06 May Guest Blog: How Device Identity and the Cloud Will Save the Production Line
Internet of Things security has been a dominant topic in the industry over the last year, primarily since the proved hacking of smart cars, Wi-Fi Barbie’s, fridges, thermostats and more. The gaping hole of device security is something that rests heavily on the minds of manufacturers, providers and resellers.
I’ve spent the past few months attending several IoT and manufacturing industry events with the aim of learning more about how manufacturers are provisioning device identity into their products and the challenges they have around this today. In that time I’ve learnt a lot.
The manufacturing industry is always looking to increase efficiency of the production line, whether that’s through speed, or accuracy of production. In order to thrive in the manufacturing industry, executives must be able to reduce waste, speed up automated processes and ensure quality remains high.
As an identity provider, we want to be able to help a manufacturer provision device identity and still do all of the above. The difficulty that we face is that there is still a lack of understanding in the industry around how best to manage identities and as such, solutions are not always the best fit for purpose.
Don’t be Afraid of The Cloud
When speaking with manufacturers about managing identities in the cloud I was met with a lot of scepticism. What if a cloud service suffers from a network outage and the production line is halted? Is the cloud really safe?
As a result, a lot of manufacturers are asking for an appliance-based solution that can be deployed in house, but this can often be very expensive to develop, test and make tamper-proof. Additionally, there is a cost around maintenance, as this has to be done on site.
But what if you can have your cake and eat it too?
While the GlobalSign certificate management platform is in the cloud and has redundancy, fail-over and disaster recovery built into the platform, we’re also able to partner with some great providers who are capable of helping design fail-over on premise network solutions, which greatly reduce or eliminate the probability of network outages. This means you can benefit from cloud-based value propositions including:
- We can make fixes to our core services remotely and maintain it without coming to the site.
- You can’t have someone physically tamper with the service because it’s in the cloud.
- Auditing and record keeping can be maintained safely offsite and requested at any time from GlobalSign.
But is the cloud really secure?
GlobalSign takes security very seriously. In addition to operating the infrastructure under best practices, we are Web-Trust Compliant. Our certificate management platform does not communicate without encryption. We leverage PKI, certificates and mutual authentication to ensure that only the right people have access to the platform and that they have access to the right places within the platform.
When to Provision Device Identity
While the argument for using device identities to build trust and security into IoT ecosystems is clear, a common sticking point is when to actually provision the device identity, which can happen at several points in the product life-cycle. Identity can be implemented during the manufacturing process, or when the device is turned on for the first time, at a seller store or in its owner’s hands.
There are several pros and cons of both approaches and it’s important to decide what is right for the kind of product you are manufacturing and the type of customer you have.
When the Device Wakes Up
Generally, in this scenario, the customer uses their internet connection to access the cloud and install their device identity after the device is turned on for the first time. A benefit to provisioning at wake up is that it eliminates certain manufacturing environment complexities.
One potential problem with this approach is that you are shipping the device without identity and this in itself could be leaving devices vulnerable to attack. A smart connected thermostat being shipped without identity displaces some requirements on how you can appropriately enroll that device into required cloud services securely. How will your cloud services ensure that the device being enrolled is a trusted and authentic device, not a pirated clone or malicious node?
Despite some of the trade-offs, this method works particularly well when manufacturing devices such as gateway devices. A gateway device may want to wake up in the field in order to receive and bind information about its customer and ecosystem. As a result, it is sometimes easier to allow the identity to be provisioned at the time of wake up.
During Manufacturing
By provisioning identity to a device during the manufacturing process we are further decreasing the chance of an attack, or vulnerability exploit.
The problem here is that time and cost will go into the production line. It’s important here to think long-term as the initial stages might look more costly, but if you are leaving yourself less vulnerable to an attack, you are potentially appropriating huge cost savings as a result. For example, FACC which is an Austrian airline component maker for Boeing and Airbus lost $54million in a cyberattack.
Identity During Manufacturing, Ownership at Wake Up
An alternative solution to the above is to provision the device identity during the manufacturing process, but then let the device provision ownership and authorization when it wakes up. This ensures that inventory management is much easier. With this option it is vital to ensure that identities are being managed in one centralized platform to keep track of devices post-shipping.
Ensuring Device Identity Cannot be Transferred
We sometimes get asked if it is possible to ensure that device identity cannot be transferred. Using a secure hardware model like a TPM with a properly configured PKI environment to issue device identity certificates, you can have some assurances that the identity can’t be transferred to another device.
