NXP IoT security IC A71CH for cloud connections

Plug & Trust: The fast and easy way to deploy secure IoT connections

This ready-to-use solution provides a root of trust at the IC level and delivers proven, chip-to-cloud security right out of the box, so you can connect to IoT clouds and services, including AWS, IBM Watson IoT Platform and Google Cloud IoT Core, without writing security code or exposing keys.

KEY BENEFITS

• Secure, zero-touch connectivity

• End-to-end security, from chip to edge to cloud

• Secure credential injection for root of trust at IC level

• Fast design-in with complete product support package

• Easy to integrate with different MCU and MPU platforms

KEY SECURITY FEATURES

• Protected access to credentials

• Encrypted/authenticated interface to host processor

• Certificate-based TLS set-up (ECC NIST P-256)

• TLS set-up using pre-shared secret (TLS-PSK)

• Connectionless message authentication (HMAC)

• ECC key generation & signature verification

• Symmetric key derivation

• Secure vault for product master secrets (key wrapping, derivation, locking)

• Encrypted key injection

• Optional trust provisioning by NXP and qualified partners 

KEY HARDWARE FEATURES

• Easy access to any MCU/MPU with I2C 400 kbps slave interface

• Standard (-25 to +85 °C, A7101CH) and extended (-40 to +90 °C, A7102CH) temperature ranges

• HVSON8 (4x4 mm) and WLCSP (2x2 mm) package 

The arrival of subscription-based cloud connectivity using clouds, such as Amazon Web Services (AWS), IBM Watson IoT Platform and Google Cloud IoT Core, makes the Internet of Things (IoT) more accessible to everyday products, and is expanding the range of IoT-driven services. When deploying cloud services, security is always a concern, since every device needs to be protected from hacking, data breaches, botnet attacks, and other dangers lurking in the IoT. The keys and certificates used to authenticate the cloud connection need to remain securely hidden, and any data transmitted by the IoT device needs to remain safe and secure while in transit. What’s more, the security mechanisms need to be scalable, so they can be deployed efficiently on a large scale, even when manufactured by different OEMs. To meet this need, NXP now offers the A71CH, a security IC that delivers high-end security to IoT deployments of any size. As a ready-to-use, plug & trust solution that works with public and private clouds, the A71CH offers zero-touch secure connectivity with proven, hardware-based security algorithms. The pre-integrated connectivity applet means there’s no need to write security code, and the ready-to-deploy host software is easy to integrate with different MCU and MPU platforms.

Designed with built-in security measures and optimized for secure connectivity, the A71CH supports key insertion at the IC level and delivers trusted security right out of the box.

PROVEN PERFORMANCE

The A71CH builds on NXP’s leadership in some of the world’s most demanding security applications, such as payment and logical and physical access, as well as identification, including electronic passports.
Purpose-built to bring security to the IoT, the A71CH protects essential device functions, including object authentication, data protection, and cloud access, supports software integrity and roll-back protection, and safeguards service integrity and ecosystems. It also provides a platform for new business models.
The A71CH supports industrial applications with an optional extended temperature range (-40 to +90 °C), and is designed for longevity, with up to 25 years minimum data retention in general-purpose storage and 500.000 cycles minimum endurance.

COMPLETE PRODUCT SUPPORT PACKAGE

Delivered as a ready-to-use solution, the A71CH includes a complete product support package that simplifies design- in and reduces time-to-market. NXP eases the overall design process in several ways. For example, the use of an OpenSSL engine and integration into mbedTLS, both part of the host software package, makes it easier to work with connectivity stacks. NXP also offers time-saving design tools like sample code for major use cases, extensive application notes, and compatible development kits for i.MX and Kinetis microcontrollers, which accelerate the final system integration.

A71CH USE CASES

• Secure connection to cloud services, edge computing platforms, infrastructure

• Device-to-device authentication

• Proof of origin / anti-counterfeiting

• Secure key storage

• Secure management of credentials

• Secure data protection

• Secure commissioning support

• Ecosystem protection

ARROW ELECTRONICS SUPPORTING CUSTOMERS DEPLOYING NXP’S A71CH PLUG & TRUST SOLUTION: Arrow Electronics offers Secure Provisioning Services for hardware based security devices, such as NXP’s A71CH Secure Elements. These Services enable customers of all sales and demand profiles to take full advantage of the security features of this Plug & Trust solution.

Arrow Electronics Hungary
1138 Budapest, Váci út. 140

For more information please contact:

Tamas Bihari, Senior Field Application Engineer
Mobile: +36 30 748 0457
E-mail: Ez az e-mail-cím a szpemrobotok elleni védelem alatt áll. Megtekintéséhez engedélyeznie kell a JavaScript használatát.
www.arrow.com