The first pre-configured iot security solution for deployments of any size

     As the number and types of connected devices proliferate, the diversity and security vulnerabilities of the iot market pose a huge challenge for developers. Hardware-based security is the only way to protect keys from physical attacks and remote extraction. But providing the appropriate hardware and software configurations for each device requires significant security expertise, development time, and cost. With the number of connected devices produced by vendors around the world ranging from a few hundred to millions per year, the scalability of the architecture can be a major barrier to deployment.

     Manufacturers typically only provide configuration support for high-volume orders, while companies with low to medium scale deployments can only use lower performance products. To meet the needs of the mass market, Microchip Technology introduced the industry's first pre-configured solution using the ATECC608A security element to provide secure key storage for low -, medium - and high-capacity device deployments. The Trust platform for Microchip's CryptoAuthenticaTIon™ family helps companies of all sizes easily implement secure authentication.

     The Microchip Trust platform consists of three layers that offer either pre-configured security elements out of the box or fully customizable security elements, allowing developers to choose the most suitable platform based on their individual design. As the first mass-market, ready-to-use secure authentication solution, the first layer of the Trust platform is Trust&GO, which offers zero-touch pre-configured security components with a minimum order quantity (MOQ) as low as 10 pieces. Device credentials are pre-programmed, loaded, and locked in the ATECC608A for automatic cloud login or LoRaWAN™ login authentication.

     At the same time, the corresponding certificates and public keys are delivered in the form of a "manifest" file that can be downloaded from Microchip's direct sales website and authorized distributors. In addition to saving months of development time, the new solution significantly eliminates other hassles, enabling mass market customers to easily secure and manage edge devices without the additional costs of third-party configuration services or certificate authorities.

     The Microchip Trust platform is flexible to use and supports customization to authenticate any public or private cloud infrastructure. For customers with more customization needs, the solution also offers TrustFLEX and TrustCUSTOM platforms. Solution Layer 2 TrustFLEX provides the flexibility to use a customer-selected certificate authority while still benefiting from pre-configured use cases. These use cases include baseline security measures such as Transport Layer Security Protocol (TLS) enhanced authentication (for connecting to any IP-based network using any certificate chain), LoRaWAN authentication, secure initiation, over-the-air (OTA) updates, IP protection, user data protection, and key rotation, which reduces the complexity of device customization, Shorten customization time without the need for custom part numbers. For customers who only need a custom design, the third layer in the program - TrustCUSTOM - provides customers with specific configuration capabilities and custom credential Settings.

     Nuri Dagdeviren, vice president of Microchip's Security Products business unit, said: "The growing number of successful attacks on software-based security solutions highlights the need for companies to adopt industry best practices, such as isolating private keys in security components. "The Microchip Trust platform enables companies of all sizes to easily implement hardware-based security in a cost-effective manner, removing the barriers that previously existed when configuring devices."

     The ATECC608A provides Common Standard Joint Interpretation Library (JIL) high-level secure key storage, giving customers greater confidence that the device implements industry-recognized security practices and the highest level of secure key storage. Have a hardware-based trust root store and encryption countermeasures for maximum protection against known physical attacks. Microchip's secure production facility ensures that the key is secure and not exposed to any party during the configuration or use of the device.