GlobalPlatform, the standard for secure digital services and devices, has published a new protection profile for Microcontroller Units (MCUs) to help the Internet of Things (IoT) component and device manufacturers to build, certify and launch secure technologies and services.
The document is the latest update to GlobalPlatform’s Security Certification Program and defines a set of security objectives and requirements for an MCU to answer to a specific level of protection and robustness, so solution providers can effectively manage risk and demonstrate the trustworthiness of products in line with regulations, said the company press release.
Adoption of MCU technology is growing rapidly in IoT as device makers and solution providers seek out increasingly flexible solutions that can deliver a set level of security,” said Gil Bernabeu, GlobalPlatform Technical Director, in the release. “By aligning our protection profile with Common Criteria EAL2+, GlobalPlatform is making it easier for solution providers to evaluate the security services available on a device to simplify the deployment of services.”
It offers a simple framework for:
- Security laboratories to evaluate the security of MCU-based products, and validate conformance with security, regulatory and data protection mandates, such as the European Cybersecurity Act.
- Silicon and MCU vendors to demonstrate their products are secure for use across all connected consumer device use cases and verticals.
- Device manufacturers to determine the trustworthiness of components, and select a solution with the required features to protect apps and digital services on their devices.
Image credit: GlobalPlatform