Microchip releases ECC508 IoT security solution | Automation.com

Microchip releases ECC508 IoT security solution

August 122016
Microchip releases ECC508 IoT security solution

August 12, 2016 — Microchip Technology, a provider of microcontroller, mixed-signal, analog and Flash-IP solutions, announced the ECC508, a security solution for Internet of Things (IoT) devices that connect to Amazon Web Services IoT (AWS IoT). Microchip and AWS collaborated to develop this integrated solution to help IoT devices comply with AWS’s mutual authentication IoT security model. Using Microchip’s security solution will help companies implement these security best practices from evaluation through production.

Currently, third party manufacturers of devices that connect to AWS IoT service must take specific actions to comply with the advanced security model. First, they must pre-register their security authority to AWS servers in order to establish a trust model. Second, for each IoT device they must generate unique cryptographic keys that are mathematically linked to the pre-registered security authority.  Finally, the unique device keys must remain secret for the life of the device. In volume production, the generation and secure handling of these unique keys can be a daunting challenge in the chain of manufacturing especially where third parties with different trust and compliance levels are involved.

Microchip’s end-to-end security solution handles this process during three production steps. First, the AT88CKECC kit will allow customers to meet the security standard of AWS’s mutual authentication model and easily connect to the AWS IoT platform during the evaluation and engineering phase. Second, the AWS-ECC508 device assists with meeting security standards during the prototyping and pre-production phase. Finally, devices will be customized for production stages to ensure information security in customer applications.

Customers solder the device on the board and connect it over I2C to the host microcontroller (MCU) which runs an AWS Software Development Kit (SDK) leveraging the ECC508 device for AWS IoT. Once this is complete, there is no need to load unique keys andcertificates required for authentication during the manufacturing of the device as the AWS-ECC508 is pre-configured to be recognized by AWS without any intervention. All the information is contained in a small (3x2 mm), easy to deploy crypto companion device.

AWS and the ECC508 device complement each other with mutual authentication security capabilities.  The device has resistance against environmental and physical tampering including countermeasures against expert intrusion attempts. In addition, the device features a random number generator, the internal generation of secure unique keys and the ability to accommodate various production flows.  The ECC508 device has a low-power processor-agnostic cryptographic acceleration for compatibility with the widest range of resource constrained IoT devices.