IIoT Value Chain Security- Chain of Trust for Organizations and Products Ayaji Furukawa

Aliza Maftun

Robot Revolution Initiative, Japan

German Platform Industry 4.0, GermanyToshiba CorporationSiemens AGAgenda• Introduction• Motivation for Chain of Trust Along the Supply Chain• Trustworthiness Definition, Structure and Concept• Means to Support Trusted Interactions• Trust Transitivity to Chain of Trust• …
2Introduction
Plattform Industrie 4.0, Germany and Robot Revolution Initiative, Japan
had been collaborating since 2017 on topics concerning security ofIndustrial IoT (IIoT) and Industry 4.0 use cases.
The white paper introduced a Trustworthiness Expectations andCapabilities Exchange Protocol” (TECEP).

Source: https://www.plattform-i40.de/PI40/Redaktion/EN/Downloads/Publikation/IIoT_Value_Chain_Security.html

3Why “Chain of Trust” Along the Supply Chain?
There exist many security approaches, which can be used for supply chains, e.g.:
ISO/IEC 28000, ISO 2700x, IEC 62443, ISO 15408, ISO 20243, ….
However, there does not exist a standard suite yet:
•PXXXXN

which establishes & measures trustworthiness ofPXXXXSPXXXXSPXXXXZECsecurity properties along the supply chain,•E

which provides assurance for several nodes ofC
1, 2, ..NPXXXXN

EC
1, 2, ..NC
1, 2, ..N

the supply chain,•

which supports interoperability, and•

which enables automated processing.

EC“Chain of Trust”

4Motivation
Growing supply chain
attacks

Several different entities
and stakeholders

Leverage many different
processes, technologies
and tools

Aim of our collaboration is to provide support to manufacturers so that they can find trustworthy
components easily and can establish ad-hoc trustworthy relationships with other supply chain
participants.

Ensure integrity andgenuinity of recieved
product

Provide assurance
about own product tothe customer

Prove compliance toapplicable standards
and regulations

5Trustworthiness Definition and Structure“Trustworthiness corresponds to the ability of a stakeholder to make its claims verifiable, along
multiple entities in a supply chain.”Note: Depending on the use case or business context, trustworthiness may be defined by attributes
like authenticity, resilience, accountability, traceability, compliance to social regulations, integrity,
availability, reliability, confidentiality, privacy, safety, maintainability, usability, sustainability, etc.

Organizational Trustworthiness

Product Trustworthiness“Extent to which the declared attributes of anorganization can be verified by the relying party
and satisfies its expectations.”“Extent to which the declared attributes of aproduct can be verified by the receiving
stakeholder and satisfies its expectations. ”
6Trustworthiness Concept for Organizational Trustworthiness

TI

TI

TI
Supplier(s)Manufacturer(s)/ Integrator(s)Retailer(s)/ Distributor(s)TI

Hardware

SoftwareOperator(s)/ Customer(s)Retailer(s)/ Distributor(s)

TI

TI

TI

Operational Technology

TI
Services

TI

TI

TI
TI
Regulatory
Authority

TI

TI
Information Technology

Regulatory
Authority

TI
Legend:Upstream

Physical and/orDigital

Downstream
TI

DigitalTrusted Interaction
Trust Domains

ContractMeans to Support Trusted Interactions

SecureIdentities forEntities• X.509 PKI
Certificates• DIDs/SSIs• …

Persistent link
between digital
infromationand thecorresponding
physical entity

Proof ofcompliance tostandards andregulations

Standardizedmeans toexchange TW
capabilties• Security ICs• PUFs• …

• QCCs• SCCs• …

• TWP• ExtendedTWP• …

DID: Decentralized Identifier; SSI: Self Sovereign Identity; QCC: Quality Certifying Certificate; SCC: Security Certifying Certificate; TWP: Trustworthiness Profile

8Trust Transitivity to Chain of Trust

TI

Trust transitivity is when trust
can be extended outside thetwo trust domains.

TI

Services
Services
Hardware
SoftwareThis leads to the concept of“chain of trust", i,e.,concatenate thetrustworthiness ofinteractions between trust
domains in a supply chain.