Keeping Products Up-To-Date, Even Before Shipping
In today’s fast paced “agile” software development environment, there is a benefit to loading the LATEST (tested and bug fixed) firmware onto devices before they go out into the field. Remote firmware upgrades are great and we recommend that they are part of the security design process. However, they can be costly depending on the technical environment of the solution (e.g. the cost of upgrading millions of IoT devices over a cellular network for instance, or power usage of the firmware updates). Ultimately you also need some core roots of trust established in the solution first, where identity is essential.
If manufacturers are able to pull-in the latest production firmware from the cloud, they can do better to ship devices with the latest firmware – another case to be made for smart internet-connected manufacturing.
Why Device Identity and the Cloud Are the Future
When adopting a cloud-based solution for Identity Management, you can save money by eliminating a need for an appliance-based solution, which will inevitably lead to more on site support and maintenance costs. You can rely on a focused party to maintain and update the cloud services, keep auditing and records safe, ensure devices are shipped with latest firmware and keep people from tampering with the service.
By provisioning identities, a manufacturer can ensure an even higher quality and more secure product reaches their customers, reducing piracy and fraud and improving both branding and customer trust. The manufacturing process is also sped up because Identity Management happens at high-volume through the GlobalSign Cloud Certificate Center.
Zachary Short is a guest contributor from GlobalSign.
MonteFum
Posted at 18:41h, 03 Mayed pills cheap
Jamesmag
Posted at 13:56h, 05 Maynatural ed medications ed dysfunction treatment best online canadian pharmacy
Jamesmag
Posted at 05:21h, 06 Maycheap medications online treatment for ed medicine erectile dysfunction
aldnlxjo
Posted at 18:21h, 06 Maymodafinil 100mg canada order provigil 200mg online cost provigil 200mg
Jamesmag
Posted at 18:54h, 06 Maynew treatments for ed what causes ed pills erectile dysfunction
Jamesmag
Posted at 00:40h, 08 Mayed pills otc best ed medications cheap medication online
Jamesmag
Posted at 15:43h, 08 Maybuy prednisone without prescription paypal prednisone for sale prednisone cream brand name
Jamesmag
Posted at 06:42h, 09 Maycialis coupon 2019 cialis 20 mg best price what\’s better viagra cialis levitra
hllsrtfg
Posted at 02:08h, 10 Maygeneric modafinil
Gregoryhig
Posted at 12:00h, 11 Mayfinasteride without prescription generic finasteride for sale buy propecia no prescription
Gregoryhig
Posted at 03:41h, 12 Mayivermectin horse paste human dosage ivermectin topical ivermectin trials
cemdpvks
Posted at 18:18h, 12 Maymodafinil 200mg over the counter modafinil cost
Gregoryhig
Posted at 05:33h, 13 Mayivermectin tablet 1mg ivermectin lotion 0.5 ivermectin safety
Gregoryhig
Posted at 21:05h, 13 Maynon prescription ed drugs prescription drugs online without doctor dog antibiotics without vet prescription
Gregoryhig
Posted at 12:42h, 14 Maystromectol price us stromectol tea tree oil where can i buy ivermectin for humans
Gregoryhig
Posted at 04:18h, 15 Maycanadian medications online canadian pharmacy online canadian pharmacy
Gregoryhig
Posted at 19:48h, 15 Mayed pills online over the counter erectile dysfunction pills top erection pills
StromGroup
Posted at 15:30h, 16 Mayed medication buy ed pills top ed pills
StromGroup
Posted at 06:34h, 17 Mayed pills cheap male erection pills medicine for erectile
StromGroup
Posted at 22:09h, 17 Maybuying from canadian online pharmacies recommended canadian pharmacies meds online without doctor prescription
StromGroup
Posted at 13:42h, 18 Maystromectol for sale stromectol pills for humans prescribing stromectol
DouglasHAX
Posted at 12:56h, 19 Mayclomid for sale canada buy clomid 50mg online where to buy cheap clomid online
DouglasHAX
Posted at 04:40h, 20 Mayclomid tablets for sale where to buy cheap clomid online clomid tablets
DouglasHAX
