Hacker News new | ask | show | jobs
by crispyambulance 2038 days ago
There's a common processing step in PCB manufacturing that occurs right after SMT (reflow soldering of components that have been placed on the PCB by a pick-and-place machine). It is known as AOI (automated optical inspection).

What happens during AOI is that a camera images every part of the PCB and then uses old school machine vision to identify problems like missing/misplaced/misoriented components, wrong parts, solder mishaps, and contamination/foreign-objects. In practice, it's not perfect, but it can detect gross problems and is valuable in high-volume or high-cost pcb's. The images are usually not stored, but processed "on the fly" by machine vision applications.

It's good to hear that Alitheon is taking this to the next level. As a MFG engineer, I've long felt that AOI has been under-utilized. There are multiple reasons to more fully analyze these images besides security concerns and given the low cost of storage, I think it's becoming not unreasonable to store entire imagesets of individual high-cost PCB's for the life-span of the product.

As for the big-picture of security, however, it really begins earlier in the supply chain before the components even arrive at the factory in reels. By the time that something gets to a factory, one can't do much more than read-out things like id's and perform functional screens. That's why manufacturers have, sometimes, long qualification processes before they even consider a new component or its vendor.

1 comments

Indeed, the challenge is storage of the information and immutability, since everyone needs to trust the database of unique IDs.

I hate to say it, but if you have connectivity (and directly connecting your production equipment to the internet seems foolish) then a distributed amongst manufacturers blockchain could provide the secure public database needed. It might be wise to batch the UIDs logged each shift to minimize contact and computation. Your test equipment (associated CPUs) could be searching for a new solution and separately upload the batch of UIDs each time it found one.