美国国防部可信微电子战略和举措演进研究

Research on the Strategy and Initiatives of Trusted Microelectronics of the US Department of Defense

摘要:

随着贸易全球化及商用先进技术加速发展，美国国防部认识到从2003年开始建立的“可信供应”能力已无法满足要求，迫切需要在保证微电子器件可信的基础上加大对先进商用技术的使用。为此，国防部于2017年提出“技术实现可信”的新安全框架及系列保障方法。目前，国防部表示已建立起微电子器件产品全寿命周期管控能力。列举了国防部担心其所用微电子器件产品中存在的安全隐患，梳理了国防部“可信代工厂”项目发展历程，研究分析了新安全框架的设置思路及所匹配9个项目的研究目标、投资和成果等内容，最后提出了值得借鉴的做法及对我国的预警。

关键词:可信代工;国防高级研究计划局;技术实现可信;微电子安全;恶意植入;伪冒;小芯片

Abstract:

With the globalization of trade and the accelerated development of commercial technology, the US Department of Defense (DoD) has realized that the "Trusted Supply" capability established since 2003 has no longer been able to meet requirements and is eager to increase the use of advanced commercial technology on the premise of ensuring the trust of microelectronics. For this purpose, DoD launched an updated microelectronics security framework called “trust trough technology” and developed a portfolio of protection countermeasures in 2017. Now, DoD claims it has established a full lifecycle control capability for microelectronic products. In this paper, DoD’s concerns about the security risks in the microelectronic products it uses is listed, the development history of the DoD “trusted foundry” program is sorted out, the thoughts of the new security framework, and the research content, investment, and achievements of the 9 matched programs are comprehensively analyzed. Finally, valuable practices for reference and warning for our country are proposed.

Key words:trusted foundry; DARPA;trust trough technology;microelectronics security; malicious insertion;Counterfeit; chiplet