GlobalSign and Intrinsic-ID Deliver Scalable Hardware-Rooted Device Identities for the IoT Ecosystem

Joint solution provides a cost-effective option for provisioning unique, certified device identities rooted in hardware that can be adapted to any existing manufacturing workflow

Low cost, embedded security solution enables manufacturers to retrofit and enhance security of existing products with just software

Oct 29, 2016 - GMO  GlobalSign ( www.globalsign.com), a leading provider of identity and security solutions for the Internet of Everything (IoE), and  Intrinsic-ID, the leader in embedded authentication based on Physical Unclonable Functions (PUFs) announced today that they are partnering to provide original equipment manufacturers (OEMs) scalable, flexible and affordable security for the Internet of Things (IoT). The GlobalSign and Intrinsic-ID solution provides a cost-effective option for provisioning unique, certified device identities rooted in hardware that can be adapted to any existing manufacturing workflow. The joint technology provides distinctive identities for microchips embedded in IoT devices, which are then certified so that they will be trusted in a customer’s IoT ecosystem.

IoT environments, whether automotive, industrial control systems, critical infrastructure, medical equipment or smart manufacturing floors, require strong security systems to prevent unauthorized control of devices, protect against advanced threats and detect counterfeit attempts. Traditionally, augmenting security into IoT environments has been difficult and cumbersome. Now a software-based SRAM PUF can be retrofitted into any existing microcontroller, enhancing present security or providing security where there once was none at all, even for constrained devices.

“Smart devices have a unique fingerprint hidden in their SRAM cells,” says Pim Tuyls, CEO of Intrinsic-ID. “We leverage these unclonable identities to derive and protect cryptographic keys. By integrating PUF security with GlobalSign’s proven PKI solutions we offer a scalable and universally compatible solution that builds an unbroken chain of trust from chip to cloud.”

Intrinsic-ID’s key management solution software-based identity algorithms leverage existing SRAM capabilities to create unique, unspoofable device fingerprints which prevent the cloning of systems. GlobalSign’s cloud-based, high-volume certificate service certifies these fingerprints and adds public key infrastructure (PKI) capabilities, resulting in strong device identities and protection against untrusted applications and advanced attacks. Cryptographic operations and keys are never stored, so they are not present on the device when it is powered off. They are only created when needed using device-dependent PUFs.

The Integrated Solution Simplifies Design and Lowers Costs

The one-chip security solution offers flexibility and overall decreased costs, since it doesn’t require on-site support, and there is no need for an external cryptographic chip. Integrating identity provisioning into existing workflows allows for maximum throughput and simplified logistics. IoT cloud enrollment tasks, including device registration, integration with legacy inventory systems and role/permission policy assignment are automated.

Cloud-based certificate provisioning lowers costs by eliminating the need for an appliance-based solution. Delegating device identity enrollment to contract manufacturers can further reduce costs. GlobalSign’s high-volume certificate issuance service is built to meet the speed and production demands of the IoT and is able to issue thousands of certificates per second. In addition, GlobalSign’s certificate revocation service allows manufacturers to mitigate supply chain risks such as overproduction.

“IoT security depends on the ability to trust the integrity and identity of connected devices. PKI certified identities from GlobalSign and SRAM-PUF security from Intrinsic-ID are complementary technologies that attest to and protect the identity of these devices. SRAM-PUF is an attractive technology because it can be incorporated into a wide range of devices providing security for new and existing designs at low cost,” said Zachary Short, Principal Software Architect. “PKI certificates are the standard when it comes to authentication. They provide a secure foundation for trusted communication in a multitude of IoT protocols. GlobalSign’s high-volume certificate enrollment services provide the credentials your devices need delivered at scale.”

Overview of Key Benefits:

  • The solution can be retrofitted to existing microcontrollers; no additional hardware needed
  • Uncloneable, short-lived cryptographic keys protect against spoofed devices and even the most advanced invasive hardware attacks
  • PKI-based credentials support device authentication for most IoT protocols
  • Lightweight cryptographic support capabilities for constrained devices with ECC algorithms and streamlined certificate request formats
  • High-volume enrollment service capable of issuing thousands of device IDs per second
  • Provisioning process is automated and can be added into existing manufacturing flows

Learn More at the Intrinsic-ID Security Summit in Mountain View – Oct 24, 2016

Nisarg Desai, Product Manager of IoT Solutions, GlobalSign will demonstrate strong device identity for trust and security in IoT at Intrinsic-ID’s Security Summit. Attendees of the event will gain insights on the security needs of the Silicon-to-Cloud ecosystem. For more information and registration details, please visit: https://www.intrinsic-id.com/intrinsic-id-security-summit/.

