Rebooting the smartcard

Nov 25, 20162 likes474 views

1. The document discusses rebooting the smartcard concept to make it more plug and play, developer friendly, and malware resistant. 2. It proposes isolating secure and non-secure code using a microkernel architecture to improve auditability. 3. Details are provided on Ledger's latest consumer devices, the Ledger Nano S and Ledger Blue, and resources for developers including sample apps and documentation.

Rebooting the Smartcard
Rebooting Web Of Trust Paris Meetup
November 2016
Nicolas Bacca
@btchip

A trust layer between the blockchain
and the physical world
For industrials, enterprises and consumers
Securing the first and last mile
LEDGER TECHNOLOGY

Without trust, data has no actionable value
node
node
node
node
nodeCloud servers
User on a PC or a
smartphone Industrial
sensor / IoT
node
node node
Connected
object
Blockchain/IT
trusted zone
Physical world
absence of trust
Is this really you?
Am I allowed to executethis transaction?
Critical temperature data
Did the driver got switched?

The ubiquitous Safe
Best technical solution for at scale (CHEAP) secure deployment
Best technical solution against physical attacks (theft, evil maid)

A configurable Safe
Lot of resources invested in secure remote management
Great portability of Java Card, at least on paper

But not YOUR manageable identity
The secrets are not YOUR secrets
Or are yours but you can’t manage them (fingerprint match on card)
> >

Definitely not made for YOU
Not Plug & Play
Cannot be reliable in a regular (malware infected) computing environment

Rebooting the Smartcard
Plug and Play
Developer friendly
Malware resistant
Auditable

Plug and Play
Native browser / mobile access
No driver, no middleware
Reusing the FIDO standards

Malware resistant
Physical user consent can be required for all sensitive operations
Display the operation to be validated, in human readable format

Developer friendly
Native isolation whenever possible
Accelerated, low level cryptographic primitives to build on

Improving on isolation, using ARM capabilities
Native application 1
Native application 2
Native application 3
Microkernel
User
seed
MMU lock
User modeSupervisor mode
System call
UI application

Auditable
Isolate secure and non secure code
Build on top of a microkernel that can be gradually opened

Ledger platform architecture
Trusted / Secure component
(Secure Element or enclave)
with limited I/O options
Non trusted component
with more I/O options
Screen
Direct control from the Trusted component, proxied
Pairing at boot
time
User app 1
User app 2
Button
Sensor
USB

Our latest consumer devices
Ledger Nano S : available now
Ledger Blue : pre order,
Christmas delivery
(larger screen, BLE)

Hardware Oracle - for machines
Cryptographically attestable
anti-tampering sensors
￭ Secure chip ST31G480 (CC EAL6+)
￭ Sensor
￭ 3 axis anti-tampering MEMS
￭ USB interface for blockchain computer

Getting started with development
Nano-S resources : compiler and SDK - https://github.com/ledgerhq/ledger-nano-s
Sample applications : https://github.com/LedgerHQ/blue-sample-apps
Documentation in progress : http://ledger.readthedocs.io/
Developer Slack : http://slack.ledger.co
Documentation is getting put together, so don’t hesitate to ask on Slack

This document discusses making smartcards more useful for security applications by building a trust layer between blockchains and the physical world. It proposes using secure elements like smartcards combined with secure microcontrollers to create cryptographically authenticated hardware security tokens. These devices would allow installing applications securely, authenticating to blockchains, and improving on smartcard limitations regarding developers and auditing. Examples given include the Ledger Nano S hardware wallet and plans to implement bitcoin, ethereum, and other cryptocurrency applications as well as password management and OpenPGP.

IoT summit - Building flexible & secure IoT solutionsEric Larcheveque

��

1) Building secure IoT solutions requires establishing trust between the physical world and blockchain through a trusted layer. 2) There are security challenges in developing, deploying, and upgrading IoT devices including provisioning secrets, verifying device authenticity, and protecting against software exploits and physical attacks. 3) Ledger's BOLOS architecture builds security into hardware oracles and secure elements like their ST31G480 chip to provide a stateless and tamper-evident solution for IoT security.

Blockchain solutions leading to better security practicesEric Larcheveque

��

Blockchain technologies can drive better security solutions by providing a trust layer between the blockchain and the physical world. Hardware-based security devices can help solve problems like securing user key management and addressing weaknesses in randomness and side-channel attacks. Ledger Technology has developed multiple secure hardware devices of varying tamper resistance that integrate with blockchains in a user-friendly and developer-friendly way.

