GMO GlobalSign announced the launch of its IoT Identity Platform addressing critical IoT device security requirements. GlobalSign’s next-generation IoT Identity Platform is a set of products and services flexible and scalable enough to issue and manage billions of identities for IoT devices of all types. Using Public Key Infrastructure (PKI) as the core identity mechanism, the IoT Identify Platform can serve the varied security use-cases of the IoT across all verticals, including manufacturing, agriculture, smart grid, payments, IoT gateways, healthcare, other industrial ecosystems and more. The Platform supports the full device identity lifecycle, from initial certificate provisioning (both greenfield and brownfield deployments) to lifetime maintenance through to final sunsetting, decommissioning or transfer of ownership. Giving each device or endpoint a unique identity allows them to get authenticated when they come online and then throughout their lifetime, prove their integrity, and securely communicate with other devices, services and users.
The central feature of the Platform is IoT Edge Enroll, a full-fledged enrollment client used to provision and manage PKI-based identities to IoT devices of all types. Providing these unique identities to all devices enables trust within the ecosystem, allowing for mutual authentication between devices and systems as well as protecting communications from eavesdropping or tampering. IoT Edge Enroll provides a flexible and scalable way to deploy these identities and maintain them throughout the full device lifecycle, with added features such as device Registration Authority (RA), certificate lifecycle management, and expanded protocol support. The cloud-based IoT Identity Platform needs a way to communicate with end devices to deliver, validate and revoke identities, and IoT Edge Enroll acts as the enrollment mechanism.
GlobalSign can issue certificates at unprecedented speed and volume – more than 3,000 per second. There are three integration options and a combination of these can be used depending on a user’s environment.
- IoT Edge Enroll – Delivering a comprehensive enrollment client with enhanced features that include device RA, certificate lifecycle management and expanded protocol support.
- IoT CA Direct – Created for environments that only require a device identity issuance engine. In-house systems are able to communicate with GlobalSign’s services via a modern RESTful API, and handle device enrollment and lifecycle management.
- IoT CA Connect – Ideal for environments using a third-party device and identity management solution which handles device enrollment and lifecycle management. In addition, it enables developers to issue certificates to devices directly from their own platforms.
“The GlobalSign IoT Identity Platform greatly improves the process of identity lifecycle management, from enabling customers to use our highly scalable managed PKI solution as an identity issuing engine to full-fledged enrollment and flexible API integrations with other application and platforms,” said Lancen LaChance, Vice President, IoT Solutions, GlobalSign. “The Platform meets a tremendous need in the marketplace as security is essential to IoT ecosystems, and is well-suited to low-cost IoT device implementations. Currently, we have a number of early adopter companies using the IoT Identity Platform with very positive results.”
By offering highly scalable certificate issuance and flexible API integrations, GlobalSign’s IoT Identity Platform offers the essentials of implementing PKI for IoT devices. Key features of the platform include:
- PKI-based, strong and unique device identities
- Leverage standards-based PKI to authenticate and establish trust between devices and services, as well as encrypt and ensure the integrity of the source of all data transmitted within your ecosystem.
- Scalable
- Modern, secure RESTful APIs support high volume and throughput, capable of issuing millions of certificates per day and more than 3,000 certificates per second.
- Flexible
- Support for complex PKI hierarchies, with dedicated intermediates and public or private trust, along with flexible certificate formats or extensions to accommodate virtually any ecosystem and industry.
- Interoperability
- GlobalSign enables trust through the entire IoT stack, via partnerships on the device side with secure elements (e.g., TPMs, PUFs) and Secure MCUs, and on the cloud side with virtually every cloud platform provider (e.g., Arm® Mbed™ Cloud platform, AWS IoT, Azure IoT Hub).
Archive
- October 2024(27)
- September 2024(94)
- August 2024(100)
- July 2024(99)
- June 2024(126)
- May 2024(155)
- April 2024(123)
- March 2024(112)
- February 2024(109)
- January 2024(95)
- December 2023(56)
- November 2023(86)
- October 2023(97)
- September 2023(89)
- August 2023(101)
- July 2023(104)
- June 2023(113)
- May 2023(103)
- April 2023(93)
- March 2023(129)
- February 2023(77)
- January 2023(91)
- December 2022(90)
- November 2022(125)
- October 2022(117)
- September 2022(137)
- August 2022(119)
- July 2022(99)
- June 2022(128)
- May 2022(112)
- April 2022(108)
- March 2022(121)
- February 2022(93)
- January 2022(110)
- December 2021(92)
- November 2021(107)
- October 2021(101)
- September 2021(81)
- August 2021(74)
- July 2021(78)
- June 2021(92)
- May 2021(67)
- April 2021(79)
- March 2021(79)
- February 2021(58)
- January 2021(55)
- December 2020(56)
- November 2020(59)
- October 2020(78)
- September 2020(72)
- August 2020(64)
- July 2020(71)
- June 2020(74)
- May 2020(50)
- April 2020(71)
- March 2020(71)
- February 2020(58)
- January 2020(62)
- December 2019(57)
- November 2019(64)
- October 2019(25)
- September 2019(24)
- August 2019(14)
- July 2019(23)
- June 2019(54)
- May 2019(82)
- April 2019(76)
- March 2019(71)
- February 2019(67)
- January 2019(75)
- December 2018(44)
- November 2018(47)
- October 2018(74)
- September 2018(54)
- August 2018(61)
- July 2018(72)
- June 2018(62)
- May 2018(62)
- April 2018(73)
- March 2018(76)
- February 2018(8)
- January 2018(7)
- December 2017(6)
- November 2017(8)
- October 2017(3)
- September 2017(4)
- August 2017(4)
- July 2017(2)
- June 2017(5)
- May 2017(6)
- April 2017(11)
- March 2017(8)
- February 2017(16)
- January 2017(10)
- December 2016(12)
- November 2016(20)
- October 2016(7)
- September 2016(102)
- August 2016(168)
- July 2016(141)
- June 2016(149)
- May 2016(117)
- April 2016(59)
- March 2016(85)
- February 2016(153)
- December 2015(150)