{"id":2354,"date":"2020-04-02T03:26:20","date_gmt":"2020-04-02T03:26:20","guid":{"rendered":"http:\/\/kusuaks7\/?p=1959"},"modified":"2023-12-21T13:00:27","modified_gmt":"2023-12-21T13:00:27","slug":"momentum-builds-for-psa-certified","status":"publish","type":"post","link":"https:\/\/www.experfy.com\/blog\/iot\/momentum-builds-for-psa-certified\/","title":{"rendered":"Momentum Builds for PSA Certified"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"2354\" class=\"elementor elementor-2354\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"has_eae_slider elementor-section elementor-top-section elementor-element elementor-element-5425167d elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"5425167d\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"has_eae_slider elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-24a1f44f\" data-id=\"24a1f44f\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-6488674e elementor-widget elementor-widget-text-editor\" data-id=\"6488674e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\tIn these days of the Internet of Things (IoT), Industrial IoT (IIoT), and Artificial Intelligence of Things (AIoT), in which everything is connected to everything else, either directly or via the cloud,\u00a0<em>nothing<\/em>\u00a0can be assumed to be secure, but\u00a0<em>everything<\/em>\u00a0has to be guaranteed to be secure.\u00a0The number of devices connecting to the Internet each year is growing at an exponential rate. In fact, Arm expects there to be over 1 trillion connected devices by 2035, and the one thing each of these devices is going to need is security.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-bdea4e4 elementor-widget elementor-widget-text-editor\" data-id=\"bdea4e4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\tTo address the issues associated with developing and productizing secure embedded systems and IoT devices, Arm has been instrumental in creating standards, frameworks, tools, design flows, and initiatives that help developers create secure products faster. These include the PSA framework and the PSA Certified initiative.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-050bdb4 elementor-widget elementor-widget-heading\" data-id=\"050bdb4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\"><h2>Introducing the PSA Framework<\/h2><\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6cd7d5a elementor-widget elementor-widget-text-editor\" data-id=\"6cd7d5a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\tThe Platform Security Architecture (PSA) offers a framework for securing connected devices. It provides a step-by-step guide to building in the right level of device security, reducing risk around data reliability, and allowing businesses to innovate on new ideas to reap the benefits of digital transformation.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-192bfce elementor-widget elementor-widget-text-editor\" data-id=\"192bfce\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\tThe PSA is a holistic set of threat models, security analyses, hardware and firmware architecture specifications, and an open-source firmware reference implementation. The PSA provides a recipe, based on industry best practices, that allows security to be consistently designed in, at both a hardware and firmware level. This helps embedded developers get their designs securely deployed in the field faster.\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4d0cda7 elementor-widget elementor-widget-text-editor\" data-id=\"4d0cda7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\tThe PSA was created to help ensure that security is designed into a device from the ground up. The\u00a0<a href=\"https:\/\/www.psacertified.org\/app\/uploads\/2020\/02\/Four_Steps_to_Device_Security_PSA_Certified.pdf\" target=\"_blank\" rel=\"noopener noreferrer\" data-internal=\"false\">four PSA stages<\/a>\u00a0that guide security implementation for each specific use case are as follows:\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-38247cd elementor-widget elementor-widget-text-editor\" data-id=\"38247cd\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<ul>\n \t<li><strong>Analyze<\/strong>: This involves the evaluation of assets and assessment of threats to define specific security requirements.<\/li>\n \t<li><strong>Architect<\/strong>: The architecture of the security design is based on identified security requirements.<\/li>\n \t<li><strong>Implement<\/strong>: This features an open source firmware implementation that complies with the specifications from the architecture stage.<\/li>\n \t<li><strong>Certify<\/strong>: This provides assurance that products adhere to security requirements and PSA guidelines through the PSA Certified scheme.