 |
In this diagram, we can see the detailed process of SBOM registration.
Step 1: The process begins when an SBOM is registered. For example, a software developer submits an SBOM for a specific software product, which includes the name XXX, identifier, and relationships to other components.
Step 2: This SBOM is then stored in the SBOM registry. This storage is immutable, ensuring that the data cannot be tampered.
Step 3: Then, a smart contract for the software XXX is created. This smart contract contains not only software information defined in the SBOM but also all the logic for managing dependencies.
Step 4: The system then requests the DID documents for any related components—denoted here as YYY and ZZZ.
Step 5: The DID resolver fetches these documents from the DID registry. These documents also contain the address of corresponding smart contract.
Step 6: The smart contract SCxxx then links to other smart contracts SCyyy and SCzzz, which manage the related components. This linking helps maintaining an up-to-date view of all dependencies and interactions between software components.
Step 7: Finally, the DID document of XXX is registered in the DID registry.
|
IEEE/ICACT20250067 Slide.10
[Big Slide]