{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,2]],"date-time":"2026-06-02T20:17:15Z","timestamp":1780431435491,"version":"3.54.1"},"reference-count":44,"publisher":"ASME International","issue":"4","content-domain":{"domain":["asmedigitalcollection.asme.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2019,12,1]]},"abstract":"<jats:p>Trust in product data quality (PDQ) is critical to successful implementation of the model-based enterprise (MBE). Such trust does not extend to the exchange and the reuse of three-dimensional (3D) product models across the product life cycle because verifiable traceability in the product data is lacking. This assurance is especially crucial when \u201csiloed\u201d manufacturing functions produce the product data that is not fully interoperable and thus requires frequent reworking to enable its reuse. Previous research showed how public key infrastructure (X.509-PKI) from the X.509 standard could be used to embed digital signatures into the product data for the purposes of certification and traceability. This paper first provides an overview and review of technologies that could be integrated to support trust throughout the product life cycle. This paper then proposes a trust structure that supports several data transaction types. Then, the paper presents a case study for common configuration management (CM) workflows that are typically found in regulated industries. Finally, the paper draws conclusions and provides recommendations for further research for enabling the product life cycle of trust (PLOT).<\/jats:p>","DOI":"10.1115\/1.4042839","type":"journal-article","created":{"date-parts":[[2019,2,14]],"date-time":"2019-02-14T00:43:48Z","timestamp":1550105028000},"update-policy":"https:\/\/doi.org\/10.1115\/crossmarkpolicy-asme","source":"Crossref","is-referenced-by-count":15,"title":["Method for Enabling a Root of Trust in Support of Product Data Certification and Traceability"],"prefix":"10.1115","volume":"19","author":[{"suffix":"Jr.","given":"Thomas D.","family":"Hedberg","sequence":"first","affiliation":[{"name":"Systems Integration Division, Engineering Laboratory, National Institute of Standards and Technology, Gaithersburg, MD 20899 e-mails: ;"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Sylvere","family":"Krima","sequence":"additional","affiliation":[{"name":"Engisis LLC, Bethesda, MD 20817 e-mail:"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jaime A.","family":"Camelio","sequence":"additional","affiliation":[{"name":"Grado Department of Industrial and Systems Engineering, Virginia Tech, Blacksburg, VA 24061 e-mail:"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"33","published-online":{"date-parts":[[2019,6,3]]},"reference":[{"key":"2019100601203050300_CIT0001","article-title":"The Problems with Reinventing CAD Software","volume-title":"Forbes","author":"Sharma","year":"2013"},{"issue":"4","key":"2019100601203050300_CIT0002","doi-asserted-by":"publisher","first-page":"564","DOI":"10.1016\/j.jmsy.2013.04.008","article-title":"Cloud Manufacturing: Strategic Vision and State-Of-The-Art","volume":"32","author":"Wu","year":"2013","journal-title":"J. Manuf. Syst."},{"issue":"1","key":"2019100601203050300_CIT0003","doi-asserted-by":"publisher","first-page":"75","DOI":"10.1016\/j.rcim.2011.07.002","article-title":"From Cloud Computing to Cloud Manufacturing","volume":"28","author":"Xu","year":"2012","journal-title":"Robot. Comput. Integr. Manuf."},{"key":"2019100601203050300_CIT0004","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1016\/j.cad.2014.07.006","article-title":"Cloud-Based Design and Manufacturing: A New Paradigm in Digital Manufacturing and Design Innovation","volume":"59","author":"Wu","year":"2015","journal-title":"Computer-Aided Design"},{"key":"2019100601203050300_CIT0005","article-title":"Gaps Analysis of Integrating Product Design, Manufacturing, and Quality Data in the Supply Chain Using Model-Based Definition","volume":"2","author":"Trainer","year":"2016","journal-title":"Proc. ASME Int. Conf. Manuf. Sci. Eng."},{"key":"2019100601203050300_CIT0006","article-title":"Where Did the Time Go?","volume-title":"Report","author":"GrabCAD","year":"2014"},{"issue":"1","key":"2019100601203050300_CIT0007","doi-asserted-by":"publisher","first-page":"011008","DOI":"10.1115\/1.4034131","article-title":"Embedding x.509 Digital Certificates in Three-Dimensional Models for Authentication, Authorization, and Traceability of Product Data","volume":"17","author":"Hedberg","year":"2016","journal-title":"J. Comput. Inf. Sci. Eng."