Posted at 20:13h, 20 Maysildenafil citrate tablets 100 mg sildenafil 100 mg lowest price sildenafil
DouglasHAX
Posted at 12:05h, 21 Maybest price for daily cialis tadalafil without a doctor’s prescription tadalafil tablets 20 mg india
DouglasHAX
Posted at 03:48h, 22 Mayclomid for sale clomid tablets for sale buy clomid 50mg online
DouglasHAX
Posted at 19:35h, 22 Mayclomid tablets for sale where to buy cheap clomid online clomid tablets for sale
EugeneFauff
Posted at 10:35h, 23 Maystromectol for sale stromectol for sale stromectol 12 mg tablets
EugeneFauff
Posted at 02:49h, 24 Maystromectol 12 mg tablets stromectol tablets for humans stromectol 12 mg tablets
EugeneFauff
Posted at 18:55h, 24 Maystromectol 3mg heartworm prevention without ivermectin stromectol for humans for sale
RaymondMoifF
Posted at 15:14h, 25 Mayviagra without a doctor prescription usa pfizer viagra 100mg price buy real viagra online
RaymondMoifF
Posted at 07:12h, 26 Mayviagra online usa viagra coupon buy generic 100mg viagra online
RaymondMoifF
Posted at 23:10h, 26 Maybuy real viagra online sildenafil citrate tablets 100 mg viagra 100mg price
Robertfax
Posted at 16:21h, 27 Maycialis without persriction cialis viagra sampleviagra cialis
Robertfax
Posted at 08:58h, 28 Maycialis store in korea cialis pills is cialis as effective as viagra
Robertfax
Posted at 01:45h, 29 Mayonline cialis florida delivery buy tadalafil cheap cialis online
Robertfax
Posted at 18:08h, 29 Maycialis usa online generic version of cialis what is super cialis
Robertfax
Posted at 10:23h, 30 Maycialis no prescription overnight shipping generic version of cialis online cialis australia
Robertfax
Posted at 02:41h, 31 Maycialis with dapoxetine 80mg cialis vs viagra canadian pharmacy canada pharmacy cialis
Ralphavata
Posted at 12:03h, 05 Junecialis free trial offer cialis pills
Chesterpredo
Posted at 19:58h, 06 Junehttps://stromectolgf.com/# how much is ivermectin
IverRift
Posted at 19:58h, 06 Junestromectol where to buy ivermectin brand name
Strombop
Posted at 01:25h, 08 Junestromectol cream stromectol uk buy
Ralphavata
Posted at 15:52h, 10 JuneО±П…ОёОµОЅП„О№ОєОї П‡О±ПЂО№ cialis generic tadalafil 20mg india
Cameroncop
Posted at 03:32h, 11 Junebuy prescription drugs without doctor buy prescription drugs online legally
Stevensnure
Posted at 05:05h, 11 Junehttps://drwithoutdoctorprescription.com/# meds online without doctor prescription
ThomasBruro
Posted at 13:43h, 11 Junewithout doctor prescription carprofen without vet prescription
Ralphavata
Posted at 17:27h, 11 Junecialis online america cialis
Cameroncop
Posted at 21:02h, 11 Junebuy prescription drugs without doctor prescription
Stevensnure
Posted at 04:39h, 12 Junehttps://drwithoutdoctorprescription.com/# ed meds online without doctor prescription
ThomasBruro
Posted at 06:56h, 12 Junebuy prescription drugs from canada buy prescription drugs without doctor
Jamisonder
Posted at 18:05h, 16 Junebuying viagra online buying viagra online
https://sildenafilmg.com/ cheap viagra online
viagra without a doctor prescription viagra online usa
MichaelSeida
Posted at 03:43h, 17 Junehttps://sildenafilmg.shop/# viagra over the counter walmart
MichaelEvelp
Posted at 17:34h, 17 Juneviagra online usa buy viagra online usa
smqztbho
Posted at 23:29h, 17 Junehydroxychloroquine buy online hydroxychloroquine sulfate 200 mg plaquenil side effects
Jamisonder
Posted at 00:21h, 18 Junewhere can i buy viagra over the counter online doctor prescription for viagra
https://sildenafilmg.online/# where to buy viagra
cheap viagra online viagra over the counter
BrandonNem
Posted at 01:50h, 18 Junehow much is viagra buy generic 100mg viagra online
MichaelSeida
Posted at 02:56h, 18 Junehttps://sildenafilmg.shop/# when will viagra be generic
BrandonNem
Posted at 00:22h, 19 Junewhere to buy viagra online viagra
MichaelEvelp
Posted at 01:04h, 19 Junegeneric viagra walmart viagra online usa
MichaelSeida
Posted at 01:42h, 19 Junehttps://sildenafilmg.shop/# best place to buy generic viagra online
Jamisonder
Posted at 05:05h, 19 Junebuy generic 100mg viagra online viagra from india
