Cloud-based software as a service leverages secure authentication ICs to enableself-service custom PKI, streamlinedin-field provisioning and lifecycle management for IoT devices
As the world comes to rely on interconnected IoT systems—for everything from household items like smart thermostats, virtual assistant technology and digital door locks to medical and industrial applications—the need for reliable cybersecurity on embedded systems has never been greater.To increase security on IoT products and facilitate easiersetup and management, Microchip Technology (Nasdaq: MCHP) has added the ECC608 TrustMANAGERwithKudelskiIoTkeySTREAM,Software as a Service (SaaS) to its Trust Platform portfolio of devices, services and tools.
With security credentials managed and updated in the field via keySTREAM—instead of being limited to a static certificate chain implemented during manufacturing—the ECC608 TrustMANAGERallows custom cryptographic credentials to beaccurately provisioned at the end point without requiring supply chain customization and can be managed by the end user. keySTREAM offers a device-to-cloud solution for securing key assetsend-to-end in an IoT ecosystem throughout a product’s lifecycle.
The ECC608 TrustMANAGER relies ona secure authentication IC thatis designed to storeand protectcryptographic keysand certificates,whichare then managed by the keySTREAM SaaS. The combined silicon component and key management SaaS allow the user to set up a self-serve root Certificate Authority (root CA), and the associated public key infrastructure (PKI) secured by Kudelski IoT, to create and manage a dynamic certificatechain and provisiondevices in thefield the first time they are connected. Once claimed in the SaaS account, the devices are automatically activated in the user’s keySTREAM service via in-field provisioning.
“As the volume of connected devices rapidly increases and security standards and regulations tighten, IoT designers are seeking more efficient ways of managing their devices once products are in their customers’ hands,” said Nuri Dagdeviren, corporate vice president of Microchip’s securitycomputing group. “Our partnershipwith Kudelski and adding keySTREAM to our ECC608 TrustMANAGERenables customers to manage, scale and update IoT ecosystems efficiently via a cloud-based security SaaS for in-field provisioning and certificate management.”
Security standards and upcoming regulations are increasinglyrequiringupgradability of security infrastructure for IoT devices. This is a difficult task with traditionally static IoT security implementations,which require physical upgrades like changing out the security ICs in each deviceto stay in compliance. With the ECC608 TrustMANAGER, the process is automated and highly scalable,allowing devices to be managed securely and efficiently throughout their lifecycle.It also enableseasy device ownership management without needing to change hardware, as security keys are updated digitally from the cloud into the device.This approach streamlines the supply chain processes for distribution partners as well.
“The ECC608 TrustMANAGER with keySTREAM marks a pivotal moment in our quest to secure the IoT landscape and make provisioning easier. Our collaboration with Microchip is not just about bringing advanced security solutions to the market, it’s about setting a new standard for smart device security across the board,” said Hardy Schmidbauer, senior vice president of Kudelski IoT. “By leveraging Microchip’s renowned semiconductor technologies alongside KudelskiIoT’s security services, we are poised to deliver protection and a new ease of provisioning for IoT device manufacturers.”
This type of dynamic in-field provisioning and device management meets IoT security standards and will be useful in device certificate updates needed to stay in compliance with evolving security requirements.The keySTREAM SaaS allows for ongoing updates of keys designed to prevent and protect against evolving threats and security requirements.In-field provisioning also removes the need for customization for more efficient manufacturing.
The ECC608 is the first security IC in Microchip’s TrustMANAGER series.To get started, download the Trust Platform Design Suite and test the keySTREAM use case under the ECC608TrustMANAGER.
Pricing and Availability
The ECC608 TrustMANAGERis available starting at $0.75 each in 10,000-unit quantities. Anactivation fee is applied only after the device has been connected for the first time. For additional information and to purchase, contact a Microchip sales representative, authorized worldwide distributor or visit Microchip’s Purchasing and Client Services website, www.microchipdirect.com.
