PSA Certified allows developers of IoT solutions and makers of IoT devices to set up the authenticity and security of data that is collected from a vast range of IoT devices
Arm and its independent security testing lab partners Brightsight, Riscure, CAICT and UL, as well as consultant Prove & Run, established PSA Certified in order to support the extensive deployment of secure Internet of Things (IoT) solutions, based on the Platform Security Architecture (PSA) framework.
PSA Certified, through independent security testing, allows developers of IoT solutions and makers of IoT devices to set up the authenticity and security of data that is collected from a vast range of IoT devices.
Commenting on the development, Paul Williamson, Vice President and General Manager, Emerging Businesses Group, Arm, said, “PSA gave the industry a framework for standardising the design of secure IoT devices, and PSA Certified brings together the leading global independent security testing labs to evaluate the implementation of these principles.”
“This will enable trust in individual devices, in their data, and in the deployment of these devices at scale in IoT services, as we drive towards a world of a trillion connected devices,” he added.
Framework for IoT device security
A four-stage framework, PSA provides guidance to IoT designers through their journey of developing a secure connected device. The framework goes beyond principles and instructions, with a wide-ranging set of downloads that include Threat Models and Security Analyses documentation, open source Trusted Firmware (TF-M) hardware, firmware architecture specifications and application programming interface (API) test kits.
PSA Certified offers an easy and complete method of security testing. It consists of two elements: a developer focused API test suite and a multi-level security robustness scheme.
The security testing is based on third-party lab-based evaluation that develops trust by way of independent checking of generic parts of an IoT platform such as PSA Root of Trust, real-time operating system (RTOS) and the device itself.