Visit GlobalSign at IoT Solutions World Congress in Barcelona – Oct. 25-27, 2016

GlobalSign will be at Booth D541 in the Industrial Internet Consortium (IIC) Pavillon. The GlobalSign and Intrinsic-ID solution will be demoed at the booth, in addition to GlobalSign’s full range of IoT solutions.

About Intrinsic-ID

Intrinsic-ID is the world leading embedded authentication company based on the unique and patented technology called SRAM Physical Unclonable Function or SRAM PUF.  Its solutions and products create a unique ID and cryptographically secure keys from the physical behaviour of the SRAM PUF.  This key is invisible to attackers, unique per device and can be leveraged to authenticate the chip, the data on the chip, the device and even the whole system. On top of this, Intrinsic-ID offers solutions to protect the supply chain. These range from tracking and monitoring chips and devices (even in the case of remote contract manufacturers) to low cost, centralized key provisioning and protection against counterfeiting and overbuilding. Due to its simplicity, these products can be applied to all modern chips, microcontrollers and CPUs without making a change to the hardware. Currently this technology is being used by its customers in the field to protect the most sensitive payment, content, sensor and government data and systems. Learn more at www.intrinsic-id.com or follow us on Twitter via @IntrinsicID or contact us at  Email Contact.

About GMO GlobalSign

GlobalSign is the leading provider of trusted identity and security solutions enabling businesses, large enterprises, cloud-based service providers and IoT innovators around the world to conduct secure online communications, manage millions of verified digital identities and automate authentication and encryption. Its high-scale PKI and identity and access management (IAM) solutions support the billions of services, devices, people and things comprising the Internet of Everything (IoE). The company has offices in the Americas, Europe and Asia.

About GMO Cloud KK

GMO Cloud K.K. (TSE: 3788) is a full-service IT infrastructure provider focused on cloud solutions. Established as a hosting company in 1996, the company has managed servers for more than 130,000 businesses and now has 6,500 sales partners throughout Japan. In February of 2011, the company launched GMO Cloud to enhance its focus on cloud-based solutions. Since 2007, the company has also grown its GlobalSign SSL security brand through offices in Belgium, U.K., U.S., China and Singapore. For more information please visit  http://ir.gmocloud.com/english/.

About GMO Internet Group

GMO Internet Group is an Internet services industry leader, developing and operating Japan’s most widely used domain, hosting & cloud, ecommerce, security, and payment solutions. The Group also comprises the world’s largest online FX trading platform, as well as online advertising, Internet media, and mobile entertainment products. GMO Internet, Inc. (TSE: 9449) is headquartered in Tokyo, Japan. For more information please visit  http://www.gmo.jp/en/.




Review Article Be the first to review this article
DAC 2020

 True Circuits: Ultra PLL

Featured Video
Editorial
More Editorial  
Latest Blog Posts
Modesto (Mo) CasasGlobal Business in EDA
by Modesto (Mo) Casas
The Contingent Purchase Order Reassures Buyer and Seller
Bob Smith, Executive DirectorBridging the Frontier
by Bob Smith, Executive Director
Meet the New Cylynt, Fighting Software Piracy Around the Globe
Anupam BakshiAgnisys Automation Review
by Anupam Bakshi
Smart Assembly of SoC Designs
Jobs
Digital Design ASIC Manager for EDA Careers at RTP, North Carolina
Senior Analog Design Engineers #5337 for EDA Careers at EAST COAST, California
Senior Application Engineer Formal Verification for EDA Careers at San Jose and Austin, California
Senior Physical Design/Layout Engineer for EDA Careers at EAST COAST, California
Upcoming Events
57th Design Automation Conference 2020 at San Francisco CA - Jul 19 - 23, 2020
SEMICON West 2020 - Virtual Event at - Jul 20 - 23, 2020
Semicon Southeast Asia 2020 at MITEC Kuala Lumpur Malaysia - Aug 11 - 13, 2020
Drive World Conference & Expo at Santa Clara Convention Center Santa Clara CA - Aug 11 - 13, 2020
DownStream: Solutions for Post Processing PCB Designs
Verific: SystemVerilog & VHDL Parsers
TrueCircuits:



© 2020 Internet Business Systems, Inc.
25 North 14th Steet, Suite 710, San Jose, CA 95112
+1 (408) 882-6554 — Contact Us, or visit our other sites:
AECCafe - Architectural Design and Engineering TechJobsCafe - Technical Jobs and Resumes GISCafe - Geographical Information Services  MCADCafe - Mechanical Design and Engineering ShareCG - Share Computer Graphic (CG) Animation, 3D Art and 3D Models
  Privacy PolicyAdvertise