美国国防部可信微电子战略和举措演进研究  

Research on Strategy and Initiatives of Trusted Microelectronics of the US Department of Defense

作　　者：张倩 刘馨阳 聂国健[1] 周军连[1] Zhang Qian;Liu Xinyang;Nie Guojian;Zhou Junlian(CEPREI,Guangzhou 510610,China)

机构地区：[1]工业和信息化部电子第五研究所,广东广州510610

出　　处：《科技管理研究》2021年第7期46-58,共13页Science and Technology Management Research

摘　　要：随着贸易全球化及商用先进技术加速发展,美国国防部认识到从2003年开始建立的"可信供应"能力已无法满足要求,迫切需要在保证微电子器件可信的基础上加大对先进商用技术的使用。为此,国防部于2017年提出"技术实现可信"的新安全框架及系列保障方法。目前,国防部表示已建立起微电子器件产品全寿命周期管控能力。列举了国防部担心其所用微电子器件产品中存在的安全隐患,梳理了国防部"可信代工厂"项目发展历程,研究分析了新安全框架的设置思路及所匹配9个项目的研究目标、投资和成果等内容,最后提出了值得借鉴的做法及对我国的预警。With the globalization of trade and the accelerated development of commercial technology,the US Department of Defense(DoD)realized that the"Trusted Supply"capability established since 2003 could no longer suffice and it was urgently needed to increase the use of advanced commercial technology on the basis of ensuring the trust of microelectronics.To this end,DoD launched"Trust Through Technology",an updated microelectronics security framework accompanying a portfolio of assurance methods in 2017.At present,DoD claims it has established the full life cycle management and control capabilities of microelectronic products.In this paper,the security risks that the DoD is concerned about in the microelectronic products it uses are listed,the development history of the DoD's"Trusted Foundry"program is sorted out,the train of thought of the development of the new security framework,and the research objectives,investment,outcomes and so on of the 9 matching programs are studied and analyzed,and finally some worthy practices and early warnings for China are put forward.

关 键 词：可信代工 国防高级研究计划局 技术实现可信 微电子安全 恶意植入 伪冒 小芯片 

分 类 号：TN409[电子电信—微电子学与固体电子学]