IoT

Trusted Platform Modules (TPM) enable secured remote software updates, disc encryption and user authentication in connected embedded devices in industrial and automotive applications. Infineon provides its Optiga TPM 2.0 software stack to facilitate seamless integration in Linux-based systems. The TPM software stack implements the latest feature application programming interface (FAPI) standard. Infineon has developed the open-source software jointly with Intel Corporation and Fraunhofer Institute for Secure Information Technology (SIT).

According to Infineon, using the Optiga TPM 2.0 allows IoT system integrators to “significantly improve” the security of connected products. Software integration with TPM software stack (TSS) -FAPI does not require specific skills in low-level security specifications and reduces source code development by a factor of up to 16, claims Infineon. This can result in reduced time to market as manufacturers can accelerate the process for certifying industrial devices according to the IEC 62443 standard for industrial applications, which requires hardware-based safety from level 4 upwards.

The FAPI specification was released as an international standard by the Trusted Computing Group (TCG). The specification is implemented in the TSS stack 1 with the associated tools and plug-ins. The TSS stack is open source software, which allows seamless integration of the TPM 2.0 in Linux-based systems. This includes the support of typical Linux software for device authentication, data encryption, software updates and remote device management.

The FAPI enables the native support of the PKCS#11 standard as a generic interface for user authentication, single sign-on and email encryption/signing. The FAPI provides a default configuration for cryptographic functionalities, system integration and automated processing of security mechanisms, says Infineon.

The Optiga TPM acts as a vault for sensitive data in connected devices and lowers the risk of data and production losses due to cyber attacks. Infineon’s TPMs are certified by independent certification bodies according to the Common Criteria, an international set of guidelines and specifications developed for evaluating information security products. The TSS stack including the recent FAPI has been verified to achieve compliance and interoperability.

Application developers can use the Optiga TPM SLB 9670, Optiga TPM SLI 9670 and Optiga TPM SLM 9670 Iridium boards and TSS Quickstarter now. There are also board and source code packages for the Infineon Aurix and for the Arduino microcontrollers.

http://www.infineon.com

With the introduction of the TimeProvider 4100 release 2.2 Grandmaster, Microchip provides a new level of software-based redundancy for the IEEE 1588 precise timing grandmaster with gateway clock.

It is intended for critical infrastructure providers, e.g. 5G wireless networks, smart grids, data centres, cable and transportation services, which require redundant, resilient and secure precise timing and synchronisation solution, explained Microchip.

In addition to the redundancy architecture, the TimeProvider 4100 Release 2.2 grandmaster has support for a multi-band global navigation satellite system (GNSS) receiver and enhanced security to ensure always-on precise timing and synchronisation.

Redundancy ensures uninterrupted services. Infrastructure deployments previously relied on hardware redundancy to avoid service disruption but the modular architectures are expensive. The TimeProvider 4100 Release 2.2 grandmaster provides redundancy via software implementation, enabling flexible deployment and lower hardware costs without sacrificing ports, pointed out Microchip.

It also introduces an increased level of resiliency by supporting a new GNSS multi-band, multi-constellation receiver to protect against time delay resulting from space weather, solar events and other disruptions that may impact critical infrastructure services. Multi-band GNSS is particularly important for the highest levels of accuracy including primary reference time clock Class B (PRTC-B) (40 nano seconds) and enhanced primary reference time clock (ePRTC) (30 nano seconds).

The TimeProvider 4100 Release 2.2 grandmaster also adds support for Radius and TACACS+ and also introduces anti-jamming and anti-spoofing capabilities.

In addition, the TimeProvider 4100 Release 2.2 grandmaster provides a super oven controlled crystal oscillator (OCXO) option for enhanced holdover capabilities in case of GNSS disruption.

The TimeProvider 4100 Release 2.2 grandmaster is a family of products with hardware expansion modules for legacy fan-out or Ethernet fan-out with 10Gigabit Ethernet support. It can be configured in specific operation modes to act either as a gateway clock, a high-performance boundary clock or an ePRTC.

The TimeProvider 4100 Release 2.2 grandmaster embeds additional Microchip technology including its OCXO, super OCXO, Rubidium atomic clock, field programmable gate arrays (FPGAs), Ethernet switch, synthesisers and cleaning oscillators.

The TimeProvider 4100 is part of Microchip’s virtual Primary Reference Time Clock (vPRTC) product portfolio, offering end-to-end precise time and synchronisation. The portfolio also includes Cesium atomic clocks for source of frequency and time, the BlueSky GNSS firewall for security, TimeProvider 4100 high-performance boundary clock and TimeProvider 4100 gateway clocks, as well as the TimePictra software suite, which manages the end-to-end precise time architecture across all Microchip timing products.

Microchip’s TimeProvider 4100 Release 2.2 grandmaster offers several options for software and hardware support including installation, sync audits, network engineering and 24/7 worldwide support.

The TimeProvider 4100 Release 2.2 grandmaster is available now for both new and already-deployed systems.

http://www.microchip.com