IoT security platform handles secure firmware, cryptographic keys, automated secure onboarding, security monitoring

Crypto Quantique is to make its universal IoT security platform, QuarkLink, available to semiconductor manufacturers and systems integrators that use root-of-trust (RoT) solutions of their own, or those sourced from other vendors. The platform was originally designed to work with Crypto Quantique’s own quantum-derived root-of-trust IP, called QDID.

The QuarkLink platform’s capabilities are far more comprehensive than typical key management services. QuarkLink handles provisioning, including secure firmware and cryptographic keys, automated secure onboarding, and security monitoring, including firmware encryption, signing and secure updates over-the-air, and certificate and key renewal and revocation. With some RoTs, including QDID, QuarkLink eliminates the need for hardware security modules (HSMs) and key injection, saving cost and time, while increasing security.

QuarkLink can be set up in minutes by engineers without specialist IoT security knowledge. End-point devices are then connected to servers through cryptographic APIs, using just a few keystrokes to initiate an automated process capable of onboarding thousands of devices in seconds to a server platform, or to multiple platforms simultaneously. AWS, Microsoft, and Mosquito are among the cloud services currently supported; more are following.

QDID generates random, unforgeable cryptographic keys on-demand in silicon by measuring the quantum effects in chips manufactured on standard CMOS processes.