Secure Thingz and NXP Semiconductors collaborate

Security credentials and the implementation of unique identities are vital in ensuring the integrity of a device and form a vital part of the European Consumer IoT Security Standard EN 303 645, as well as the recent US Cybersecurity Improvement Act, which defines a minimal level of security for use of products within USA Government departments. The use of unique securely managed identities also enables organisations to protect their investment in intellectual property (IP) through tight control of provisioning credentials, both to control production quantities and prevent cloning.

Secure Thingz delivers a comprehensive secure supply chain solution through the security development tools Embedded Trust and C-Trust, which are completely integrated with the development toolchain IAR Embedded Workbench, and the secure prototyping and production platform Secure Deploy. The Root of Trust and assets managed by Secure Thingz solutions for the LPC55S6x MCU family are encrypted during provisioning using the PUF as a key vault, which is used to protect secret credentials and keys. This process helps prevent application code or malware from accessing, modifying or impinging on the Root of Trust or assets. Furthermore, the process is uniquely tied to the device offering protection against cloning or counterfeiting. 

"NXP has long recognised the increasing need of embedded security throughout the development and production cycle," said Cristiano Castello, Sr. Director Product Innovation for MCUs, NXP Semiconductors. "Through our ongoing collaboration with IAR Systems and Secure Thingz, we continue to work together to address the security challenges our customers face by enabling global secure provisioning services." 

"The need for unique device management, updates, and secure supply chains have been highlighted by the recent US Cybersecurity Improvement Act, alongside the EN 303 645 standard", said Haydn Povey, CEO, Secure Thingz. "Through our longstanding relationship with NXP, we are making the security implementation easier for every embedded developer and every application by utilising even more of the secure capabilities offered in the NXP LPC55S6x MCU family. This capability, integrated into Embedded Trust and C-Trust, supports our focus on enabling customers to achieve and exceed the emerging standards."

In NXP’s whitepaper Extend MCU Security Capabilities Beyond Trusted Execution, there is more information about NXP’s approach to crypto acceleration and asset protection that help bring high levels of security to low-cost microcontrollers with minimal power and area penalty.