INSIDE Secure Present End-to-End Security For Next-Generation Home Energy Gateways

As the interface between the home area network of consumer appliances, meters and other home premises equipment and the wide area network link to the utility companies and service providers, the home energy gateway must address the security needs of all stakeholders. Not unlike TV set top boxes and cable operator head ends, home energy gateways and utility back-end servers must be able to authenticate each other before establishing a secure communications channel to prevent fraud and eavesdropping. The gateway itself must be immune from hacking, too.

“Our VaultIC security module was designed with exactly this kind of application in mind, and, together with the Freescale processor, provides all the features and functions necessary to ensure the gateway can meet the strict device and data security requirements set out by the BSI,” said Christian Fleutelot, executive vice president of the digital security business line at INSIDE Secure. “Based on an original design by Freescale Semiconductor, we believe this next-generation home energy gateway demonstration design will provide energy gateway manufacturers with everything they need to address end-to-end security, safety and privacy concerns in Germany and other countries.”

The VaultIC security module provides comprehensive security functions such as mutual authentication, verification and generation of digital signatures, encryption/decryption and managing secure storage of cryptographic keys and certificates. It is also FIPS140-2 Level 3 certified.

The Freescale i.MX28 processor includes hardware accelerated encryption/decryption and hashing functions, dedicated hardware support for AES128-based authenticated boot and signed/authenticated firmware, an AES crypto engine, secure off-chip storage mechanisms and other security features in addition to robust microcontroller functionality.

BSI specifies the use of the Transport Layer Security protocol between the gateway and the wide area network. This protocol is implemented by the i.MX28 processor, with the VaultIC module providing necessary security functionality.

A home energy gateway collects power consumption data from smart appliances and smart meters over a home area network, controls power activation/deactivation of these appliances and communicates with utility networks through an easy-to-use, touch-enabled wireless remote user interface. It is a key component of smart grid deployments, allowing utilities to adjust home appliance use according to power demand, provide feedback to consumers about power usage and simplify local and remote appliance monitoring and control.

The INSIDE Secure solution will be demonstrated in the Freescale booth, Hall 4A/ 4A-206 and in the INELTEK booth, Hall 1/1-424 during the Embedded World 2013 Exhibition and Conference being held in Nuremberg, Germany, February 26 - 28.