https://sildenafilmg.shop/# п»їviagra pills
viagra from india viagra online usa
BrandonNem
Posted at 23:37h, 19 Junebest over the counter viagra where to buy viagra
MichaelEvelp
Posted at 10:20h, 20 Juneviagra for men viagra without a doctor prescription usa
Jamisonder
Posted at 20:14h, 20 Junewhere can i buy viagra over the counter viagra shop
https://sildenafilmg.shop/# order viagra online
cost of viagra 100mg viagra
BrandonNem
Posted at 22:52h, 20 Juneonline doctor prescription for viagra viagra pills
HomerMew
Posted at 03:14h, 22 Junezithromax online paypal how to get zithromax online
https://amoxilforsale.best/# can i purchase amoxicillin online
prednisone 5 mg tablet rx prednisone 21 pack
GeorgeFaive
Posted at 04:45h, 22 Junezithromax for sale us cheap zithromax pills
Stephenoxify
Posted at 08:38h, 22 Junehttps://amoxilforsale.best/# amoxicillin where to get
3effusive
Posted at 13:07h, 22 June2garfield
RobertEmbar
Posted at 16:39h, 22 Junezithromax over the counter canada zithromax for sale usa
GeorgeFaive
Posted at 23:45h, 22 Junebuy doxycycline online usa doxycyline
Shelbyabuch
Posted at 00:03h, 23 Juneprednisone buy canada 20 mg of prednisone
Stephenoxify
Posted at 13:43h, 23 Junehttps://doxycyclineforsale.life/# buy doxycycline 100mg canada
Raymondmak
Posted at 15:13h, 23 Junecost of generic zithromax can you buy zithromax over the counter in australia
GeorgeFaive
Posted at 18:56h, 23 Junebuy generic zithromax online zithromax 250 mg pill
HomerMew
Posted at 21:03h, 24 Junemetformin 500mg tablets in india can you buy metformin over the counter
PhilipDof
Posted at 06:37h, 25 Junetadalafil price uk best online tadalafil
https://buymetformin.best/# metformin 500 mg tablets
lipitor generic australia cost of lipitor 10 mg
Raymondmak
Posted at 02:07h, 26 Junehttps://buymetformin.best/# buy metformin 1000 mg without prescription
PhilipDof
Posted at 08:46h, 26 Junewhere can i buy nolvadex tamoxifen cancer
https://buytadalafil.men/# price comparison tadalafil
low dose tamoxifen tamoxifen menopause
HomerMew
Posted at 18:48h, 26 Junebuy cheap lipitor order lipitor online
Edwardtof
Posted at 23:46h, 26 Junemetformin 1000 mg cost metformin hcl
AnthonyUnfon
Posted at 04:34h, 27 Junehttps://buynolvadex.store/# does tamoxifen cause bone loss
WilliamStype
Posted at 06:07h, 27 Junetadalafil canadian pharmacy price tadalafil tablets canada
RickyEdula
Posted at 07:02h, 27 Junetadalafil 10mg coupon tadalafil pills 20mg
https://buymetformin.best/# can you buy metformin without prescription
lasix medication generic lasix
RonaldSkady
Posted at 09:51h, 27 Junehttps://buylipitor.store/# lipitor rx
PhilipDof
Posted at 15:15h, 27 Junewhere can you buy metformin can you buy metformin without a prescription
https://buylipitor.store/# generic lipitor cost
tadalafil cialis generic tadalafil daily
RobertTriep
Posted at 05:37h, 28 Junehttps://cipro.best/# cipro pharmacy
JefferyEmiSk
Posted at 06:07h, 28 Junepain meds without written prescription canadian online drugs
Jeffreymet
Posted at 10:29h, 28 Juneneurontin brand name 800mg best price cost of neurontin 600 mg
https://withoutprescription.store/# canadian drugs
buy diflucan 1 diflucan otc uk
Georgeheeld
Posted at 17:19h, 28 Junehttps://diflucan.icu/# buy diflucan pill
Thomassor
Posted at 05:34h, 29 June800mg neurontin neurontin 600 mg price
https://gabapentin.icu/# neurontin 300 mg price in india
diflucan 6 tabs diflucan 150 mg tablet price
RobertTriep
Posted at 13:51h, 29 Junehttps://cipro.best/# cipro 500mg best prices
Isiahcic
Posted at 20:29h, 29 Junebuy neurontin online uk neurontin 1000 mg
Jeffreymet
Posted at 20:47h, 29 Junenatural ed remedies impotence pills
https://erectionpills.best/# generic ed pills
п»їerectile dysfunction medication ed treatment pills
JefferyEmiSk
Posted at 04:39h, 30 Junediflucan canadian pharmacy diflucan 400mg without prescription
RobertTriep
Posted at 21:57h, 30 Junehttps://diflucan.icu/# where to get diflucan otc
Thomassor
Posted at 00:58h, 01 Julymens ed pills the best ed pill
https://gabapentin.icu/# neurontin 600 mg cost
how to get diflucan otc can you buy diflucan over the counter in australia