Page 67 - Cyber Defense eMagazine for July 2020
P. 67

Security in memory card format

            Swissbit’s  new  security  solution  consists  of  a  flash  memory  chip,  produced  and  tested  for  industrial
            requirements. This chip is run using a special version of the durabit firmware with integrated AES 256-bit
            encryptor (Fig. 1). The DP (Data Protection) version encrypts and protects all data in various ways (CD-
            ROM mode, PIN protection, hidden memory, WORM mode). For the hardware-based protection of the
            communication in the IoT, another security anchor is required. Swissbit’s security modules come with
            solutions such as an Infineon/NXP Smart Card Chip CC EAL 5+/6+. An API, a SDK and a PKCS#11
            library are available for application development.































            Fig 1. The structure of a microSD card with security features.



            Designating an ID to things

            Security  experts  trust  in  microSD  cards  with  secure  element  for  encrypting  mobile  phone
            communications. Similar to the communication between people, the communication of the things across
            the Internet also needs to employ identification, authentication and authorization. In other words, how
            does a “thing” know that the data or data queries received from another “thing” are correct and that the
            source of a message is truly the system component that it claims to be? Swissbit security memory media,
            with secure element, provide applications and systems with a unique identity. “Things” get a counterfeit-
            proof ID and as such, networked systems can be protected from misuse, “identity theft” and data access
            can  be  restricted.  Smart  cards,  that  are  integrated  onto  memory  cards,  provide  systems  with  non-
            cloneable  identities,  transforming  them  into  uniquely  identifiable  M2M  (machine-to-machine)
            communication participants, that can authenticate themselves and send and receive cryptographically
            heavily secured data.

            Another important device-specific application for these Swissbit solutions is Trusted Boot. Trusted Boot
            ensures that software can only be run on specific hardware or hardware classes. A secure flash memory




            Cyber Defense eMagazine –July 2020 Edition                                                                                                                                                                                                                         67
            Copyright © 2020, Cyber Defense Magazine.  All rights reserved worldwide.
   62   63   64   65   66   67   68   69   70   71   72