Cryptocurrencies Hardware Wallets - 33C3 Bitcoin AssemblyEric Larcheveque

��

Cryptocurrency hardware wallets provide a secure way to store private keys by protecting them in a dedicated device. They address risks of online attacks, malware, and phishing by requiring confirmation on the hardware device. A new class of devices was needed that makes private key storage easy to use, recoverable, auditable, and adaptable while protecting against creative malware and side channel attacks through techniques like deterministic signing, constant time crypto, and isolation between trusted and non-trusted components. Popular implementations take different approaches by being fully open source versus using a secure element, but aim to balance security, auditability and ease of use.

Edcon - Hardware wallets and smart contractsEric Larcheveque

��

This document discusses hardware wallets and their role in securing interactions between blockchains and the physical world. It provides an overview of hardware wallets, comparing them to older approaches like smartcards, and outlines how they can securely facilitate operations on private data with user validation. The document also discusses challenges around trustless and networkless interactions with smart contracts and proposes a "mini trusted ABI" approach to help address this. Finally, it encourages developers to build their own apps using the available resources.

Bitcoin hardware wallets securityEric Larcheveque

��

IoT Security: Cases and Methods [CON5446]Leonardo De Moura Rocha Lima

��

In developing for IoT, security is not often the highest priority: APIs exposed without care and devices deployed with default passwords become gateways to your network and your data. Many best practices can be used to thwart attacks on your devices, but they have to be thought through from the first architectural design. This session covers many recent IoT attacks, their consequences, and how they could have been prevented. It also explores the many security levels one device can have, from totally exposed to completely secured against physical tampering and identity theft.

The 5 elements of IoT securityJulien Vermillard

��

More and more IoT vulnerabilities are found and showcased at security events. From connected thermostats to power plants! Insecurity became the favorite subject for creating catchy IoT headlines: "Connected killer toaster", "Fridges changed into spamming machines","Privacy concerns around connected home". We will explore the five challenges one has to face when building a secure IoT solution: - hardware security: how to avoid rogue firmwares and keep your security keys safe? - upgrade strategy: you can't secure what you can't update! - secure transport: no security without secure transports. - security credentials distribution: how to distribute security keys to a fleet with millions of devices? - cloud vulnerability mitigation, how to keep your fleet of devices safe from the next Heartbleed? Current enterprise infrastructure provides solutions for handling application security but are they really matching the IoT challenge? Could running a PKI client on a low power wireless sensor node be an option? Despite those difficulties, we will show how a modern IoT device management standard like Lightweight M2M with DTLS is the way for building a secur-first IoT solutions. It provides a solution for upgrading your device, distributing your security keys and comes with a full range of cryptography cipher suites, from PSK algorithm for very constrained devices to high level of security using X.509 certificates. Furthermore for adding security to your solution we will present you ready to use opensource libraries for implementing secure IoT servers and devices. The way for quickly releasing your next catchy connected product.! Ultimately we will showcase Wakaama and Leshan, the Eclipse IoT Lightweight M2M implementation maybe your next best friend in the troubled water of Internet-Of-Things security!

IoT Saturday PN 2019 - EurotechLuca Dazi

��

The document discusses Internet of Things (IoT) gateways and Eurotech's Everyware IoT platform. Everyware IoT provides secure connectivity between devices and applications through IoT edge gateways. It uses the Everyware Software Framework (ESF) and Kura operating system to develop and deploy IoT edge computing applications. Eurotech offers a range of industrial IoT gateways running ESF and supports open standards. Everyware IoT provides security across devices, communication, and the cloud to securely connect devices and integrate data.

IoT security fresh thinking 2017 sep 9Arvind Tiwary

��

The document discusses the formation of an IoT Security Task Force by the IoT Forum and CISO Platform to develop threat models, controls, and arrangements to improve IoT security. It proposes a "SECURENET" concept involving managed security network providers that would monitor IoT traffic and devices, block suspicious activity, and collaborate to identify security issues. The task force aims to provide fresh thinking around technical and legal approaches to attribute attacks and enable self-defense in IoT networks through a regulatory sandbox and cross-border response protocols. Critiques and improvements are invited.

