%% You should probably cite draft-ietf-scitt-architecture-06 instead of this revision. @techreport{ietf-scitt-architecture-01, number = {draft-ietf-scitt-architecture-01}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-ietf-scitt-architecture/01/}, author = {Henk Birkholz and Antoine Delignat-Lavaud and Cedric Fournet and Yogesh Deshpande}, title = {{An Architecture for Trustworthy and Transparent Digital Supply Chains}}, pagetotal = 38, year = 2023, month = mar, day = 13, abstract = {Traceability of physical and digital artifacts in supply chains is a long-standing, but increasingly serious security concern. The rise in popularity of verifiable data structures as a mechanism to make actors more accountable for breaching their compliance promises has found some successful applications to specific use cases (such as the supply chain for digital certificates), but lacks a generic and scalable architecture that can address a wider range of use cases. This memo defines a generic and scalable architecture to enable transparency across any supply chain with minimum adoption barriers for producers (who can register their Signed Statements on any Transparency Service, with the guarantee that all consumers will be able to verify them) and enough flexibility to allow different implementations of Transparency Services with various auditing and compliance requirements.}, }