...
Supply Chain Scenarios / Use Cases
Scenario 1 (source IBM https://github.com/IBM/PublicRegulationFabric-Food-IBPV20):
Food suppliers in the U.S. must comply with U.S. Food and Drug Administration (FDA) Foreign Supplier Verification Program regulatory requirements before they can ship their products to market. Regulatory compliance is a high-focus area in which developers are looking to build applications that automate and standardize processes used to enforce and execute compliance. Blockchain presents an opportunity to do just that. For this use case, imagine that a supplier is transferring the food products to an importer who verifies that the supplier, country, and food type all match the correct identifiers. At the port of entry, the supplier is again checked against a list of known suppliers in a database (managed by the regulator). If the supplier is of type exempt, then the products are transferred to the retailer. If the supplier is non-exempt, the products are checked against a list of known food products in a database (managed by the regulator). If the food is an exempt product, then it is transferred to the retailer. If the food is non-exempt, the importer must conduct the hazard analysis (either independently or by using a third party). The supplier provides the hazard analysis report to the regulator. The regulator reviews compliance and transfers the products to the retailer. This pattern captures the regulatory compliance logic for the FDA Foreign Supplier Verification Program in a smart contract that’s deployed on a business network. (code and implementation https://github.com/IBM/PublicRegulationFabric-Food-IBPV20)
...
An entire vehicle history could be stored on the immutable, tamper-proof blockchain to make purchasing a used vehicle trustless or preserve the resale value of your new vehicle. Being able to document all repairs on a car via public ledger helps future buyers know the value and for owners to receive the exact value of the vehicle. Counterfeiting is also a significant issue in the automotive industry. Counterfeit spare parts are a costly occurrence that ruins brand reputations and can put drivers in dangerous situations. Digital identification for spare parts can up the transparency ante.
Smart Contracts deriving from scenarios/use cases
...
.
...
...
W3C Workshop "Provenance Topic"
Reference: https://www.w3.org/2016/04/blockchain-workshop/report.html#provenance
...
- Promote the secure and efficient movement of goods by resolving threats early, improving verification and detection capabilities, and enhancing the security of infrastructure and conveyances in order to protect the supply chain, and maximizing the flow of legitimate trade.
- Foster a resilient supply chain by mitigating the systemic vulnerability of supply chains and promoting trade resumption policies and practices.
- How can stakeholders provide assurance that my product is safe without revealing intellectual property (e.g., source code)?
- Is there a formal certification process and authority that can certify certain security properties exist in the product?
- What would constitute a trusted third party (TTP) certification body (e.g., charter, COI, goals, membership, participants, industry)?
- What would be the focus and benefits of the TTP (incentives, methods, technologies) and key outcomes (especially sponsors)?
- How would the TTP get industry buy-in and be distinguished from other (e.g., TCB, OWASP, etc.) existing bodies?
- Better precision in understanding existing and emerging vulnerabilities and threats.
- Advances in insider threat detection, deterrence, mitigation and elimination.
- Assuring security, survivability and dependability of our critical infrastructures.
- Assuring the availability of time-critical scalable secure systems, information provenance and security with privacy.
- Observable/ measurable/ certifiable security claims, rather than hypothesized causes.
- Methods that enable us to specify security requirements, formulate security claims and certify security properties.
- Assurance against known and unknown (though perhaps pre-modelled) threats.
- Mission fulfilment, whether or not security violations have taken place (rather than chasing all violations indiscriminately).
Sources
...
Hyperledger Grid project https://www.hyperledger.org/projects/grid
...