生產資安控制

為什麼生產階段需要資安？

即使設計完美 → 生產過程出錯 = 整批產品有缺陷

生產階段的資安風險：

• 金鑰被洩漏（從生產線竊取）
• 偽造產品（仿冒、回收再販）
• Debug 介面未鎖（出貨忘記關 JTAG）
• 不正確版本的韌體被燒入
• 製程被竄改（攻擊者植入後門）

Clause 12 主要要求

1. Production Control Plan
   ├── 識別生產中可能影響資安的步驟
   └── 規劃控制措施

2. Production Cybersecurity Activities
   ├── 安全 Provisioning（金鑰、憑證）
   ├── 韌體完整性驗證
   ├── Debug 介面關閉
   ├── 序號 / 防偽冒
   └── 廢品處置

3. 紀錄
   └── 可追溯每個出廠單元

Production Control Plan 範本

production_control_plan:
  item: "TCU-2026"
  production_site: "Plant ABC"

  cs_relevant_steps:
    - step: "Firmware flashing"
      controls:
        - "Verify firmware checksum + signature before flash"
        - "Use signed flashing tool (no manual files)"
        - "Log each flash event"

    - step: "Key/Certificate Provisioning"
      controls:
        - "HSM-based key generation (per device)"
        - "Cert chain installation"
        - "Verify provisioning success"
        - "Provisioning log encrypted + signed"

    - step: "Debug Interface Lockout"
      controls:
        - "Blow eFuse to permanently disable JTAG"
        - "Verification test confirms JTAG unresponsive"
        - "Audit trail of each device"

    - step: "End-of-Line Test"
      controls:
        - "Functional test"
        - "Security check: boot chain verification"
        - "Anti-tamper sensor check"

    - step: "Packaging + Shipping"
      controls:
        - "Tamper-evident seal"
        - "Serial number tracking"
        - "Supply chain integrity (transport security)"

  audit_records:
    - "Each device serial → provisioning record"
    - "Each device → firmware version installed"
    - "Each device → test results"
    - "Anomalies → security event log"

Production 階段的 Threats

與 Clause 5（CSMS）、Clause 10（開發）的對接

CSMS (Clause 5)
   ├── 製造設施的 CS 政策
   ├── 員工背景檢查
   └── 訪客管制

Development (Clause 10)
   ├── 設計時即考慮可生產性（DFM）
   ├── 提供 Production Spec
   └── 提供測試規範

Production (Clause 12)
   ├── 執行 Spec
   └── 紀錄

證照考點

Related Notes

• 09-Production/02-Provisioning
• 07-Product-Development/04-HW-SW-Considerations
• 02-Organizational-Management/01-CSMS-Overview

Practice

• 09-Production/Practice-Production