<\/li>\n<\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2f7466c elementor-widget elementor-widget-heading\" data-id=\"2f7466c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\"><h2>Introducing the PSA Certified Initiative<\/h2><\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-032905f elementor-widget elementor-widget-text-editor\" data-id=\"032905f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\tThe reasons for implementing security are well known. We are surrounded by applications that collect, store, and analyze data, both personal and commercial. The cost of a security breach can be crippling, both financially and in terms of reputation. If an individual or a business feels that a device manufacturer or a service supplier cannot be trusted to keep their data secure, they will take their business elsewhere.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7538ecb elementor-widget elementor-widget-text-editor\" data-id=\"7538ecb\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\tThe term \u201cPSA Certified\u201d refers to an industry initiative that was founded by Arm and six other industry-leading companies. Most IoT chips and platforms do not get independently tested. This lack of assurance increases the chance of vulnerabilities in devices reaching the market. Independent testing raises the bar on security and sets agreed levels of security assurance and robustness.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a69c7ba elementor-widget elementor-widget-image\" data-id=\"a69c7ba\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" src=\"http:\/\/share.opsy.st\/5e8224c121cd0-Picture1.png\" alt=\"\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8de7902 elementor-widget elementor-widget-text-editor\" data-id=\"8de7902\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\tPSA Certified builds trust through an independent certification scheme. It helps the developers of embedded and connected systems meet multi-region IoT security requirements with a simple multi-level evaluation scheme. Putting security at the heart of the product, PSA Certified provides an independent assessment of IoT devices, platform software, and the chip\u2019s Root of Trust (PSA-RoT).\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2c21bad elementor-widget elementor-widget-text-editor\" data-id=\"2c21bad\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\tThe certification program is built on the foundations of the PSA, which was created to address the need for scalability and consistency across large-scale IoT deployments. PSA Certified offers a full security framework with example threat models, security architecture documents, and an open-source reference implementation of the Root of Trust.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-75f9d75 elementor-widget elementor-widget-heading\" data-id=\"75f9d75\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\"><h2>There are currently two levels of PSA Certified (a third level is in development):<\/h2><\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-796756c elementor-widget elementor-widget-heading\" data-id=\"796756c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\"><h3>PSA Certified Level 1<\/h3><\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8804b10 elementor-widget elementor-widget-text-editor\" data-id=\"8804b10\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\tThe foundation of PSA Certified, this level features a questionnaire which is filled in by the partner and checked by a PSA Certified test lab. These questions were derived from analyzing threat models of common IoT products and establishing ten key security goals. The latest release of this questionnaire is aligned and mapped to IoT security standards, government requirements, and emerging law, thereby making it easier for chip makers, software platforms, and device manufacturers to show globally recognized best practice.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c5363a6 elementor-widget elementor-widget-heading\" data-id=\"c5363a6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\"><h3>PSA Certified Level 2<\/h3><\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c035cb1 elementor-widget elementor-widget-text-editor\" data-id=\"c035cb1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\tThis follows on from Level 1 by adding 25 days of security evaluation of the Root of Trust (PSA-RoT) in a test lab. Achieving this level of certification represents significant dedication to security, where the chip vendor needs to provide evidence of protecting against scalable, remote software attacks.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-cabeb99 elementor-widget elementor-widget-text-editor\" data-id=\"cabeb99\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\tPSA Certified Level 1 is applicable to chips, real-time operating systems (RTOSs), and devices. PSA Certified Level 2 increases the robustness testing by focusing on the PSA Root of Trust (PSA-RoT), and is therefore aimed at chip vendors.