},{"key":"2019100601203050300_CIT0008","article-title":"Information Technology\u2014Open Systems Interconnection\u2014The Directory\u2014Part 8: Public-Key and Attribute Certificate Frameworks","author":"Telecommunication Standardization Sector of ITU","year":"2014"},{"key":"2019100601203050300_CIT0009","article-title":"Framework for Cyber-Physical Systems, Release 1.0","author":"Cyber Physical Systems Public Working Group","year":"2016"},{"issue":"3","key":"2019100601203050300_CIT0010","doi-asserted-by":"publisher","first-page":"50","DOI":"10.1109\/MS.2002.1003454","article-title":"Process Knowledge Management With Traceability","volume":"19","author":"Ramesh","year":"2002","journal-title":"IEEE Trans. Software Eng."},{"issue":"3","key":"2019100601203050300_CIT0011","doi-asserted-by":"publisher","first-page":"968","DOI":"10.1016\/j.dss.2005.05.026","article-title":"Traceability-Based Knowledge Integration in Group Decision and Negotiation Activities","volume":"43","author":"Mohan","year":"2007","journal-title":"Decis. Support. Syst."},{"issue":"4","key":"2019100601203050300_CIT0012","doi-asserted-by":"publisher","first-page":"922","DOI":"10.1016\/j.dss.2008.03.003","article-title":"Improving Change Management in Software Development: Integrating Traceability and Software Configuration Management","volume":"45","author":"Mohan","year":"2008","journal-title":"Decis. Support. Syst."},{"key":"2019100601203050300_CIT0013","first-page":"4\/1","article-title":"Issues of Traceability in Integrating Tools","author":"Hamilton","year":"1991"},{"issue":"5","key":"2019100601203050300_CIT0014","doi-asserted-by":"publisher","first-page":"546","DOI":"10.1016\/j.cad.2010.03.006","article-title":"Traceability and Management of Dispersed Product Knowledge During Design and Manufacturing","volume":"43","author":"Ouertani","year":"2011","journal-title":"Comput. Aided Design"},{"key":"2019100601203050300_CIT0015","article-title":"Advisory Circular 21-48","volume-title":"Report, Federal Aviation Administration","author":"Hempe","year":"2010"},{"key":"2019100601203050300_CIT0016","article-title":"Advisory Circular 20-62E","volume-title":"Report, Federal Aviation Administration","author":"Allen","year":"2010"},{"issue":"2","key":"2019100601203050300_CIT0017","doi-asserted-by":"publisher","first-page":"021010","DOI":"10.1115\/1.4034132","article-title":"Towards a Lifecycle Information Framework and Technology in Manufacturing","volume":"17","author":"Hedberg","year":"2017","journal-title":"J. Comput. Inf. Sci. Eng."},{"key":"2019100601203050300_CIT0018","doi-asserted-by":"publisher","first-page":"505","DOI":"10.6028\/jres.121.027","article-title":"Digital Manufacturing Certificate Toolkit: Adding Trust and Traceability to Product Data","volume":"121","author":"Krima","year":"2016","journal-title":"NIST JRES."},{"key":"2019100601203050300_CIT0019","article-title":"Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile","author":"The Internet Engineering Task Force","year":"2013"},{"key":"2019100601203050300_CIT0020","article-title":"Industrial Automation Systems and Integration \u2013 Product Data Representation and Exchange\u2014Part 242: Application Protocol: Managed Model-Based 3D Engineering. ISO\/TC 184\/SC 4, ISO 10303\u2013242","author":"International Standards Organization","year":"2014"},{"key":"2019100601203050300_CIT0021","article-title":"Automation Systems and Integration\u2014Numerical Control of Machines\u2014Program Format and Definitions of Address Words\u2014Part 1: Data Format for Positioning, Line Motion and Contouring Control Systems","author":"International Organization for Standardization","year":"2009"},{"key":"2019100601203050300_CIT0022","article-title":"Part 1: Overview and Fundamental Principles in Quality Information Framework (QIF) an Integrated Model for Manufacturing Quality Information","author":"Dimensional Metrology Standards Consortium","year":"2014"},{"key":"2019100601203050300_CIT0023","article-title":"Document Management\u2014Portable Document Format\u2014Part 1","author":"International Standards Organization","year":"2008"},{"key":"2019100601203050300_CIT0024","article-title":"Document Management\u20143D Use of Product Representation Compact (PRC) Format\u2014Part 1","author":"International Standards Organization","year":"2014"},{"key":"2019100601203050300_CIT0025","article-title":"Quality Management Systems","author":"International Organization for Standardization","year":"2015"},{"key":"2019100601203050300_CIT0026","unstructured":"Dougherty, R.\n          , 2017, \u201cQuality Assurance Standard for Digital Product Definition at Boeing Suppliers,\u201d Report D6-51991, The Boeing Company, Archived by WebCite at http:\/\/www.webcitation.org\/6siPUecWG, Accessed Aug. 14, 2017."},{"key":"2019100601203050300_CIT0027","article-title":"Space Data and Information Transfer Systems\u2014Audit and Certification of Trustworthy Digital Repositories","author":"International Organization for Standardization","year":"2012"},{"key":"2019100601203050300_CIT0028","unstructured":"PATB Ltd\n          , 2017, \u201cPrimary Trustworthy Digital Repository Authorisation Body Ltd, Audit and Certification,\u201d Overview, http:\/\/www.iso16363.org\/iso-certification\/overview\/, Accessed Sept. 1, 2017."