Imagination and Intrinsic-ID collaborate on IoT security
June 22, 2016
Imagination Technologies and Intrinsic-ID are collaborating on scalable, flexible and affordable IoT hardware security.
The first milestone is the availability of California-based Intrinsic-ID’s security and authentication technology for Imagination’s Mips M-class M5150 CPU that targets low-power applications such as M2M, IoT and embedded control. Intrinsic-ID’s Puf physical unclonable function technology allows efficient implementation of security functions such as device authentication and anti-cloning on Mips CPUs.
With growing connectivity across nearly every product category from consumer to automotive to industrial and beyond, security is an ever-increasing challenge, and the massive amount of smart devices makes it harder to keep track of every single device. The industry needs a more secure and scalable approach towards device authentication, registration and lifecycle management.
UK-based Imagination’s Omnishield multi-domain security technology, which takes advantage of hardware virtualisation built into its latest IP offerings, enables the creation of multiple secure domains on an SoC. Products that implement this technology can run multiple, unmodified, isolated applications and operating systems independently and securely at the same time on a single, trusted platform. Omnishield-ready Mips M5150 CPUs are claimed to be the only MCU-class CPU IP cores built with hardware virtualisation technology.
The Puf technology, called HIS hardware intrinsic security, extracts security keys and unique identifiers from the innate physical characteristics of semiconductors. The device-unique physical structure or silicon fingerprint can be obtained from standard SRAM circuits, already in virtually all processor designs.
“Puf technology is an important element of SoC security,” said Jim Nicholas, executive vice president at Imagination. “Intrinsic-ID’s technology is used widely across governments and other highly secure markets. We’re delighted to bring this efficient technology to the many customers using Mips M5150 CPUs. Imagination is forging a growing number of partnerships and creating new technologies organically – all to enable our customers to create highly secure products with our Omnishield-ready IP families.”
With HIS, no keys need to be programmed or stored in the system and no keys are present when the device is off, which provides a high level of protection against hardware attacks.
A system with multiple domains enabled by Omnishield-ready Mips CPUs, allows for the HIS key extraction and management functions to be implemented securely in software.
“Chip vendors face a growing burden since they are responsible for programming all product keys used for device, user and data authentication,” said Pim Tuyls, CEO of Intrinsic-ID. “Since Intrinsic-ID’s Puf technology doesn’t require any change on the silicon, it can be deployed widely and inexpensively. Providing the highest security at the lowest cost, it is a natural choice for chip vendors. The multi-domain environment created by Imagination’s Omnishield technology combined with Intrinsic-ID’s Puf technology provides a differentiated security platform addressing challenges from key provisioning and authentication to root of trust and supply chain protection.”