Efficient security implementation is possible on small, resource-constrained devices through PSA.

STMicroelectronics (ST) announced that it has adopted Arm’s Platform Security Architecture (PSA), which enables best-in-class ubiquitous cybersecurity.

ST's STM32H7 high-performance MCU is designed with the same security concepts as the PSA framework, combining these principles with the advanced security features and services of the STM32 family.

As IoT applications expand, public safety and national security issues may also be exposed to risk. Manufacturers, who must constantly innovate to counter new and innovative hacking attacks, can cost-effectively implement cutting-edge security features in small, resource-constrained devices through PSA.

Michel Buffa, Head of the Microcontroller Business Unit at ST, stated, “Security is a priority for the success of IoT. To increase security payload, it is crucial to gain the trust of end users, ranging from individual consumers to enterprises and government agencies,” and added, “Arm’s PSA enables key security features such as more cost-effective and scalable device identification and Over-The-Air (OTA) updates on small, autonomous IoT devices.” “These PSAs can operate with existing security features of STM32 microcontrollers, including our high-performance STM32H7 series,” they stated.

ST's STM32H7 MCU device integrates hardware-based security features, including a True Random-Number Generator (TRNG) and a state-of-the-art dedicated cryptographic processor, which simplifies the protection of embedded applications and global IoT systems against attacks such as eavesdropping, spoofing, and Man-in-the-Middle (MITM) intrusions. In addition, it features secure firmware loading capabilities, allowing OEMs to securely program not only within their own facilities but also externally, such as contract manufacturers or programming firms.

Because security keys and software services are pre-embedded in the MCU for secure loading, OEMs provide manufacturing partners with already encrypted firmware. Therefore, it is impossible to intercept, copy, or manipulate the code. This enables programming and authentication tasks to establish a root-of-trust (RoT) mechanism for devices that require security patch application and feature upgrades throughout their lifespan by connecting to the end user's network or via remote OTA updates.

Paul Williamson, Vice President and General Manager of Arm’s IoT Device IP, said, “Arm is transforming the economics of security by collaborating with its ecosystem to introduce PSA as a common industry framework for securing the next trillion connected devices,” adding, “The Cortex-M-based STM32H7 series, with built-in security hardware blocks and firmware-loading services, is driving security innovation in various applications, such as communication gateways and connected things, by leveraging Arm’s PSA principles.”