Operator(s)Manufacturer(s)Supplier(s)Products,Devise, etc.

TITITI

TI

TI

Governance /Certification Authorities /RegulatoryAuthorities
Upstream

Downstream

9Chain of Trust Topologies

Manufacturer(s)/ Integrator(s)Supplier(s)Retailer(s)/ Distributor(s)Retailer(s)/ Distributor(s)Operator(s)/ Customer(s)Chain of TrustTopology 1

Hardware

Chain of Trust Topology 2

SoftwareServices

Operational Technology

Regulatory
Authority
Upstream

Chain of Trust Topology
3
Information
Technology

Regulatory
Authority
Downstream

10Chain of Trust Topology 2 - Extended Trustworthiness Profile
Trustworthiness Profile
To be filled by the Buyer

To be filled by the SupplierSupplier s Information

Buyer s Information
Contact Partner:*Contact Partner s Unique Identifier:Contact Partner:*Contact Partner s Unique Identifier:Contact Information:
Legal Entity Name:*Legal Entity Unique Identifier:*Unique Identifier Scheme: (e.g., link to LEI code repo, VATIN by DUNS, NTA by TSE, etc.)
Country:
Additional Information:

Contact Information:
Legal Entity Name:*Legal Entity Unique Identifier:*Unique Identifier Scheme: (e.g., link to LEI code repo, VATIN by DUNS, NTA by TSE, etc.)
Country:
Additional Information:

Trustworthiness Expectations

Trustworthiness Capabilities

Additional Information Expected Validity

Supplier
SelfConformance

3rd party

Upload/AttachISO/IEC 62443-4-2

Please confirm if your supplier(s) complies to the above listed expectation

Conform:
Yes

No

Please confirm if your supplier(s) complies to the above listed expectation

PSS Supplier Questionnaire

Conform:

Yes

No

Conform:
Yes

No

Please confirm if your supplier(s) complies to the above listed expectation

Conform:
Yes

No

Reference Request-for-work

Digital Signature

Digital Certificate (If required)Self-Assessed

Yes

Self-Assessed

Reference TW Expectations

No

3rd-Party Assessement
Yes

No

3rd-Party Assessement

Supplier(s) Conform:

Time StampNo

3rd-Party Assessement

Supplier(s) Conform:

Upload/Attach

Common Criteria

Self-Assessed

Yes

Supplier(s) Conform:

Upload/Attach

Please confirm if your supplier(s) complies to the above listed expectation

3rd-Party Assessement

Supplier(s) Conform:

Upload/Attach

NIST SP 800

Self-Assessment

Yes

No

Proof/ Evidence

Proof Expiry Date

Upload/Attach

DD.MM.YYYY

Upload/Attach

DD.MM.YYYY

Upload/Attach

DD.MM.YYYY

Upload/Attach

DD.MM.YYYY

Upload/Attach

DD.MM.YYYY

Upload/Attach

DD.MM.YYYY

Upload/Attach

DD.MM.YYYY

Upload/Attach

DD.MM.YYYY

Quote/Bid Reference

Digital Signature

Additional Information

Time Stamp

Digital Certificate (If required)

11

IIoT Value Chain Security- Chain of Trust for Organizations and Products Ayaji Furukawa

Aliza Maftun

Robot Revolution & Industrial IoT
Initiative, Japan

German Platform Industry 4.0

Toshiba Corporation

Siemens AG

12Agenda• Trustworthiness Definition and structure• Product Trustworthiness• Trustworthiness Structure• Relationships Between Organizations’ and Products’ Trustworthiness• Moving Towards the Trustworthiness of Products• Chain of Trust Topologies• Future Work

13

Global Value Chain
Information security has become an essential aspect of trustworthiness because
manufacturers and suppliers are becoming interdependent as parties in the global value
chain accelerated through the Internet.
1) Need to develop products that satisfy rapidly changing customer needs.
2) Need to collaborate with suppliers whose products are required to develop the products.
3) Need to find appropriate suppliers from all over the world timely though the Internet.

factory

data

riskThings

14Trustworthiness Definition and Structure“Trustworthiness corresponds to the ability of a stakeholder to make its claims verifiable, along
multiple entities in a supply chain.”Note: Depending on the use case or business context, trustworthiness may be defined by attributes
like authenticity, resilience, accountability, traceability, compliance to social regulations, integrity,availability, reliability, confidentiality, privacy, safety, maintainability, usability, etc.

