Reach a new level of security for smart connected devices

The upgraded SafeZone cryptographic software allows developers to build FIPS 140-2 certified applications for Trusted Execution Environments (TEE) based on ARM TrustZone frameworks for the first time. By operating in a Trustonic <t-base TEE, the SafeZone FIPS cryptography module works with SafeZone security toolkits (which protect content, data at rest and data in motion) to provide a high assurance level.

A TEE isolates sensitive operations on smart connected devices from the standard, general-purpose, operating system. This allows a safer execution environment for these applications to run in. Already deployed in more than 100 million devices, many popular smartphones now incorporate TEE technology. Close cooperation with Trustonic allows INSIDE SECURE's SafeZone FIPS cryptography module and toolkits integrate with the Trustonic <t-base TEE. This enables FIPS-compliant operations within that framework for smart connected devices.

With the increase in cyber attacks, many industries involved in critical infrastructure and other sensitive systems have come under increasing pressure to implement and deploy applications, devices and communications networks that offer greater resistance to attack. Additionally, this is in accordance with government mandates, regulations and recognised standards. Recognised as providing a sufficient level of security for high-value applications, FIPS 140-2 certification is being widely adopted around the world for commercial, government and defence applications.

Simon Blake-Wilson, Executive Vice President, Mobile Security division, INSIDE Secure, comments: “We see trusted platform TEEs such as those provided by Trustonic becoming increasingly important as a way to provide a secure environment to protect these applications and sensitive enterprise information and communications as smart connected devices are increasingly used in the enterprise for more high-value applications. Using platforms with our FIPS-certified solution, developers can avoid the lengthy and expensive FIPS validation process and get their product to market more quickly. By using our pre-validated module, they can meet current and future security requirements without having to pull valuable resources from their core competency.”

“INSIDE’s achievement in delivering technology to accelerate FIPS-compliance with a trusted execution environment demonstrates their leadership and marks an important milestone for the industry in assuring trust in smart connected devices. Standards like FIPS provide stakeholders with confidence that a product will perform as intended and play an important role in driving the acceptance of new technologies, especially when dealing with trusted services,” commented Jon Geater, CTO, Trustonic.