Secure Vault combining security software features and PUF hardware technology
Key elements such as device identity verification, security keys, and advanced tamper protection

Silicon Labs announced SecureVault, a cutting-edge security technology that enhances the security of IoT devices.

Silicon Labs' Wireless Gecko Series 2 platform utilizes Secure Vault technology, which combines security software capabilities with Physical Unclonable Function (PUF) hardware technology, to help significantly reduce the risk of IoT security flaws and intellectual property (IP) infringement.
Secure Vault hardware provides an optimal level of security in a cost-effective wireless SoC solution, and the security subsystem, including a dedicated core, bus, and memory, is isolated from the host processor.

With a unique hardware-separated design, core functions such as security key storage management and encryption are isolated into a separate area, enhancing the security of the entire device.

Secure Vault helps product manufacturers more easily protect their brands, designs, and customer data by enhancing IoT security through a unique combination of hardware and software features.

Integrating the security system with the wireless SoC not only allows designers to simplify product development but also securely perform OTA (Over the Air) can be updated. By providing genuine software or firmware to connected devices, unexpected exploits or threats can be reduced, and sudden regulatory measures can be responded to.


Device Identity Verification
One of the biggest issues regarding connected devices is post-installation authentication. Silicon Labs’ Factory Trust Provisioning Service, which supports the Secure Programming Option feature, enables verification of the device’s security, authenticity, and certificate-based integrity after installation by issuing a Secure Device Identity Verification Certificate—equivalent to a birth certificate—for each silicon die during the IC manufacturing process.

Such device certification ensures high reliability throughout the product lifespan of the chip.


Security Key Management and Storage
Maintaining the confidentiality of security keys is directly linked to how effective the security system for devices and data access is.

Secure Vault technology encrypts security keys and separates them from application code. Since all keys are encrypted using a master encryption key generated using PUF, it effectively provides unlimited security key storage.

Each device is assigned a unique power-up signature, and a master key is generated during the power-up phase, eliminating the master key storage itself and further reducing attack vectors.


Advanced tamper detection
It provides a wide range of functions, from product enclosure tamper protection to complex silicone tamper detection through voltage, frequency, and temperature manipulation.

Hackers induce hardware or software to operate abnormally through illegal manipulation, creating vulnerabilities to glitch attacks.

By utilizing the tamper-resistant features of the secure vault, developers can respond appropriately through extreme measures such as interrupts, resets, or deletion of the security key.


Tanner Johnson, a senior cybersecurity analyst at global technology research firm Omdia, said, “Embedded security is a core requirement for IoT products, and software updates alone cannot solve hardware vulnerability issues,” adding, “Hardware components can establish the first line of defense for device security.”

Matt Johnson, Senior Vice President and General Manager at Silicon Labs, stated, “As the security landscape changes rapidly, IoT developers are under pressure to enhance device security and comply with regulatory requirements. Secure Vault enables manufacturers to design future-proof products while simplifying development and accelerating time-to-market by leveraging the most advanced integrated hardware and software security protection currently available for IoT wireless SoCs.”

Secure Vault security technology complies with Europe's GDPR and California's SB in the United States. It is an especially ideal solution for companies that need to respond to new regulatory provisions such as 327.