Building a Secure IoT Device
summary
Describes a supply‑chain design that signs and encrypts a trusted OS with an RTL key baked into silicon, provisions an OEM‑specific provisioning key, and flips lifecycle state by burning fuses so stages are non‑reversible. Specifies per‑device unique keys, non‑volatile counters for rollback protection, and attestations (software versions, boot state) to gate cloud access. Adopts Platform Security Architecture and ships a reference implementation — Trusted Firmware‑M — providing secure boot, attestation and crypto primitives to scale provisioning without physically secure factories.
AI-written summary · about
chapters (13)
- 0:00Start
- 8:04Complex Supply Chain
- 10:46Security Challenges
- 13:13Common Usage Patterns
- 17:21Common Security Functions
- 20:19Root of Trust and Chain of Trust
- 22:54Principle of Least Privilege
- 24:04Firmware Update
- 25:18Device Identification and Authentication
- 26:43Lifecycle Management
- 28:22Hardware Building Blocks
- 31:04A Scalable Solution
- 35:09Platform Security Architecture
related talks
29mEnabling a secure IoT from design to deployment
43mDevice Security in IoT
30mSupply Chain Security for IoT Devices
18mBeyond the Default Password: Building Trustworthy IoT Products
31mSecuring the Internet of Things
42mBecoming a tyrant: Implementing secure boot in embedded devices
24mSecure architectures for the IoT
38mBoot to Cloud Security Considerations with IoT