Azure IoT HubWinWire Technologies Inc

��

Azure IoT Hub is a fully managed service that enables reliable and secure bidirectional communications between millions of IoT devices and a solution back end. Azure IoT Hub: • Provides reliable device-to-cloud and cloud-to-device messaging at scale • Enables secure communications using per-device security credentials and access control • Includes device libraries for the most popular languages and platforms In this webinar, you can learn about how to set up and start working with an Azure IoT Hub and explore all the capabilities that IoT Hub provides to communicate with your devices.

Application layer Security in IoT: A SurveyAdeel Ahmed

��

Internet of Things (IoT) is the future as we are advancing towards an era of intelligent ambiance where daily life objects will be communicating to each other for the sake of convenience in our lives. But the comfort as a result of technology demands certain measures for the safety of these devices from wrong hands. The issue of security remains hot as we step further in this vast area of technological advancement since it can directly influence one’s personal security. Different techniques have been adopted to incorporate security in IoT communication stack for the purpose of confidentiality, identification, data integrity, authentication, authorization and non-repudiation which are the fundamental security traits worth considering. This paper discusses the different application layer protocols by comparing them on the basis of these traits.

Scaling IoT Deployments: DevOps for the Internet of ThingsBalena

��

This document discusses the need for DevOps practices for IoT deployments to address challenges of scale, complexity, and the need for developer tools. It notes that without a modern software deployment strategy, vulnerabilities go unpatched, features are locked in, and misconfigurations can cause downtime. The core drivers creating demand for IoT DevOps are the rapid scaling of IoT devices exceeding other devices, embedded software now requiring full lifecycle support, and the types of developers needed for billions of devices being different than previous generations. It also briefly discusses running Docker on embedded devices and the on-device software architecture used to enable safe and iterative IoT software deployments.

Azure SphereMirco Vanini

��

This document provides an overview of Azure Sphere, a new solution from Microsoft for creating highly secured, connected microcontroller (MCU) devices. It discusses the opportunity and risks of IoT, introduces the seven properties of highly secured devices, and describes the key components of Azure Sphere including the secured MCU, secured operating system, and secured cloud services. It also covers the Azure Sphere developer tools and SDK, partner ecosystem, and provides a recap of the overall solution.

1 importance of light weight authentication in iotChintan Patel

��

1. The document summarizes key concepts related to Internet of Things (IoT) including definitions of IoT, the layered architecture of IoT, and security challenges in IoT. 2. It discusses IoT authentication approaches including device-to-device and global authentication as well as lightweight cryptography algorithms used for authentication and encryption in resource-constrained IoT devices. 3. The document also covers elliptic curve cryptography and its role in IoT security.

Password Security System SyedAbdullah127

��

This document presents a project on a password security system. It discusses why password security is important for protecting computers and personal information. It then lists the required equipment for the project such as logic gates, switches, resistors, and a breadboard. Circuit diagrams and pin diagrams are presented for the logic gates used. Applications of password security systems include doors, safes, and lockers.

IoT Security: Cases and MethodsLeonardo De Moura Rocha Lima

��

The document discusses IoT security and methods for using Java to build more secure IoT applications. It covers recent IoT attacks exploiting weaknesses like default passwords. The Java Cryptography Architecture and libraries like Bouncy Castle provide cryptography support for tasks like encryption and digital signatures. Secure elements and JavaCard provide hardware-backed security by executing code and storing keys in a protected environment. The document emphasizes that security needs to be considered from the start of a project to reduce costs and vulnerabilities.

Iot security and Authentication solutionPradeep Jeswani

��

DotNetToscana - Azure IoT Hub - Il ConcentratoreRiccardo Cappello

��

IoT on AzureVinoth Rajagopalan

��

SecurEntry by PrehKeyTeccshergi

��

CIS14: Securing the Internet of Things with Open StandardsCloudIDSummit

��

Connecting Stuff to Azure (IoT)Mark Simms

��

Securing the Internet of ThingsPaul Fremantle

��

Security Fundamental for IoT Devices; Creating the Internet of Secure ThingsDesign World

��

iot hacking, smartlockpickidsecconf

��

This document summarizes a presentation on analyzing the security of smart locks. It defines IoT and describes the target smart lock device. It details analyzing the device components and chipset, reverse engineering the mobile app, intercepting BLE communications, and finding vulnerabilities in the API and BLE authentication that allow exploiting the lock. Solutions proposed include updating firmware to add BLE crypto and adding authentication to the API backend.

