Device Certificate Verification for Genuine IoT Identity

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Industrial control systems and IoT/IIoT devices face security challenges due to increased connectivity and vulnerabilities, necessitating effective methods for genuine device assurance and trust establishment to prevent unauthorized access and counterfeiting.

Innovation Solution

The proposed solution involves using certificate-based techniques to verify the authenticity of devices by checking the presence of a root of trust in firmware and a private key associated with a device certificate, ensuring that only genuine devices with valid certificates can run genuine firmware, thereby preventing counterfeiting and ensuring trust and identity.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If open systems are adopted for increased connectivity and productivity, then convenience and connectivity are improved, but vulnerability to exploits increases

Engineering Contradiction:
ImproveconnectivityVSAvoidvulnerability to exploits
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The system performs preliminary verification of device authenticity and firmware integrity before allowing operation. A root of trust is established in the firmware, which verifies device certificates and protected storage contents before the device can execute, preventing exploitation before it can occur.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

A certificate-based trust intermediary is introduced between the open system and external entities. The device certificate (DevCert) signed by an intermediate certificate authority (InterCA) acts as a mediator that verifies device identity, allowing secure communication in open systems without exposing vulnerabilities.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If security controls are added to mitigate insider attacks, then security is improved, but device complexity increases

Engineering Contradiction:
ImprovesecurityVSAvoiddevice complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

Security functions are segmented into distinct components: firmware-based root of trust, device certificates in persistent storage, private keys in protected storage, and verification routines. This segmentation allows each security component to be independently verified and managed, reducing overall system complexity while maintaining strong security.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The device performs self-verification of its own authenticity through the verification routine that checks the root of trust, device certificate, and protected storage contents. This self-service approach eliminates the need for external verification infrastructure, simplifying the system while maintaining security.

Inventive Principle:
Principle #25Self-service

3Reliability

If certificate verification is implemented to ensure device authenticity, then trust establishment is improved, but verification time increases

Engineering Contradiction:
Improvetrust establishmentVSAvoidverification time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The root of trust is pre-established in the firmware during manufacturing, and device certificates are pre-signed by the intermediate certificate authority. When verification is needed, the system only needs to check these pre-established credentials rather than performing full cryptographic proofs, significantly reducing verification time while maintaining trust.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentEP3568795B1Techniques for genuine device assurance by establishing identity and trust using certificates
Publication Date: 2023.03.08 HONEYWELL INTERNATIONAL INC
  • EP3568795B1 patent drawingFigure 1
  • EP3568795B1 patent drawingFigure 2~3
  • EP3568795B1 patent drawingFigure 4

AI summary

A method includes verifying (402) that firmware of a device (200) is trusted and contains a root of trust. The method also includes verifying (406) that a protected storage (214) of the device contains a private or secret key associated with a device certificate (DevCert) that is stored in a persistent storage (204, 210, 212) of the device. The method further includes verifying (414) the device certificate of the device using the root of trust. In addition, the method includes, in response to verifying that the protected storage contains the private or secret key associated with the device certificate and verifying the device certificate, determining that the device is a genuine device. The root of trust could include a trusted certificate or a trusted public key.