# US 2020/0401676 A1 · Control system and method thereof for secure manufacturing > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2020/0401676 A1 - Document ID: US20200401676A1 - Status: Published application - Kind: A1 - Application number: 16/446,264 - Filed: 2019-06-19 - Published: 2020-12-24 - Earliest claimed: 2019-06-19 - Assignees: ECOLUX Technology Co., Ltd. - Inventors: YU-CHENG LAI; CHIA-YEN LU - Web page: https://patentgrep.com/patent/US20200401676A1 ## CPC - G06F 21/12: Protecting executable software - H04L 9/0897: {involving additional devices, e.g. trusted platform module [TPM], smartcard or USB} - G06F 21/572: {Secure firmware programming, e.g. of basic input output system [BIOS]} - G06F 21/606: {by securing the transmission between two devices or processes} - H04L 9/0825: {using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates} - H04L 9/14: using a plurality of keys or algorithms - H04L 9/3247: {involving digital signatures} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A control system and method thereof for secure manufacturing, comprising a source end, a verification end, and a production end. Providing a source file, the source end encrypting and signing the source file to generate a transfer file and to generate an authorization information simultaneously, the transfer file being transferred to the production end, and the authorization information being transferred to the verification end. After the production end is authorized by the verification end, the transfer file is verified and decrypted, and can be re-encrypted or not re-encrypted to be written into a product or to generate a product. ## Claims ### Claim 1 A control system for secure manufacturing, the control system for secure manufacturing comprising: a source end, comprising a first security module, an encryption module, and a secure transfer processing module, generating an authorization information and a transfer file; the first security module comprising an encryption key, an encryption public key, and a signature private key; a verification end, comprising a security verification module; and a production end, comprising a second security module, a security processing module, and a manufacturing module; and the second security module comprising a verification public key, a decryption private key, and a decryption key. ### Claim 2 (depends on 1) The control system for secure manufacturing as claimed in claim 1, wherein the signature private key and the verification public key are generated from an asymmetric key pair of the first security module. ### Claim 3 (depends on 1) The control system for secure manufacturing as claimed in claim 1, wherein the encryption public key and the decryption private key are generated from an asymmetric key pair of the second security module. ### Claim 4 (depends on 1) The control system for secure manufacturing as claimed in claim 1, wherein the encryption module uses the first security module and the encryption key to perform a firmware encryption process on a source firmware to generate an encrypted firmware, and the decryption key is used to decrypt the encrypted firmware. ### Claim 5 (depends on 1) The control system for secure manufacturing as claimed in claim 1, wherein the secure transfer processing module uses the first security module, the encryption public key, and the signature private key to encrypt and sign the encrypted firmware to generate the transfer file. ### Claim 6 (depends on 1) The control system for secure manufacturing as claimed in claim 1, wherein the security verification module receives the authorization information from the source end to verify an identity of the production end for authorization. ### Claim 7 (depends on 1) The control system for secure manufacturing as claimed in claim 1, wherein the security processing module receives the transfer file from the secure transfer processing module, after the production end is authorized by the security verification module, the security processing module performs a pre-manufacturing process to generate a manufacturing file, and the manufacturing module adds the manufacturing file to a product or generates a product according to the manufacturing file. ### Claim 8 (depends on 7) The control system for secure manufacturing as claimed in claim 7, wherein the pre-manufacturing process uses the second security module, the verification public key, the decryption private key, and the decryption public key to restore the transfer file and convert the transfer file into the manufacturing file. ### Claim 9 (depends on 7) The control system for secure manufacturing as claimed in claim 7, wherein the pre-manufacturing process uses the second security module, the verification public key, the decryption private key, and the decryption key to restore the transfer file, to re-encrypt the transfer file based on a feature, and to convert the transfer file into the manufacturing file, wherein the feature is unique to the product. ### Claim 10 (depends on 7) The control system for secure manufacturing as claimed in claim 7, wherein the security processing module calculates a quantity of the product that the manufacturing module has manufactured, and transfers the quantity to the verification end. ### Claim 11 (depends on 8) The control system for secure manufacturing as claimed in claim 8, wherein the product refers to all chip products containing firmwares or software. ### Claim 12 (depends on 1) The control system for secure manufacturing as claimed in claim 1, wherein the source end updates the source file to generate an updated file, and uses the first security module and the encryption module to encrypt the updated file to generate an encrypted updated file, and to generate an update authorization information, the encrypted updated file is transferred to the security processing module, and the update authorization information is transferred to the verification end, and then processed by the security verification module of the verification end, and transferred to the security processing module, the product submits an update request to the security processing module, and the security processing module performs verification according to the update request and the update authorization information, after the update request of the security processing module is verified, and after the encrypted updated file is decrypted by using the second security module, the updated file is transferred to the product by the security processing module for updating. ### Claim 13 A control method for secure manufacturing, comprising steps of: providing a source file; encrypting the source file at a source end to generate a transfer file and to generate an authorization information; transferring the authorization information to a verification end, and transferring the transfer file to a production end; the verification end verifying the production end according to the authorization information; and if the production end passing the verification, the production end decrypting the transfer file. ### Claim 14 (depends on 13) The control method for secure manufacturing as claimed in claim 13, further comprising steps of: the production end decrypting the transfer file to generate a manufacturing file; and the production end adding the manufacturing file to a product or generating a product according to the manufacturing file. ### Claim 15 (depends on 13) The control method for secure manufacturing as claimed in claim 13, further comprising steps of: the production end decrypting the transfer file and re-encrypting the transfer file based on a feature to generate a manufacturing file; and the production end adding the manufacturing file to a product or generating a product according to the manufacturing file; wherein the feature is unique to the product. ### Claim 16 (depends on 15) The control method for secure manufacturing as claimed in claim 15, further comprising steps of: counting a quantity of products produced, and comparing the quantity of products produced with a quantity authorized by the authorization information, and if the quantity of the products reaching the authorized quantity, stopping the manufacturing process. ### Claim 17 (depends on 13) The control method for secure manufacturing as claimed in claim 13, wherein the source end comprises an encryption key, an encryption public key, and a signature private key, and the source end encrypts the source file by using the encryption key, the encryption public key, and the signature private key to generate the transfer file; the production end comprises a verification public key, a decryption private key, and a decryption key, and the production end decrypts the transfer file by using the verification public key, the decryption private key, and the decryption key; the verification public key corresponds to the signature private key, the decryption private key corresponds to the encryption public key, and the decryption key corresponds to the encryption key.