IoT Security in Action - Boston Sept 2015Eurotech

��

Demystifying Internet of Things with Azure IoT SuiteWinWire Technologies Inc

��

IoT on azureJoanna Lamch

��

IRJET - Smart Door SystemIRJET Journal

��

This document summarizes a research paper on a smart door system using face recognition with Raspberry Pi. The proposed system uses face recognition and remote monitoring technologies to only allow entry to people who match identities in the database and enter the correct password. It involves a Raspberry Pi, camera, electromagnetic lock, WiFi module, and mobile app. The system is intended to provide higher security for homes by detecting strangers and notifying owners. It aims to address issues with existing smart door systems and improve security while reducing costs.

More Related Content

What's hot (20)

IoT Saturday PN 2019 - EurotechLuca Dazi

��

IoT security fresh thinking 2017 sep 9Arvind Tiwary

��

Azure IoT HubWinWire Technologies Inc

��

Application layer Security in IoT: A SurveyAdeel Ahmed

��

Scaling IoT Deployments: DevOps for the Internet of ThingsBalena

��

Azure SphereMirco Vanini

��

1 importance of light weight authentication in iotChintan Patel

��

Password Security System SyedAbdullah127

��

IoT Security: Cases and MethodsLeonardo De Moura Rocha Lima

��

Iot security and Authentication solutionPradeep Jeswani

��

DotNetToscana - Azure IoT Hub - Il ConcentratoreRiccardo Cappello

��

IoT on AzureVinoth Rajagopalan

��

SecurEntry by PrehKeyTeccshergi

��

CIS14: Securing the Internet of Things with Open StandardsCloudIDSummit

��

Connecting Stuff to Azure (IoT)Mark Simms

��

Securing the Internet of ThingsPaul Fremantle

��

Security Fundamental for IoT Devices; Creating the Internet of Secure ThingsDesign World

��

iot hacking, smartlockpickidsecconf

��

IoT Security in Action - Boston Sept 2015Eurotech

��

Demystifying Internet of Things with Azure IoT SuiteWinWire Technologies Inc

��

IoT Saturday PN 2019 - EurotechLuca Dazi

��

IoT security fresh thinking 2017 sep 9Arvind Tiwary

��

Azure IoT HubWinWire Technologies Inc

��

Application layer Security in IoT: A SurveyAdeel Ahmed

��

Scaling IoT Deployments: DevOps for the Internet of ThingsBalena

��

Azure SphereMirco Vanini

��

1 importance of light weight authentication in iotChintan Patel

��

Password Security System SyedAbdullah127

��

IoT Security: Cases and MethodsLeonardo De Moura Rocha Lima

��

Iot security and Authentication solutionPradeep Jeswani

��

DotNetToscana - Azure IoT Hub - Il ConcentratoreRiccardo Cappello

��

IoT on AzureVinoth Rajagopalan

��

SecurEntry by PrehKeyTeccshergi

��

CIS14: Securing the Internet of Things with Open StandardsCloudIDSummit

��

Connecting Stuff to Azure (IoT)Mark Simms

��

Securing the Internet of ThingsPaul Fremantle

��

Security Fundamental for IoT Devices; Creating the Internet of Secure ThingsDesign World

��

iot hacking, smartlockpickidsecconf

��

IoT Security in Action - Boston Sept 2015Eurotech

��

Demystifying Internet of Things with Azure IoT SuiteWinWire Technologies Inc

��

Similar to Rebooting the smartcard (20)

IoT on azureJoanna Lamch

��

IRJET - Smart Door SystemIRJET Journal

��

Removing Security Roadblocks to IoT Deployment SuccessMicrosoft Tech Community

��

1) The document discusses securing IoT devices and infrastructure through X.509 certificate-based identity and attestation, TLS-based encryption, and secure provisioning and management. 2) It describes securing the cloud infrastructure with Azure Security Center, Azure Active Directory, Key Vault, and policy-based access controls. 3) The document promotes building security into devices and infrastructure from the start through standards-based and custom secure hardware modules.

lamacchia-palladiumNed Hayes

��

Palladium is a new set of security capabilities in Windows enabled by new hardware. It aims to protect software from other software running in Ring 0 to defend against malware. There are four main categories of new security features: sealed storage, attestation, curtained memory, and secure input/output. Palladium creates a separate protected execution environment for applications using hardware memory isolation and privileged cryptographic services. It provides strong process isolation, a root key for persistent secret protection, and a secure path between the user and applications.

