Tracking and verification of physical assets

A method comprising:

• storing a blockchain ledger via a storage device;
• generating an asymmetric key pair comprising a public key and a private key at manufacture, and stores the private key in tamper-resistant non-volatile memory that is never exportable from a hardware security module, wherein the hardware security module is embedded in the object;
• receiving the public key from the hardware security module installed on an object;
• receiving, from a first computing system, a blockchain transaction which comprises a unique identifier of an object, the public key of the object, a security value of the object signed with a first signature generated by the hardware security module using the private key,
• verifying, via a smart contract installed on the blockchain ledger, the first signature of the hardware security module on the security value of the object based on the public key received from the hardware security module installed on the object;
• in response to successful verification, generating a blockchain block which includes the blockchain transaction with the security value, and committing the generated blockchain block to the blockchain ledger;
• receiving, from the unique identifier of the object, and in response, retrieve the security value from the blockchain ledger and provide a response that includes the unique identifier and the security value;
• receiving an updated security value from the verification device, wherein the updated security value is created by the verification device, transmitted to the hardware security module, stored by the hardware security module, signed by the hardware security module using the same private key generated at manufacture to produce a second signature, and transmitted to the verification device and signed by the verification device;
• verifying the signature of the verification device based on a shared public key of the verification device and verifying the second signature of the hardware security module on the updated security based on the public key from the hardware security module;
• in response, updating a pairing of the security value and the identifier of the object on the blockchain ledger based on the updated security value in the second blockchain transaction;
• and
• transmitting an error message to a computing system associated with the object in response to failure to validate the object based on the first signature or the second signature generated by the hardware security module.

A non-transitory computer readable medium comprising instructions, that when read by a processor, cause the processor to perform a method comprising:

• storing a blockchain ledger via a storage device;
• receiving, from the first computing system, a blockchain transaction which comprises a unique identifier of the object, a public key of the object, a security value of the object signed with a first signature generated by a hardware security module embedded in the object, wherein the hardware security module autonomously generates an asymmetric key pair comprising the public key and a private key at manufacture, stores the private key in tamper-resistant non-volatile memory that is never exportable, and uses the private key to generate the first signature;
• verifying, via a smart contract installed on the blockchain ledger, the first signature of the hardware security value of the object based on the public key received from the hardware security module installed on the object;
• in response to successful verification, generating a blockchain block which includes the blockchain transaction with the security value, and committing the generated blockchain bloc to the blockchain ledger;
• and
• receiving, from the unique identifier of the object, and in response, retrieve the security value from the blockchain ledger and provide a response that includes the unique identifier and the security value;
• receiving an updated security value from the verification device, wherein updated security value is created by the verification device, transmitted to the hardware security module, stored by the hardware security module, signed by the hardware security module using the same private key generated at manufacture to produce a second signature, and transmitted to the verification device and signed by the verification device;
• verifying the signature of the verification device based on a shared public key of the verification device and verifying the second signature of the hardware security module on the updated security value based on the public key from the hardware security module;
• in response, updating a pairing of the security value and the identifier of the object on the blockchain ledger based on the updated security value in the second blockchain transaction;
• and
• transmitting an error message to a computing system associated with the object in response to failure to validate the object based on the first signature or the second signature generated by the hardware security module.