Connect to the Amazon Web Services (AWS) cloud
Easy authentication via preset ECC508

Microchip Technology (Korea Representative: Han Byung-don) announced that it is providing the industry's first end-to-end security solution for Internet of Things (IoT) devices connected to Amazon Web Services IoT (AWS IoT).

This integrated solution was developed through a collaboration between Microchip and AWS and enables IoT devices to easily and quickly meet AWS's mutual authentication IoT security model. Through this new security solution from Microchip, enterprises can implement superior security systems from the evaluation to the production phase. This solution is one of the fastest solutions for achieving a high level of security, shortening the supply chain, and connecting to the AWS cloud.

Third-party manufacturers producing devices currently connected to AWS IoT services must take special measures to meet advanced security models. First, they must establish a trust model by registering security permissions with AWS servers in advance. Second, they must generate a unique encryption key for each IoT device that is mathematically linked to the pre-registered security permissions. Third, this unique device key must be kept secret for the device's lifetime. However, generating and securely managing unique keys throughout the continuous manufacturing process of mass production is by no means an easy task. This is especially true when multiple third-party vendors with varying levels of reliability or compliance with standards are involved.

Microchip's end-to-end security solution handles this process through a three-stage manufacturing process. First, the AT88CKECC kit enables customers to meet the security standards of AWS's mutual authentication model during the evaluation and engineering phases and to connect seamlessly to the AWS IoT platform. Second, the AWS-ECC508 device ensures that security standards are met during the prototyping and pre-production phases. Third, during the production phase, it allows for the customization of devices and the achievement of information security for customer applications.

Customers can use the AWS IoT ECC508 device to easily solder the device onto a board and connect it via I2C to a host microcontroller (MCU) running the AWS SDK (Software Development Kit). Once this is done, there is no need to load unique authentication keys and certificates during device manufacturing. This is because the AWS-ECC508 is pre-configured to be recognizable by AWS without any intervention. All information is stored in a convenient, small (3mm x 2mm) encrypted companion device.

AWS and the ECC508 device naturally complement each other by utilizing comprehensive mutual authentication security features. This device offers superior defense against environmental and physical unauthorized tampering attacks, including countermeasures against expert intrusion attempts. Furthermore, it includes a high-performance random number generator, internally generates unique security keys, and seamlessly accommodates various production flows in the most efficient manner.

Typical IoT devices use small 8-bit microcontrollers and are powered by batteries. Therefore, resources such as CPU performance for low-latency responses, memory, and code space for security protocols are limited, and the amount of power that can be consumed to extend battery life is also limited. Since the ECC508 device features built-in processor-independent low-power encryption acceleration, it is suitable for various types of resource-constrained IoT devices.

Nuri Dagdeviren, Executive Vice President of the Security Products Group at Atmel, a wholly owned subsidiary of Microchip, stated, “Microchip fully understands the complexities involved in implementing AWS mutual authentication with microcontrollers. While customers need to have some understanding of how to maintain security for their software execution, this often acts as a significant barrier. Microchip has maintained a long-standing relationship with AWS, and we are pleased to partner with the world’s largest cloud provider to offer customers solutions that enable easy and secure connectivity to the AWS cloud.”