STMicroelectronics — STSAFE-A110 Secure Element

The STSAFE-A110 from STMicroelectronics enables OEMs to prevent the counterfeiting of genuine products by strictly assuring their authenticity. It may also be used to secure and simplify the pre-attachment of connected devices to cloud platforms.

A member of the STSAFE family of Secure Elements, the STSAFE-A110 offers state-of-the-art certified protection, and secure access to various cloud solutions. This enables device manufacturers to perform mass registration of IoT devices while ensuring that only authorized devices can access online services. The personalization process is performed at a secure ST factory. This simplifies and secures the uploading of secrets to connected devices, and so reduces the effort and cost involved in production.

The STSAFE-A110 includes a secure operating system, and is based on hardware which is certified to Common Criteria Evaluation Assurance Level 5+ (EAL5+). Each unit comes with a unique identification and X.509 certificates, aiding secure connection of IoT devices to cloud computing platforms and other networked services.

Like all the STSAFE products, this new secure element includes the most robust technologies for resisting attempts to eavesdrop on, steal, tamper with or corrupt private data. The STSAFE-A110 security features include:

• Strict authentication based on ECDSA encryption with an X.509 certificate
• Secure channel establishment with remote host including Transport Layer Security (TLS) handshake
• Signature verification service for secure boot and firmware upgrades
• Usage monitoring with secure counters
• Pairing and secure channel establishment with a host applications processor
• Wrapping and unwrapping of local host envelopes
• On-chip key pair generation

The STSAFE-A110 is integrated with the STM32Cube development ecosystem, so that it can be quickly incorporated in new designs based on an STM32 microcontroller.