News
INSIDE’s VaultIC Module Complements i.MX28 Processor to meet German BSI Security Requirements
February 2013 by Marc Jacob
INSIDE Secure has developed a demonstration design of a next-generation home energy gateway that will meet the stringent end-to-end security requirements mandated by the German BSI (Bundesamt für Sicherheit in der Informationstechnik) also known as the Federal Office for Information Security. The design will meet these security requirements – now being adopted by other countries – using the INSIDE VaultIC(TM) security module, which works together with the Freescale i.MX28 application processor to protect consumer data privacy, prevent hacking and fraud and address other security, safety and privacy concerns.
As the interface between the home area network of consumer appliances, meters and other home premises equipment and the wide area network link to the utility companies and service providers, the home energy gateway must address the security needs of all stakeholders. Not unlike TV set top boxes and cable operator head ends, home energy gateways and utility back-end servers must be able to authenticate each other before establishing a secure communications channel to prevent fraud and eavesdropping. The gateway itself must be immune from hacking, too.
The VaultIC security module provides comprehensive security functions such as mutual authentication, verification and generation of digital signatures, encryption/decryption and managing secure storage of cryptographic keys and certificates. It is also FIPS140-2 Level 3 certified.
The Freescale i.MX28 processor includes hardware accelerated encryption/decryption and hashing functions, dedicated hardware support for AES128-based authenticated boot and signed/authenticated firmware, an AES crypto engine, secure off-chip storage mechanisms and other security features in addition to robust microcontroller functionality.
BSI specifies the use of the Transport Layer Security (TLS) protocol between the gateway and the wide area network. This protocol is implemented by the i.MX28 processor, with the VaultIC module providing necessary security functionality.
A home energy gateway collects power consumption data from smart appliances and smart meters over a home area network, controls power activation/deactivation of these appliances and communicates with utility networks through an easy-to-use, touch-enabled wireless remote user interface. It is a key component of smart grid deployments, allowing utilities to adjust home appliance use according to power demand, provide feedback to consumers about power usage and simplify local and remote appliance monitoring and control.
