Interest in hardware security technology to prevent physical access to IoT devices
Built-in EEPROM allows user programming

Last year, a hacking incident occurred in the United States due to a DDoS attack on DNS services. The cause was a case of exploiting webcams and IoT products. How should security be handled in the IoT industry, which is attracting attention as a future food source?

Hacking attacks through networks are also a threat, but there is also a high possibility that IoT devices themselves can be physically manipulated and used as a route for cyber attacks. With this in mind, the Korea Internet & Security Agency (KISA) selected “hardware-based (TPM) IoT terminal security technology” as one of the top 10 information security technologies that the industry should pay attention to in 2017.

Software encryption has the advantage of being cost-effective and easy to update, but it is only as secure as the operating system of the device. If there is a security flaw in the OS, it is easy to exploit. Software is also ineffective in protecting encryption keys, which are the core of security. To attack hardware-based security, you must use a secure microcontroller (MCU) and run software from its internal memory that cannot be changed.

Maxim Integrated's DeepCover solutions for embedded security include secure authentication ICs and secure MCUs that provide core functionality such as fixed-function cryptographic operations and secure key storage. In particular, for security MCUs, dynamic tampering (Active Tamper) response technology is introduced to immediately erase the device's keys and confidential data when an attempt at unauthorized manipulation is detected.

The MAXQ1061 operates in cases where a battery cannot be included in the end application because it uses EEPROM, which requires a battery to operate dynamic tamper-resistant technology. It is suitable for IoT nodes, connected embedded devices, industrial networking, PLCs, and network equipment, and provides a comprehensive cryptographic toolbox that enables key generation and storage that meets SSL/TLS/DTLS.

The MAXQ1061 is Common Criteria EAL4+ rated, enabling rapid integration of security into products and protection of network endpoints. It is a turnkey security solution that eliminates the need for separate firmware development.

The MAXQ1061 has 32KB of secure EEPROM that can be programmed by users to store certificates, public keys, private keys, and arbitrary user data. The EEPROM is managed by a flexible file system to enforce user-defined security policies, and cryptographic algorithms include ECC (up to NIST P-521) ECDSA signature generation and verification SHA-2 (up to SHA-512) secure hash ECB CBC CCM (CBC-MAC) mode supporting AES-128/-256 MAC digest.

The MAXQ1061 provides a separate hardware AES engine supporting AES-GCM and AES-ECB modes over SPI. This allows for rapid stream encryption implementation by off-loading the host processor.

“The MAXQ1061’s comprehensive cryptographic capabilities, which embed security in hardware itself, address a critical security need for future embedded systems,” said Christophe Tremlet, senior business manager for embedded security at Maxim Integrated. “With the MAXQ1061, customers will have a trusted device that not only ensures the integrity and authenticity of their systems, but also protects their communications.”