The U.S. Senate Proposes A New Bill On The Security Of Printed Circuit Board Defense Supply ChainSt

  Strengthen the printed circuit board and other small electronics manufacturing in the U S

According to the defense news website reported on April 29th, the U S members of the senate armed services committee, senator josh Holly (JoshHawley) recently proposed "through the transparent and persistent investment protection key circuit boards and electronic products act (PCBetterAct), to defend the defense department of PCB supply chain. Law requires the secretary of defense to support and encourage the domestic manufacturing printed circuit board (PCB) , identify imports from China, Russia, Iran and north Korea's security risks caused by PCB, and avoid using the U.S. national manufacturing PCB, the bill also would require the Treasury funds to set up a 10-year electronic supply chain, strengthen the printed circuit board and other small electronics manufacturing, improve the security of electronic product supply chain. At present, the proposal has been submitted to the senate armed services committee.

一、The background of the  bill

        The electronic manufacturing supply chain in recent years a large number of imports, the number of local companies manufacturing PCB has been reduced from 2000 in 1500 to 200, the raw materials of printed circuit board PCB is down from 30% in 2000 to 5% today. Electronics manufacturing has shifted to Asia, the PCB there has been an increase in the proportion of made in China. Holly said in a statement that the Chinese PCB pose a serious threat to U.S. defense system integrity. Priority is provided to the department of defense to ensure PCB supply chain security tools, to ensure the security of military weapons.

一、 the main contents of the bill

        Bill, points out that the department of defense electronic systems used in most of the PCB from China, it is easy to damage.The PCBETTER act PCB supply chain security will ensure that the department of defense by the following way:

  1. authorization, set up a defense funds for a decade. Funded construction, expansion and modernization of infrastructure, to develop and manufacture of advanced semiconductor, microelectronics, electronic assembly and printed circuit board; Application microelectronics, printed circuit boards, semiconductor and related technology, build a commercial competitive electronics industry, meet the demand of national security; Establish appropriate technology manufacturing factory, perform the necessary safety standards.

     2. authorization, set up a defense funds for a decade. Funded construction, expansion and modernization of infrastructure, to develop and manufacture of advanced semiconductor, microelectronics, electronic assembly and printed circuit board; Application microelectronics, printed circuit boards, semiconductor and related technology, build a commercial competitive electronics industry, meet the demand of national security; Establish appropriate technology manufacturing factory, perform the necessary safety standards.

      3. establish test, remedy and prevention mechanism, in order to solve I system contains or may contain "covers countries" manufacturing PCB security hole

      Detection mechanism: defense secretary should make a plan, test department of defense has or operating each I system is vulnerable to foreign interference, destroy, spying and attack,Remedy mechanism: find loopholes, secretary of defense should be appointed commissioner to remedy of holes, as soon as possible to take measures to lower risk to acceptable levels. Measures include: using hardware or software isolation printed circuit board; Wrong damaged, stop using or replace contain bugs of system; Or insert a reliable PCB or other hardware, does not contain known vulnerabilities for physical modification contains the vulnerability of the system.

      Prevention mechanism: the department of defense, bearded enact related laws and regulations for PCB supplier to cooperate with the investigation, in order to prevent such goods and services a hole. Laws and regulations include: the subcontractor's ownership, management, and security certificate; Penetration testing, the red team drills for goods or services system such as simulated attacks; Or subsequent model conforming to the network safety maturity model (CMM) certification. In addition, the secretary of defense and the annual report shall be submitted to congress each year the national defense commission that have holes, not leak detection and inspection system number not due diligence of the supplier list.

三．Antonym
       KPCBETTER act is raised, the defense industry association (NDIA) expressed support for the bill, policy director wes Holman, said the industry "broad support" through the "white" legislation to ensure that the defence system is not destroyed by the opponent goal hope in domestic development is safer alternative suppliers, get rid of the dependence on foreign single source supplier. International electronics industry joint association (IPC) has been lobbying the government take measures to strengthen the defense electronics industrial base, also suggested that the defense department to understand the complexity of IPC electronics supply chain.