Authentication IC with cloud-based credential service, in-field provisioning and secure updates

Microchip has added the ECC608 TrustMANAGER with Kudelski IoT keySTREAM software-as-a-service (SaaS) to its Trust Platform portfolio of devices, services and tools. 

The ECC608 TrustMANAGER security solution gives designers of IoT products a more efficient way of managing devices once products are with customers. The security solution enables custom cryptographic credentials to be accurately provisioned at the end point without requiring supply-chain customization. It also allows the end user to manage their security credentials. 

When security credentials are managed and updated in the field via keySTREAM, instead of being limited to a static certificate chain implemented during manufacturing, the benefit is a device-to-cloud solution for securing key assets end-to-end in an IoT ecosystem throughout a product lifecycle.

The ECC608 TrustMANAGER solution consists of a secure authentication IC, the Microchip ECC608, which stores and protects cryptographic keys and certificates, and the keySTREAM SaaS for key management. The combined silicon component and key management SaaS allow the user to set up a self-serve root certificate authority, and the associated public key infrastructure (PKI) secured by Kudelski IoT. This means that users can create and manage a dynamic certificate chain and provision devices in the field the first time that they are connected. 

Once claimed in the SaaS account, the devices are automatically activated in the user’s keySTREAM service via in-field provisioning.

Developers can get started with the ECC608 TrustMANAGER by downloading the Trust Platform design suite from microchip.com and testing the keySTREAM use case under the ECC608 TrustMANAGER.