STSAFE, security levels exceeding domestic standards

Since officially launching the STSAFE brand for IoT device security, STMicroelectronics (hereinafter ST) is expanding its STSAFE product lineup to support safe development while appropriately addressing security threats.

ST participated in the 21st World Security Expo held at KINTEX in Ilsan starting on the 20th and showcased its STSAFE and ST4SIM solutions for IoT and industrial device security.

STSAFE is a secure element product for IoT that has objectively secured security through Common Criteria (CC) certification.

At this expo, the following were exhibited: △ STSAFE-A demo, a solution optimized for easy application to IoT devices and providing the certification required for wireless fast charging; △ STSAFE-V demo, a security device for automobiles that can be applied to wireless fast charging, digital keys, and electric vehicle charging; and △ ST4SIM demo, a SIM Total solution that can connect to a data network by registering with the globally accessible Truphone network.

All STSAFE products have a sufficiently high level of security, such as EAL 4+ or EAL 5+, based on international common evaluation standards. In addition, various example codes and evaluation boards are available to enable connection with the STM32, which is the most widely used host IC for IoT devices.

▲ STSAFE-A110 Demo

STSAFE-A110 protects devices in Internet of Things (IoT) environments by preventing counterfeiting of genuine products, provides advanced authentication-based protection functions, and supports secure loading of Cloud Credentials for access, thereby enabling the registration of IoT devices on a large scale and ensuring that only authenticated devices connect to online services. In smart cities where infrastructure such as streetlights is controlled by a central system, the security of the entire system can be maintained based on STSAFE-A110 in the event of hacking attempts from the outside. This is also utilized for the security of Low Power Wide Area Network (LPWAN) devices such as Sigfox and LoRa, as well as for the security of wireless charging (Qi) devices.

STSAFE-TPM is a standardized solution for platform security. As a standard security platform module, STSAFE-TPM is a core element for maintaining the security of PCs and servers. STSAFE-TPM is best suited for ecosystems based on Windows 10/11 and Linux operating systems. All security components of STSAFE-TPM, which are CC, TCG, and FIPS certified, meet security and regulatory requirements. The product portfolio based on ST33 hardware is used in general-purpose applications as well as industrial and automotive applications.

▲ STSAFE-V110 Demo

The STSAFE-V110 security device ensures user safety and convenience by performing the authentication functions required for fast charging with authorized in-vehicle Qi chargers. As a secure turnkey solution for automotive Qi chargers, the STSAFE-V110 complies with the Qi WPC 1.3 specification. Embedded in the Qi charger, it guarantees safety by authenticating fast charging using genuine Qi-certified chargers and protects devices from damage caused by unauthorized wireless chargers. The STSAFE-V110 provides a high level of security, having received CC EAL4+ certification from a dedicated security evaluation organization.

▲ ST4SIM Demo

ST4SIM offers a diverse connectivity portfolio and provides a wide range of SIMs and embedded SIMs compatible with IoT, industrial, and automotive applications. It enables devices across various industries to connect to wireless data networks at any time while maintaining asset security. Through data network registration and activation services from ST4SIM partners (such as Truphone) collaborating with telecommunications carriers worldwide, it is possible to connect to data networks globally regardless of specific region or country.

"Securing security must be considered throughout the entire process, from the IoT device design stage to manufacturing and discontinuation," said Kwak Jae-hyun, a manager at ST. "If software security solutions are integrated with hardware-based security, cryptographic keys that form the basis of the security process can be stored in a safe environment, allowing for better preparation against external IoT security threats."