BluBØX IntroJesica Trejo

��

Iot vupico-damien-contreras-2018-05-17-light-v3Damien Contreras

��

Presentation used during SAP Tech days 2018 in Tokyo during a joint presentation between Hortonworks & Vupico represented by myself, what to think when implementing an IoT strategy. Why use Fog / Edge computing, showcased in a fun use case that I built: a cocktail machine built using raspberry pies with AndroidThings, cameras, TensorFlow lite, Mobilenet 1.0, peristaltic pumps and orchestrated by NiFi.

[Codientu.org] design of a microcontroller based circuit for software protectionHieu Le Dinh

��

This document describes a microcontroller-based circuit designed for software protection. The circuit exchanges an encrypted key between a protected software program and a hardware "hard key". The key exchange process and encryption algorithm are described. The circuit hardware components including a microcontroller, crystal oscillator, and MAX232 chip are listed. Software was written in C to control the microcontroller. Testing showed the protected software runs fully with a valid hard key, but with limitations without a valid key, demonstrating the circuit can reliably protect software from unauthorized use and piracy.

From Bitcoin Hardware Wallets to Personal Privacy DevicesMecklerMedia

��

Ryan Wilson - ryanwilson.com - IoT SecurityRyan Wilson

��

This document provides a summary of an IoT security presentation. It discusses what IoT devices are, why they pose security risks, and how others have been affected by IoT compromises. The presentation then outlines a basic IoT security checklist and covers common attack vectors like weak passwords, lack of encryption and patching, and physical security issues. It emphasizes the importance of inventory, segmentation, strong unique passwords, logging, and engagement with device vendors on security responsibilities and practices.

Avoid embarrassing press by designing secure IoT products with Misha SeltzerProduct of Things

��

These are the slides from Misha Seltzer's talk at Product of Things Conference in Tel Aviv on July 2018: Who this talk is for: this talk is for product managers that want to avoid common design flaws that lead to easily hackable IoT devices. After this workshop you will be able to: Spot and eliminate security design flaws early Know where you, as a PM, can get involved to improve your product's security Learn from mistakes done by others, and not repeat them What is covered: RTOS as well as Linux-based IoT protection Rules of thumb for basic IoT security Unexpected areas from which security flaws might creep into your products. In the land of IoT, with so many different companies/manufacturers competing for the same space, it's essential to have a good reputation. One embarrassingly hackable product can not only hurt sales but kill the company altogether. In this talk, we'll go over a couple of cases of embarrassing IoT security flaws, learn how/where those mistakes were made, and what can you, as PMs, do not to repeat those mistakes.

Are you ready for Microsoft Azure Sphere?Mirco Vanini

��

Azure Sphere is Microsoft's solution for highly securing IoT devices. It includes Azure Sphere certified chips, the Azure Sphere operating system, and the Azure Sphere Security Service. Together, these provide devices with 10 years of ongoing security updates directly from Microsoft. Azure Sphere aims to empower organizations to securely connect devices and build new IoT solutions with built-in security through its end-to-end platform. The current Azure Sphere development kit uses the MT3620 chip and provides tools to simplify and streamline IoT development.

IoT Sense IOT Sense

��

An edge gateway software and hardware-agnostic IoT platform called "IoT Sense" aggregates data from various sensors using multiple connectivity options and protocols. It performs local edge analytics and filtering before syncing select data and insights to public/private clouds. IoT Sense provides secure 3-level security, is hardware/OS agnostic, and offers remote management of scalable deployments through an open API and container-based architecture.

IRJET - RFID based Automatic Entry Restricted Mechanism for Home SecurityIRJET Journal

��

This document describes a RFID-based automatic door locking system for home security. The system uses an Arduino nano microcontroller, RFID reader and tags, wireless transmitter and receiver modules, NodeMCU for WiFi connectivity, a 3x4 keypad, and servo motor. The system provides three ways to unlock the door - using a password via keypad, detecting an authorized RFID tag, or using a mobile application. It aims to remotely control the door unlock via a web connection and message passing between the owner and door lock for increased security and convenience.

Advanced Security System for Bank Lockers using Biometric and GSMIRJET Journal

��

This document proposes an advanced security system for bank lockers using biometric authentication and GSM technology. The system aims to provide more secure access to bank lockers than traditional key-based systems. It works by enrolling users through fingerprint scanning and storing their fingerprint data and mobile number in a database. When a user wants to open their locker, the system verifies their identity by matching their fingerprint and sends a one-time password via SMS to their registered mobile number. The user then enters this password to unlock the locker, providing two-factor authentication through biometrics and mobile verification. The system is designed to address security issues with lost or duplicated keys and keep pace with digital authentication methods.

