Patent ID: 11150888

Abstract:
Each of a plurality of medical devices is configured to generate a device specific Software Bill of Materials (SBOM), and communicate the device specific SBOM to a validator system(s). A central authority system(s) is configured to authorize the validator system(s) to add a new block(s) to a SBOM blockchain. The SBOM blockchain is structured to contain updates to the device specific SBOM. The validator system(s) is configured to create a local copy of the SBOM blockchain, build a SBOM hash tree based on data in the SBOM blockchain, search the SBOM hash tree for the device specific SBOM, add a new block to the SBOM blockchain, the new block comprising an update(s) to the device specific SBOM, validate the update(s) in the device specific SBOM based on a vulnerability database, and communicate the new block to at least one other validator system.