@techreport{ietf-scitt-architecture-06, number = {draft-ietf-scitt-architecture-06}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-ietf-scitt-architecture/06/}, author = {Henk Birkholz and Antoine Delignat-Lavaud and Cedric Fournet and Yogesh Deshpande and Steve Lasker}, title = {{An Architecture for Trustworthy and Transparent Digital Supply Chains}}, pagetotal = 40, year = 2024, month = mar, day = 4, abstract = {Traceability of physical and digital Artifacts in supply chains is a long-standing, but increasingly serious security concern. The rise in popularity of verifiable data structures as a mechanism to make actors more accountable for breaching their compliance promises has found some successful applications to specific use cases (such as the supply chain for digital certificates), but lacks a generic and scalable architecture that can address a wider range of use cases. This document defines a generic, interoperable and scalable architecture to enable transparency across any supply chain with minimum adoption barriers. It provides flexibility, enabling interoperability across different implementations of Transparency Services with various auditing and compliance requirements. Issuers can register their Signed Statements on any Transparency Service, with the guarantee that all Auditors and Verifiers will be able to verify them.}, }