Secure Thingz is collaborating with NXP Semiconductors to enhance the protection of connected devices.

The security tools from IAR Systems and its Secure Thingz subsidiary combined with physical unclonable function (PUF) technology from Dutch firm NXP offer IoT security implementation through the combination of hardware and software-based protection.

UK-based Secure Thingz has announced the enhancements to its secure development tools C-Trust and Embedded Trust, as well as the secure prototyping and production platform Secure Deploy, delivering protection of applications based on the NXP LPC55S6x MCU family featuring PUF technology for secure storage.

Security credentials and the implementation of unique identities are vital in ensuring the integrity of a device and form a vital part of the European Consumer IoT Security Standard EN 303 645, as well as the recent US Cybersecurity Improvement Act, which defines a minimal level of security for use of products within US government departments. The use of unique securely managed identities also helps organisations protect their investment in intellectual property through tight control of provisioning credentials, both to control production quantities and prevent cloning.

Secure Thingz delivers a secure supply chain through the security development tools Embedded Trust and C-Trust, which are integrated with the development toolchain IAR Embedded Workbench, and the secure prototyping and production platform Secure Deploy.

The root of trust and assets managed by Secure Thingz for the LPC55S6x MCU family are encrypted during provisioning using the PUF as a key vault, which is used to protect secret credentials and keys. This process helps prevent application code or malware from accessing, modifying or impinging on the root of trust or assets. Furthermore, the process is tied to the device, offering protection against cloning or counterfeiting.

“NXP has long recognised the increasing need of embedded security throughout the development and production cycle,” said Cristiano Castello, a senior director at NXP Semiconductors. “Through our ongoing collaboration with IAR Systems and Secure Thingz, we continue to work together to address the security challenges our customers face by enabling global secure provisioning services.”

Haydn Povey, CEO of Secure Thingz, added: “The need for unique device management, updates and secure supply chains have been highlighted by the recent US Cybersecurity Improvement Act, alongside the EN 303 645 standard. Through our longstanding relationship with NXP, we are making the security implementation easier for every embedded developer and every application by utilising even more of the secure capabilities offered in the NXP LPC55S6x MCU family. This capability, integrated into Embedded Trust and C-Trust, supports our focus on enabling customers to achieve and exceed the emerging standards.”