Microchip Introduces Security Solution Designed for IoT Devices Connected to the Amazon AWS Cloud Platform

Amazon announced its long-awaited AWS IoT IoT application platform at its re:Invent Developers Conference on October 9, 2015.

According to Amazon, this cloud platform "allows networked devices to easily and securely interact with cloud applications and other devices." The platform will be able to support billions of devices and trillions of messages, "and can be sent to AWS terminals and other devices securely and reliably after processing this information."

AWS IoT will be integrated with Lambda, Amazon Kinesis, Amazon S3 and Amazon Machine Learning (Amazon Machine Learning) and Amazon DynamoDB for IoT application development, infrastructure management and data analysis.

Microchip Technology Inc., the world's leading provider of integrated solutions for integrated microcontrollers, mixed-signal, analog devices and flash memory, launched its first industry-first IoT connection to Amazon Amazon Web Services (AWS) in August. IoT) End-to-end security solution for cloud-based Internet of Things (IoT) devices. Microchip and Amazon AWS are working together to develop this integrated solution that enables IoT devices to easily and quickly meet AWS's mutually validated IoT security model standards. With Microchip's new security solution, enterprise users can apply the best security practices from evaluation to production. The new solution not only greatly enhances security performance, but also simplifies the supply chain. It is one of the fastest ways to connect to the AWS cloud service platform.

Currently, third-party vendors that manufacture devices that connect to AWS IoT services must perform the following specific behaviors to meet the standards of the advanced security model. First, they must pre-register the security permissions of the AWS server to build a trust model. Second, they must generate a unique key for each IoT device that is mathematically associated with the previously pre-registered security rights. Finally, the unique device key must be kept secret throughout the life of the device. How to generate and safely process these unique keys in production at the time of mass production is a huge challenge, especially if the level of credibility and compliance of third-party vendors is not the same.

And Microchip's new end-to-end security

The solution completes this process through three production steps. First, in the evaluation and engineering design phase, the AT88CKECC toolkit helps customers meet the security standards of the AWS mutual authentication model and easily connect to the AWS IoT platform. Then, in the prototyping and pre-production phases, the safety standards are met with the AWS-ECC508 device. Finally, during the production phase, the device will be customized to ensure the security of the information in the customer's application.

As a result, customers simply solder the device to the board and connect it to the host MCU through I2C, while the host MCU runs the AWS Software Development Kit (SDK) that takes advantage of the ECC508 device for AWS IoT. Once completed, there is no need to load the unique keys and certificates required for verification during device production, as AWS will recognize the pre-configured AWS-ECC508 without any intervention. All information is contained in a small (3&TImes; 2 mm), easy-to-deploy encryption kit.

AWS and ECC508 devices have a wide range of mutually-validated security features that complement each other and complement each other. For environmental and physical tampering, the device has strong protection capabilities, including security countermeasures for expert-level intrusion attempts. In addition, the device features a high-quality random number generator that generates a unique security key internally and seamlessly adapts to various production processes in the most cost-effective manner. A typical IoT device usually contains a small [8-bit] MCU and is powered by a battery. It is often limited by available resources, such as providing low latency response to central processing unit (CPU) performance, storage and code space for secure protocols, and power consumption to extend battery life. The ECC508 device features cryptographic acceleration independent of low-power processors and is compatible with the widest range of resource-constrained IoT devices.

Nuri Dagdeviren, vice president and general manager of security products at Atmel, a wholly-owned subsidiary of Microchip, said: "We know that implementing AWS mutual authentication in MCUs is often more complicated. Customers will need to have some understanding of how to ensure secure software deployment. And this often creates a huge obstacle. We have a long-term and stable relationship with AWS. We are very excited to have the opportunity to work with the world's largest cloud service providers to build a solution to help our customers. Connect to the AWS cloud platform with ease and security."

Marco ArgenTI, vice president of mobile and IoT division of Amazon Web Services, said: "We have a strong and stable relationship with Microchip. We are very pleased to provide world-class solutions to help customers deploy secure and scalable on our cloud service platform. IoT solutions. For all companies we work with, adopting the best security practices is a key step in achieving the common goal of providing our customers with the best and most secure IoT platform available. We believe this new solution The solution will be one of the easiest and most cost-effective ways to help customers comply with our best security practices."