Internet of things (IoT) Architecture Security AnalysisDaksh Raj Chopra

��

This Document Briefly summarizes the Security and Privacy Concern Evaluation of Internet of Things (IoT)’s Three Domain Architecture. The Security implementation challenges faced by IoT devices are addressed along with newly Added Requirement for these devices. The Architecture which we will be using throughout our analysis is explained so as to a novice user. We will summarize the possible attacks and countermeasures for each and every domain followed by a developer friendly checklist to be followed for security.

Fingerprint base security systempraful borad

��

This document describes a fingerprint-based security system project. The system uses a fingerprint sensor and microcontroller to scan fingerprints and compare them to registered fingerprints to grant access. It has two modes - master mode to add and delete users, and user mode to authenticate employees. If the scanned fingerprint matches a registered print, the microcontroller sends the user ID to the computer and activates devices like unlocking a door. The system aims to provide secure access control for organizations using biometric fingerprint identification.

Iot SecurityMAITREYA MISRA

��

The document discusses Internet of Things (IoT) security challenges and countermeasures. It begins with basics of IoT and sensors, then discusses how IoT connects to the internet. It outlines several approaches to securing IoT, including restricted access, encryption of network and data, managing default APIs, addressing human elements of security, and learning from past exploits. Specific threats like denial of service attacks, man-in-the-middle attacks, and brute force/dictionary attacks are examined. The document concludes that IoT security design must enable open yet secure infrastructure while respecting user privacy through individual policies.

M I Dentity 3 G 040111Jan Vekemans

��

mIDentity 3G is an effortless end-point security solution that provides high speed, secure network access through encrypted storage on a separate smart card for PKI applications and policy-based remote management. The solution allows confidential access to sensitive information on a secure mobile communications platform that is centrally managed and locally executed. It offers flexible application scenarios including secure data storage, mobile data storage, secure virtual desktops, secure online banking and custom applications with guaranteed point-to-point encryption.

usb-lock-rp-enJavier Arrospide

��

This document describes USB LOCK RP, a centralized network endpoint security software system that provides remote management and authorization of removable storage devices connected to Windows PCs over a network. It allows specifying authorized devices for individual PCs or groups, monitors device insertions, logs file transfers, and protects data on authorized portable devices with encryption and passwords. The system supports Windows operating systems and requires only a low-demand network setup to function.

Industrial Pioneers Days - Machine LearningVEDLIoT Project

��

IoT on azureJoanna Lamch

��

IRJET - Smart Door SystemIRJET Journal

��

Removing Security Roadblocks to IoT Deployment SuccessMicrosoft Tech Community

��

lamacchia-palladiumNed Hayes

��

BluBØX IntroJesica Trejo

��

Iot vupico-damien-contreras-2018-05-17-light-v3Damien Contreras

��

[Codientu.org] design of a microcontroller based circuit for software protectionHieu Le Dinh

��

From Bitcoin Hardware Wallets to Personal Privacy DevicesMecklerMedia

��

Ryan Wilson - ryanwilson.com - IoT SecurityRyan Wilson

��

Avoid embarrassing press by designing secure IoT products with Misha SeltzerProduct of Things

��

Are you ready for Microsoft Azure Sphere?Mirco Vanini

��

IoT Sense IOT Sense

��

IRJET - RFID based Automatic Entry Restricted Mechanism for Home SecurityIRJET Journal

��

Advanced Security System for Bank Lockers using Biometric and GSMIRJET Journal

��

Internet of things (IoT) Architecture Security AnalysisDaksh Raj Chopra

��

Fingerprint base security systempraful borad

��

Iot SecurityMAITREYA MISRA

��

M I Dentity 3 G 040111Jan Vekemans

��

usb-lock-rp-enJavier Arrospide

��

Industrial Pioneers Days - Machine LearningVEDLIoT Project

��

Recently uploaded (11)

Instrucciones en manual de amplificador de audio k8060 en pdfMariaNievesPrez

��

International Discussion of Law Presentation CISG.pptxcharleschukwuogor

��

Most Trusted Home Automation Company in India- Jasmine Smart Homessanskar01021985

