Integrity and Transparency for Trustworthy Supply Chain
as verifiable credentials in the form of Digital Product Passports( i. e. a particularly focused BOM), Digital Conformance Credentials( i. e. verifiable assessment of claims), and Digital Traceability Events( i. e. macro-level provenance details), as depicted in Figure 3-2.
Figure
3-2: Summary view of UNTP information content.
There is a significant conceptual overlap between the DPP, UNTP and BOM / SBOM work but currently no coordination or alignment exists between the three as shown in Table 3-1. Given that digital product passports are basically a specific subclass of BOMs, the lack of coordination and interoperability between BOM / SBOM efforts and UNTP at the data standards, process, or tooling levels could likely be troublesome and expensive for all involved.
Product Claims Provenance
Parties( organizations, people, etc.)
Locations
UNTP Yes Yes Yes( general) Yes Yes DPP Yes Yes Yes( general) Yes Yes
BOM / SBOM Yes Yes Yes( detailed) Yes Yes Table 3-1: Relevant conceptual overlap between UNTP, DPP, and BOM / SBOM efforts.
4 SHARING SUPPLY CHAIN DATA
While much discussion has occurred around sharing these forms of insightful data the approaches for sharing come down to:( 1) making it public in an easily accessible location or( 2) sharing with those that have permission to have the information( either as part of purchasing, under a contract, or through an NDA). How to support permissioned access to this type of data
64 May 2025