New Industry Products

Security-on-a-Chip with Certified Protection Profiles for European Utilities

May 31, 2018 by Paul Shepard

STMicroelectronics has brought together the latest digital security techniques in a single chip to protect Smart Things and Networks including those for utility infrastructure against cyber threats. Focused on providing state-of-the-art security for connected objects, the STSAFE-J100 gives the object an unalterable identity that can be authenticated; it also handles encrypted communications and provides secure storage. It is easily integrated in IoT (Internet of Things) devices like smart meters, data concentrators, and utility gateways.

Customizable with market-specific applets, the STSAFE-J100 secure element combines CC EAL5+[1] certified hardware and a CC EAL5+ certified secure operating system. Device designers can take advantage of the freedom to create their own security profiles, or get to market faster using ST's pre-certified profiles such as German BSI and French Enedis smart-utilities specifications.

The STSAFE-J100 extends ST's successful track record in robust, user-friendly, hardware-digital security for e-government, transportation, banking, and consumer projects, with over 1 billion embedded secure elements delivered yearly to protect devices and networks worldwide.

"Today's on-line services and connection to remote objects need a high level of protection against ever-evolving cyber threats. It is crucial to offer device makers state-of-the-art security for a minimum integration effort," said Laurent Degauque, Marketing Director, Secure Microcontroller Division, STMicroelectronics.

"The flexible STSAFE-J100 solution raises the bar with extra performance and support for the latest encryption algorithms and security standards, including security profiles for the important German and French smart-metering markets," Degauque added.

To help customers take full advantage of the flexibility of the STSAFE-J100 and ensure uncompromising threat protection, ST provides secure device-personalization service. Personalizing each device with its unique identity and cryptographic keys is a fundamental part of the secure-element philosophy to create trusted hardware resistant to cloning or hacking. ST's service is safe and cost-effective, and relieves customers of responsibility for secure programming, preventing exposure of keys and secrets, and distributing programmed devices.

Security:

  • AIS-31 class PTG.2 compliant true random number generator (TRNG)
  • AIS-20/31 class DRG.3 deterministic number generator (DRNG)
  • Enhanced cryptographic algorithms:
    • DES/3DES, ECC and AES
    • SHA-1, SHA224, SHA-256, SHA384, SHA512, MD5 and CRC16
    • Generic Mapping primitive for Password Authenticated Connection Establishment (PACE) protocol
  • Hardware security DES accelerator
  • Hardware security AES
  • Differential power analysis (DPA) and differential fault analysis (DFA) countermeasures against side-channel attacks
  • Active shield
  • Unique serial number on each die

The STSAFE-J100 occupies minimal real-estate on the main system board. It is available in a 5mm x 5mm VFQFPN32, a 6.0mm x 4.9mm SO8N, or a 4.2mm x 4.0mm UDFN8 package.