Demonstration Overview

Securing IOT with trusted computing
Trusted computing technologies supported: TPM and TNC
This demonstration shows a deployment of IoT sensors and actuators (such as those found ina Smart Building) managed by a cloud-based application that is remote to the sensors (such asthe Building Management application). The server and the IoT devices are connected over thepublic Internet, using an OpenSSL connection. Mutual authentication and integrity checks ofdevices and systems is required at session start.
Trusted Computing technology is applied in this case by using open standards to extend
OpenSSL authentication. Instead of single factor authentication, using certificates only, theenhanced OpenSSL authentication process shown here requires both a certificate and anintegrity report, both of which are protected by a Trusted Platform Module (TPM) on eachdevice. Servers and gateways perform local validation of the integrity reports. If both identity
and integrity are validated, a secure session for data exchange is started. IoT devices validate
the SSL certificate from the gateway in conventional, single factor OpenSSL authentication.
Several security threats are addressed by these protections. Fake servers, gateways, andsensors are detected and blocked by always performing mutual authentication. Infectedcomponents are similarly detected and blocked by checking integrity reports. Rooting thesechecks in a TPM prevents malware from stealing credentials or falsifying an integrity report. The
security of the IoT system is grounded in hardware, ensuring uptime and maximizing reliability.
The demo includes an extensive GUI showing activity logs, credentials provided at session startand other logged information relevant to session start and device status.
The security chips in this demo are Infineon SLB9645 TPM chips, based on the TPM standards
created by the Trusted Computing Group (TCG). The industrial router in the demo is a Cisco
CGR1120 which implements TCG’s TPM and TNC standards. The IoT device is a Raspberry Pi
with an Infineon TPM daughterboard. The TNC software is an open source implementation bythe Technical University of Rapperswil, Switzerland (HSR Rapperswil). The OpenSSL softwareis open source. The IoT devices and gateways may later come from a mix of vendors, due to theopen nature of the protocols.

www.infineon.com

More Info
For more information on this demo
and on IoT security, contact Steve
Hanna at steve.hanna@infineon.com

Demonstration Overview

Securing IOT with trusted computing
Trusted computing technologies supported: TPM and TNC

TPM enabled server

TPM enabled gateways

TPM enabled sensors

Rogue server

Rogue gateway

Rogue sensor

Our partners:

Published byInfineon Technologies AG
El Segundo, California© 2016 Infineon Technologies AG.
All Rights Reserved.
Order Number: xxxxxx-xxx
Date: 05 / 2016
Additional information
For further information on technologies, our products, theapplication of our products, delivery terms and conditions
and/or prices please contact your nearest Infineon Technologies
office (www.infineon.com).

Please note!
THIS DOCUMENT IS FOR INFORMATION PURPOSES ONLY AND
ANY INFORMATION GIVEN HEREIN SHALL IN NO EVENT BEREGARDED AS A WARRANTY, GUARANTEE OR DESCRIPTION OFANY FUNCTIONALITY, CONDITIONS AND/OR QUALITY OF OURPRODUCTS OR ANY SUITABILITY FOR A PARTICULAR PURPOSE.
WITH REGARD TO THE TECHNICAL SPECIFICATIONS OF OURPRODUCTS, WE KINDLY ASK YOU TO REFER TO THE RELEVANTPRODUCT DATA SHEETS PROVIDED BY US. OUR CUSTOMERS AND
THEIR TECHNICAL DEPARTMENTS ARE REQUIRED TO EVALUATETHE SUITABILITY OF OUR PRODUCTS FOR THE INTENDEDAPPLICATION.
WE RESERVE THE RIGHT TO CHANGE THIS DOCUMENT AND/OR THE
INFORMATION GIVEN HEREIN AT ANY TIME.

Warnings
Due to technical requirements, our products may containdangerous substances. For information on the types in question
please contact your nearest Infineon Technologies office.
Except as otherwise explicitly approved by us in a written
document signed by authorized representatives of Infineon
Technologies, our products may not be used in any life
endangering applications, including but not limited to medical, nuclear, military, life critical or any other applications wherea failure of the product or any consequences of the use thereof
can result in personal injury.