},{"key":"2019100601203050300_CIT0029","article-title":"Conformity Assessment\u2014Requirements for Bodies Providing Audit and Certification of Management Systems\u2014Part 1: Requirements","author":"International Organization for Standardization","year":"2015"},{"key":"2019100601203050300_CIT0030","article-title":"Industrial Automation Systems and Integration\u2014JT File Format Specification for 3D Visualization","author":"International Standards Organization","year":"2012"},{"key":"2019100601203050300_CIT0031","doi-asserted-by":"crossref","DOI":"10.6028\/NIST.IR.8202","article-title":"Blockchain Technology Overview","author":"Yaga","year":"2018"},{"issue":"1","key":"2019100601203050300_CIT0032","doi-asserted-by":"publisher","first-page":"1636","DOI":"10.1002\/iis2.2018.28.issue-1","article-title":"System Lifecycle Handler\u2014Spinning a Digital Thread for Manufacturing","volume":"28","author":"Bajaj","year":", 2018","journal-title":"INCOSE Int. Symp."},{"key":"2019100601203050300_CIT0033","article-title":"ISO 8601 Date and Time Format","author":"International Organization for Standardization","year":"2018"},{"key":"2019100601203050300_CIT0034","article-title":"Information Technology\u2014Metadata Registries (MDR)\u2014Part 1: Framework","author":"International Organization for Standardization","year":"2015"},{"key":"2019100601203050300_CIT0035","author":"Open Applications Group","year":"2018"},{"issue":"1","key":"2019100601203050300_CIT0036","doi-asserted-by":"publisher","first-page":"45","DOI":"10.1016\/j.procir.2014.07.004","article-title":"On Architecting and Composing Through-Life Engineering Information Services to Enable Smart Manufacturing","volume":"22","author":"Ivezic","year":", 2014","journal-title":"Procedia CIRP"},{"key":"2019100601203050300_CIT0037","article-title":"Securing the Digital Threat for Smart Manufacturing: A Reference Model for Blockchain-Based Product Data Traceability","author":"Krima","year":"2018"},{"key":"2019100601203050300_CIT0038","article-title":"Configuration Management Standard","author":"SAE International","year":"2011"},{"key":"2019100601203050300_CIT0039","first-page":"19","volume-title":"Trustworthiness Attributes and Metrics for Engineering Trusted Internet-Based Software Systems","author":"GolMohammadi","year":"2014"},{"key":"2019100601203050300_CIT0040","doi-asserted-by":"publisher","first-page":"191","DOI":"10.1016\/j.cirpj.2017.04.002","article-title":"Reference Architecture to Integrate Heterogeneous Manufacturing Systems for the Digital Thread","volume":"19","author":"Helu","year":"2017","journal-title":"CIRP J. Manuf. Sci. Technol."},{"key":"2019100601203050300_CIT0041","article-title":"Mtconnect Standard: Part 1\u2014Overview and Protocol","author":"MTConnect Institute","year":"2014"},{"issue":"5","key":"2019100601203050300_CIT0042","doi-asserted-by":"publisher","first-page":"051008","DOI":"10.1115\/1.4034625","article-title":"Promoting Model-Based Definition to Establish a Complete Product Definition","volume":"139","author":"Ruemler","year":"2016","journal-title":"J. Manuf. Sci. Eng."},{"key":"2019100601203050300_CIT0043","doi-asserted-by":"crossref","DOI":"10.1115\/MSEC2017-2979","article-title":"Towards Identifying the Elements of a Minimum Information Model for Use in a Model-Based Definition","author":"Miller","year":"2017"},{"key":"2019100601203050300_CIT0044","article-title":"Industrial Automation Systems and Integration\u2014Product Data Representation and Exchange\u2014Part 21: Implementation Methods: Clear Text Encoding of the Exchange Structure","author":"International Organization for Standardization","year":"2016"}],"container-title":["Journal of Computing and Information Science in Engineering"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/asmedigitalcollection.asme.org\/computingengineering\/article-pdf\/doi\/10.1115\/1.4042839\/5998697\/jcise_19_4_041003.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"http:\/\/asmedigitalcollection.asme.org\/computingengineering\/article-pdf\/doi\/10.1115\/1.4042839\/5998697\/jcise_19_4_041003.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,10,6]],"date-time":"2019-10-06T05:20:42Z","timestamp":1570339242000},"score":1,"resource":{"primary":{"URL":"https:\/\/asmedigitalcollection.asme.org\/computingengineering\/article\/doi\/10.1115\/1.4042839\/632806\/Method-for-Enabling-a-Root-of-Trust-in-Support-of"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,6,3]]},"references-count":44,"journal-issue":{"issue":"4","published-print":{"date-parts":[[2019,12,1]]}},"URL":"https:\/\/doi.org\/10.1115\/1.4042839","relation":{},"ISSN":["1530-9827","1944-7078"],"issn-type":[{"value":"1530-9827","type":"print"},{"value":"1944-7078","type":"electronic"}],"subject":[],"published":{"date-parts":[[2019,6,3]]},"article-number":"041003"}}