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-619db0d elementor-widget elementor-widget-heading\" data-id=\"619db0d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\"><h2>PSA Certified Adoption and Building Momentum<\/h2><\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-69ff578 elementor-widget elementor-widget-text-editor\" data-id=\"69ff578\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\tBuilding secure chips and devices for the IoT is non-trivial. The documents, deliverables, and testing scheme of PSA Certified have been designed to make the path easier, quicker, and more affordable for the electronics industry. Chip vendors, RTOS companies, and OEMs who have their products PSA Certified can showcase their solutions\u00a0<a href=\"https:\/\/www.psacertified.org\/certified-products\/\" target=\"_blank\" rel=\"noopener noreferrer\" data-internal=\"false\">on this website<\/a>\u00a0and use\u00a0<a href=\"https:\/\/www.psacertified.org\/legal\/trademark-usage-request\/\" target=\"_blank\" rel=\"noopener noreferrer\" data-internal=\"false\">PSA Certified trademarks<\/a>\u00a0and logos.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-efbf5bc elementor-widget elementor-widget-text-editor\" data-id=\"efbf5bc\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\tThe momentum behind PSA Certified is growing, with certifications from eight out of the ten top silicon providers at PSA Certified Level 1, including new certifications from\u00a0<a href=\"https:\/\/www.renesas.com\/eu\/en\/\" target=\"_blank\" rel=\"noopener noreferrer\" data-internal=\"false\">Renesas<\/a>,\u00a0<a href=\"http:\/\/www.unisoc.com\/iot-solutions\" target=\"_blank\" rel=\"noopener noreferrer\" internal=\"false\" class=\"broken_link\">Unisoc<\/a>,\u00a0<a href=\"https:\/\/www.winbond.com\/hq\/\" target=\"_blank\" rel=\"noopener noreferrer\" data-internal=\"false\">Winbond<\/a>, and\u00a0<a href=\"https:\/\/www.nordicsemi.com\/\" target=\"_blank\" rel=\"noopener noreferrer\" internal=\"false\" class=\"broken_link\">Nordic<\/a>\u00a0Semiconductor.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-523e03a elementor-widget elementor-widget-text-editor\" data-id=\"523e03a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\tThe PSA Certified initiative has enjoyed an exciting year, resulting from hard work by the full PSA Certified founding members and lead partners. Momentum is increasing as more and more partners join the PSA Certified scheme. The result of PSA Certified is to make the IoT a smarter and more secure place for all.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-90c6de5 elementor-widget elementor-widget-text-editor\" data-id=\"90c6de5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\tFirst Published on <a href=\"https:\/\/www.embedded-computing.com\/home-page\/momentum-builds-for-psa-certified\" rel=\"noopener\">Embedded-Computing<\/a>.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>In these days of the Internet of Things (IoT), Industrial IoT (IIoT), and Artificial Intelligence of Things (AIoT), in which everything is connected to everything else, either directly or via the cloud,\u00a0nothing\u00a0can be assumed to be secure, but\u00a0everything\u00a0has to be guaranteed to be secure.\u00a0The number of devices connecting to the Internet each year is growing<\/p>\n","protected":false},"author":760,"featured_media":4158,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"content-type":"","footnotes":""},"categories":[195],"tags":[93],"ppma_author":[3615],"class_list":["post-2354","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-iot","tag-internet-of-things"],"authors":[{"term_id":3615,"user_id":760,"is_guest":0,"slug":"clive-max-maxfield-2-2","display_name":"Clive Maxfield","avatar_url":"https:\/\/www.experfy.com\/blog\/wp-content\/uploads\/2020\/04\/medium_d96bfe3c-1e79-40e7-98cd-26c9c80fb5b5-150x150.jpg","user_url":"https:\/\/www.clivemaxfield.com\/coolbeans\/","last_name":"Maxfield","first_name":"Clive","job_title":"","description":"Clive (Max) Maxfield is Collector and Communicator of Technological Information at Maxfield High-Tech Consulting. He wrote books on Electronics, Computing, FPGAs, Mathematics, and 3D Graphics. In the past, he had acted as Contributing Editor, Editor, and Editor-in-Chief at a variety of publications, including EETimes.com, Embedded.com, and EEWeb.com."}],"_links":{"self":[{"href":"https:\/\/www.experfy.com\/blog\/wp-json\/wp\/v2\/posts\/2354","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.experfy.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.experfy.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.experfy.com\/blog\/wp-json\/wp\/v2\/users\/760"}],"replies":[{"embeddable":true,"href":"https:\/\/www.experfy.com\/blog\/wp-json\/wp\/v2\/comments?post=2354"}],"version-history":[{"count":6,"href":"https:\/\/www.experfy.com\/blog\/wp-json\/wp\/v2\/posts\/2354\/revisions"}],"predecessor-version":[{"id":35101,"href":"https:\/\/www.experfy.com\/blog\/wp-json\/wp\/v2\/posts\/2354\/revisions\/35101"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.experfy.com\/blog\/wp-json\/wp\/v2\/media\/4158"}],"wp:attachment":[{"href":"https:\/\/www.experfy.com\/blog\/wp-json\/wp\/v2\/media?parent=2354"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.experfy.com\/blog\/wp-json\/wp\/v2\/categories?post=2354"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.experfy.com\/blog\/wp-json\/wp\/v2\/tags?post=2354"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.experfy.com\/blog\/wp-json\/wp\/v2\/ppma_author?post=2354"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}