Organizational Trustworthiness

Product Trustworthiness“Extent to which the declared attributes of anorganization can be verified by the relying party
and satisfies its expectations.”“Extent to which the declared attributes of aproduct can be verified by the receiving
stakeholder and satisfies its expectations. ”15

Product Trustworthiness - Motivation⚫ Manufacturers would like to make sure that the Product is composed of genuine parts and/or malware
free parts.
⚫ Manufacturers want to verify the trustworthiness of the components before using them to manufacture its
own products.
⚫ Manufacturers want to provide confidence to its customer that its product are trustworthy, such as to fulfilsocial regulations, and compensate carbon footprint.

Supplier(s)Distributor(s)Product Flow

Manufacturer(s)Distributor(s)Customer(s)Trustworthiness Structure
Abilities of supply chain actors describe Trustworthiness
1) Organization related abilities like governance and risk management
2) Product related abilities like providing product with competent quality, cost and delivery⓵Expected Org. Trustworthiness⓵ Expected Org Trustworthiness⓶Verifiable Org. trustworthiness(ISO27001 certificate
IEC62443 4-1 certificate)⓷select⓸Issue purchase order⓹ Products/parts
Supplier(s)upstream

VerifyOrg. TW

VerifyProd. TW

Manufacturer(s)⓶ Verifiable Org. trustworthiness(Brand name(ex. HP)⓷ select⓸ buy⓹ Products

VerifyOrg. TW

VerifyProd. TW

Operator(s)/customer(s)Downstream

Relationships Between Organizations’ and Products’ Trustworthiness• Organizations’ trustworthiness leads to Products’ trustworthiness• The structure of trustworthiness across a supply chain which consists of organizations' and products'
Trustworthiness.
• Organizations' trustworthiness is used to select appropriate suppliers before contractual agreement.
Product's trustworthiness is specified using attributes such as security and quality and is usually verified
by buyers after the contractual agreement is established.

18

Moving Towards the Trustworthiness of Products⚫ Towards the trustworthiness of products, the operator, end user or the customer must request themanufacturers to ensure that:⑴ Parts/materials used to manufacture the product are authentic and genuine.
⑵ Only parts/materials that meet the contracted requirements are leveraged:•

No illegal sub-parts and substances,•

No illegal procurement process,•No violation of contract⑶ Parts/materials don't have unspecified functions, such as malware and hardware Trojan horse.
⑷ Products can be demonstrated that no malware and contamination is included during de-sign andmanufacturing processes.
⑸ Authenticity of products and their components can be verified.

⑹ Products are not compromised and didn’t undergo quality degradation during the delivery processes.
⑺ Products are designed and manufactured by following appropriate processes following applicable standards andregulations.
19Chain of Trust Topologies◆ This implies bi-directional trust along the supply chain. This chain of trust topology isespecially useful in scenarios where the supplier (seller) wants to ensure that its
products are sold only in the intended market and comply to applicablenational/international regulations
20

Future Work• In certain scenarios, suppliers would like to keep identity and details of parts/ material used in its
products anonymous. However, manufacturers would like to have this information in order to determine
the trustworthiness of the supplier. How can this tradeoff be supported by technological solutions?
• Reliable subject identities as they are essential identify and authenticate not only the products but also
their corresponding capabilities, including QCCs.
• Realization of Chain of Trust Topology 3_ We have to create a supply chain trustworthiness system
which is not dependent on the trustworthiness of each participating entity. Our goal is to implement, asmuch as possible, robustness and resilience by technical means, which cannot be disturbed by any
single stakeholder in the supply chain.

21

Thank you very much.
Ayaji Furukawa

Aliza Maftun

ayaji2.furukawa@toshiba.co.jp

aliza.maftun@siemens.com

22