Next Generation Technologies for Securing Today’s Supply Chain Tracking 2.0 A Resource Tracking System for Loosely Coupled Networks Presented to: Cyber Security Expo Memphis, TN October 7, 2011 Presented by: Randy M. Walker Oak Ridge National Laboratory walkerrm1@ornl.gov

Oak Ridge National Laboratory evolved from the Manhattan Project The availability of abundant power and water, thanks to TVA, contributed to the selection of the Oak Ridge area as a site for the World War II Manhattan Project. (Other factors: Relative remoteness of site, and climate, which allowed construction close to year round.) R&D conducted in Oak Ridge was critical in the development of the first atomic weapons. ORNL in 1943 The Clinton Pile was the world’s first continuously operated nuclear reactor 2 Managed by UT-Battelle for the Department of Energy 2

Today, ORNL is DOE’s largest science and energy laboratory $1.3B budget 4,350 employees 3,900 research guests annually $350 million invested in modernization World’s most powerful open scientific computing facility Nation’s largest concentration of open source materials research Nation’s most diverse energy portfolio Operating the world’s most intense pulsed neutron source Managing the billion-dollar U.S. ITER project TODAY: ORNL has well-defined research capabilities (developed through its performance of mission assignments) that are applied to meet the needs of the Department of Energy and other customers, including the Department of Defense, the Department of Homeland Security, NASA, the Nuclear Regulatory Commission, and other federal agencies, as well as other public and private-sector entities. Our billion-dollar budget comes to us in projects of various sizes for these many customers. 3

Global Supply Chain data is not connected End User Factory Motor Carrier Airport Motor Carrier Air Carrier Manufacturer Customs Warehouse Multi Modal Carrier Freight Forwarder

Lots of tracking, but no end-to-end visibility 6 ORNL 5 UPS 2 LYLL 1 4 Int’l Paper Staples 3 Staples 25 February 2019

Tracking Technology: A Constantly Evolving Industry and an Interoperability Challenge 25 February 2019

Supply Chain Information Conundrum: How to Access Trapped Supply Chain Data to Increase Productivity Established International Regulations Deployed Technologies & Standards Trapped Supply Chain Information Multiple Federal Databases and Lists Recognized Proprietary Systems

ORNL is Focusing on Web 2.0 Technologies to Connect Global Supply Chain Partners

Web 2.0 Principles = Tracking 2.0 Concept What are the underlying Web 2.0 principles that ORNL uses to implement its Tracking 2.0 solutions?

What is Tracking 2.0? Tracking 2.0 is a term ORNL has coined to describe the use of social media concepts and Web 2.0 principles to interface otherwise incompatible supply chain networks to both existing and emerging software and hardware technologies.

The Ubiquitous, All-Purpose Web Address Link In Tracking 2.0, all tracking codes and technologies translate to Web addresses (URLs) that point to tracking information FedEx Tracking Number http://www.fedex.com/Tracking?tracknumbers=39827516310000049859670463312017 UPS Tracking Number http://www.ups.com/WebTracking/processInputRequest?tracknum=1Z19Y76W0242363365 DOD Cage Code http://www.bpn.gov/bincs/choose.asp?cage=77272 DOD Part Number http://www.dlis.dla.mil/webflis/pub/pub_search.aspx?Par=True&part=414VS806-6 DOD National Stock Number http://www.dlis.dla.mil/webflis/pub/pub_search.aspx?niin=1680011237643 Networked Device Mac Address http://www.coffer.com/mac_find/?string= 11

In a Web 2.0 social network vets and introduces A to B Social Networking In a Web 2.0 social network vets and introduces A to B

Trusted Social Networking for Supply Chain Tracking Just as a social network web site makes the “six degrees of separation” amongst its members visible and accessible, Tracking 2.0 web sites provide the same access and visibility for the systems and components of an otherwise incompatible supply chain network.

Combining Links and Social Networks NY Times Article LinkedIn Study Group Web 1.0 sharing Web 2.0 sharing 14

Tracking 2.0 (Concept) Trust Network Enterprises Web App Mobile Apps GEN (ret) Bassham trusts this FedEx 98756753921 QR Code Scanner GPS Individuals Location Mashup Timestamp Other Tracking

EPA’s & DOE’s Dilemma: The GRadStram Model 60 high-risk radioactive sources were lost or stolen between 1994 and 2005, with an average of one per year not recovered Between 1999 and 2005, the Department of Energy recovered 12,024 sources that were considered vulnerable or at a high-risk for theft or misuse An average of about 300 sources of all types are reported lost or stolen each year

How GRadSTraM Tracking 2.0 Worked (Atom Syndication Format) Royal Mail User Interface Airlines/Airport User Interface USPS User Interface NPL User Interface Tracking 2.0 Development ORNL User Interface Trusted Network Real-Time Alerts Repository User Tags Quick Search Expandable Atomic Framework (Atom Syndication Format) Intelligent Agents Interface Interface Interface Interface Interface ORNL USPS Carriers/Airports Royal Mail NPL Paperwork RFID Reader Paperwork Last Mile RFID Barcode Scale Paperwork RFID Reader Barcode Scale Radiation Monitor GPS Location Paperwork BarCode RFID Paperwork RFID Reader Bar Code Reader

Timeline Interface to Tracking 2.0 How Tracking 2.0 Works Timeline Interface to Tracking 2.0

Timeline Interface to Tracking 2.0 How Tracking 2.0 Works Paperwork RFID Reader Shipment ---- ---- ---- Timeline Interface to Tracking 2.0

Timeline Interface to Tracking 2.0 How Tracking 2.0 Works Paperwork RFID Reader Shipment ---- ---- ---- Paperwork Last Mile RFID Barcode Scale Manifest ---- ---- ---- Timeline Interface to Tracking 2.0

Timeline Interface to Tracking 2.0 How Tracking 2.0 Works Paperwork RFID Reader Shipment ---- ---- ---- Paperwork Last Mile RFID Barcode Scale Manifest ---- ---- ---- Carrier 2 ---- ---- ---- Timeline Interface to Tracking 2.0 Carrier 1 ---- ---- ---- Paperwork RFID Reader Barcode Scale Radiation Monitor GPS Location Air Carriers/Airports

Timeline Interface to Tracking 2.0 How Tracking 2.0 Works Shipment ---- ---- ---- Paperwork RFID Reader Paperwork BarCode RFID Carrier 2 ---- ---- ---- Paperwork Last Mile RFID Barcode Scale Manifest ---- ---- ---- Carrier 2 ---- ---- ---- Timeline Interface to Tracking 2.0 Carrier 1 ---- ---- ---- Paperwork RFID Reader Barcode Scale Radiation Monitor GPS Location Air Carriers/Airports

Timeline Interface to Tracking 2.0 How Tracking 2.0 Works Shipment ---- ---- ---- Paperwork RFID Reader Paperwork BarCode RFID Carrier 2 ---- ---- ---- Paperwork Last Mile RFID Barcode Scale Manifest ---- ---- ---- Carrier 2 ---- ---- ---- Timeline Interface to Tracking 2.0 RFID Reader ---- ---- ---- Carrier 1 ---- ---- ---- Paperwork RFID Reader Bar Code Reader Paperwork RFID Reader Barcode Scale Radiation Monitor GPS Location Air Carriers/Airports

Security Provides the Motivation to Act DOT DHS NRC Identify, Track and Monitor Security Sensitive Hazardous Materials Identify, Track and Monitor Radioactive Materials in Quantities of Concern National Source Tracking System Regulations State/Local Law Enforcement, Commercial Industry, Commercial Carriers