Supply Chain Security for IoT Devices
summary
Covers concrete, implementable measures: using TPM/secure element as a hardware root of trust, manufacturer-issued IDevID and locally significant LDevID (802.1AR), secure boot with e-fuse–bound signing keys, staged measurements and attestation to verify firmware, and lifecycle steps through provisioning to decommissioning. Compares actual onboarding stacks—BRSKI, FIDO FDO, SDO, DPP (QR-based Wi‑Fi)—and calls out threats (counterfeit, cloning, malicious substitution) and composite-device challenges, so it’s practical rather than high-level.
AI-written summary · about
chapters (11)
- 0:00Intro
- 1:02About the speaker
- 3:05Device Lifecycle
- 5:33Security Threats - Examples
- 7:20Trust Domain
- 8:40Identities
- 13:52Composite Devices and Field Replaceable Units
- 15:31Measurement
- 19:50Provisioning
- 24:22Onboarding Solutions
- 26:43Summary
related talks
45mBuilding a Secure IoT Device
31mSecuring the Internet of Things
29mEnabling a secure IoT from design to deployment
43mDevice Security in IoT
18mBeyond the Default Password: Building Trustworthy IoT Products
35mIoT security workshop for product managers
40mTrusted Internet of Things Device Onboarding and Lifecycle Management
57mSecuring the last mile of IoT solutions