and the signature private key to encrypt and sign the encrypted firmware to generate the transfer file;
- wherein the security processing module having a micro-processor configured to receive the transfer file from the secure transfer processing module, after the production unit is authorized by the security verification module, the security processing module performs a pre-manufacturing process to generate a manufacturing file, and the manufacturing module adds the manufacturing file to a product or generates a product according to the manufacturing file;
- wherein the pre-manufacturing process having a micro-processor configured to use the second security module, the verification public key, the decryption private key, and the decryption key to restore the transfer file, to re-encrypt the transfer file based on a feature, and to convert the transfer file into the manufacturing file, wherein the feature is unique to the product.
7 more elements
A control method for secure manufacturing, comprising steps of:
- providing a source file;
- encrypting the source file at a source unit to generate a transfer file and to generate an authorization information;
- transferring the authorization information to a verification unit, and transferring the transfer file to a production unit;
- the verification unit verifying the production unit according to the authorization information;
- if production unit passing the verification, the production unit decrypting the transfer file;
- the production unit decrypting the transfer file and re-encrypting the transfer file based on a feature to generate a manufacturing file;
- and
- the production unit adding the manufacturing file to a product or generating a product according to the manufacturing file;
- wherein the feature is unique to the product;
- wherein the source unit comprises an encryption key, an encryption public key, and a signature private key, and the source unit encrypts the source file by using the encryption key, the encryption public key, and the signature private key to generate the transfer file;
- the production unit comprises a verification public key, a decryption private key, and a decryption key, and the production unit decrypts the transfer file by using the verification public key, the decryption private key, and the decryption key;
- the verification public key corresponds to the signature private key, the decryption private key corresponds to the encryption public key, and the decryption key corresponds to the encryption key.
9 more elements
Dependencies are inferred from the claim text.