STMicroelectronics and Prove & Run jointly Launch Scalable iot Hardware Security Platform

STMicroelectronics and Prove & Run, a provider of ultra-secure off-the-shelf software solutions for Connected systems, jointly presented a scalable iot hardware security platform developed in collaboration. The security platform integrates Prove & Run's ProvenCore MTM high security operating system with ST's industry-leading STM32L4 secure microcontroller (MCU) and its Common Criteria certified STSAFETM-A100 secure unit. The certification component enables the platform to meet the security requirements of iot hardware from the most basic to the highest level.

The new security platform simplifies the development of high-security iot products, allowing developers to focus on the functionality of application products. The security platform does not require professional data security development skills, because the platform's security services have been proven through security verification and testing, including application isolation, secure startup, secure firmware updates, and key storage to prevent physical attacks.

Security platform components include:

● STM32L4 microcontrollers: Integrate ST's ultra-low power technology with ARM® Cortex-M4 processor cores for next-generation consumer electronics, industrial, medical and meter devices that focus on energy consumption. The STM32L4 has a maximum processing performance of 100 DMIPS while operating at only 37µA/MHz. In addition to a large number of intelligent peripherals, advanced low-power analog circuits, up to 1 Mb of flash memory and 320 KB of SRAM, the STM32L4 microcontroller integrates multiple security features (MPU, debug cycle, execution-only protection), enabling designers to develop highly secure, robust, and reliable embedded solutions.

● P&R-ProvenCore High Security RTOS system: Its proven properties enable application isolation and platform stability. The real-time operating system adopts a microkernel approach, which has very little impact on the integration of existing application code, while providing powerful security services, implementing advanced secure coding methods, including dedicated secure startup and secure application update functions, and can choose the data integrity service integrated with the STSAFE-A100 platform.

● STSAFE-A100 Security Unit: An industry-leading total security solution with Common Criteria EAL5+ certification to protect against forgery, cloning and information theft, and against denial-of-service cyber attacks. The STSAFE-A100 has a secure embedded operating system that provides authentication, secure communication, secure data management and platform data integrity services such as secure boot and firmware upgrades. Security units can be personalised using keys within ST facilities.