��

Lenskart final about comparing the analysisYugamKejriwal1

��

ĐÁP ÁN 11 @ FDSF SDF SFSF SDFSDFSDFSDFDFDDDDDDDDDDDDDDDLuthMnh54

��

Word Processing - Module 1.pptx to becomesteveparker9990sp

��

Train _Accident _Safety using track .pptxRajaBabu290247

��

Materials, Sensors and Actuators in MEMS technology evolution.pptxDhamodharanSrinivasa1

��

Materials, Sensors, and Actuators in MEMS Technology Evolution Microelectromechanical Systems (MEMS) technology has revolutionized various industries, including automotive, healthcare, aerospace, and consumer electronics. MEMS devices integrate mechanical and electrical components at the microscale, enabling precise sensing, actuation, and control. The evolution of MEMS has been significantly influenced by advancements in materials, sensors, and actuators. This document provides a comprehensive analysis of the role of materials, sensors, and actuators in the development of MEMS technology. 1. Introduction to MEMS Technology MEMS technology refers to miniaturized mechanical and electro-mechanical devices fabricated using microfabrication techniques. These systems typically include sensors, actuators, and electronic components integrated onto a single chip. The advancements in MEMS technology have been driven by the development of novel materials, improved fabrication techniques, and enhanced sensor-actuator performance. Key Features of MEMS Technology: Miniaturization of mechanical components Integration of electronic circuits and mechanical systems High precision and sensitivity Low power consumption Cost-effective mass production 2. Materials in MEMS Technology The choice of materials plays a crucial role in determining the performance, reliability, and efficiency of MEMS devices. MEMS materials can be broadly classified into structural materials, functional materials, and packaging materials. 2.1 Structural Materials Structural materials form the backbone of MEMS devices and are responsible for mechanical strength, stability, and durability. (a) Silicon-Based Materials Single-Crystal Silicon (Si): The most widely used material in MEMS due to its excellent mechanical properties, low cost, and compatibility with semiconductor fabrication. Polycrystalline Silicon (Poly-Si): Commonly used for microstructures such as beams, membranes, and cantilevers. Silicon Carbide (SiC): Offers high-temperature stability and chemical resistance, making it suitable for harsh environments. (b) Metal-Based Materials Aluminum (Al): Used for interconnects and microstructures due to its good electrical conductivity and ease of deposition. Gold (Au) and Platinum (Pt): Preferred for biomedical applications due to their biocompatibility. Titanium (Ti): Provides high strength and corrosion resistance for specialized MEMS applications. (c) Polymer-Based Materials Polydimethylsiloxane (PDMS): Widely used in biomedical MEMS due to its flexibility and biocompatibility. SU-8: A high-aspect-ratio photoresist polymer used in microfluidics and lab-on-a-chip applications. Polyimide: Provides good mechanical and thermal properties for flexible MEMS applications. 2.2 Functional Materials Functional materials exhibit specific electrical, magnetic, thermal, or optical properties that enhance MEMS device performance. (a) Piezoelectric Materials Lead Zirconate Titanate (PZT): Common

Computer Hardware and its classification .pptxleonsaifullah

��

Etendue of microLED: fundamental theory and applicationsBrian Kim, PhD

��

Meffier_Infra.pdfssssssssssssssssssssssssssashutoshpropertyinin

��

Instrucciones en manual de amplificador de audio k8060 en pdfMariaNievesPrez

��

International Discussion of Law Presentation CISG.pptxcharleschukwuogor

��

Most Trusted Home Automation Company in India- Jasmine Smart Homessanskar01021985

��

Lenskart final about comparing the analysisYugamKejriwal1

��

ĐÁP ÁN 11 @ FDSF SDF SFSF SDFSDFSDFSDFDFDDDDDDDDDDDDDDDLuthMnh54

��

Word Processing - Module 1.pptx to becomesteveparker9990sp

��

Train _Accident _Safety using track .pptxRajaBabu290247

��

Materials, Sensors and Actuators in MEMS technology evolution.pptxDhamodharanSrinivasa1

��

Computer Hardware and its classification .pptxleonsaifullah

��

Etendue of microLED: fundamental theory and applicationsBrian Kim, PhD

��

Meffier_Infra.pdfssssssssssssssssssssssssssashutoshpropertyinin

��

Rebooting the smartcard

1. Rebooting the Smartcard Rebooting Web Of Trust Paris Meetup November 2016 Nicolas Bacca @btchip

2. A trust layer between the blockchain and the physical world For industrials, enterprises and consumers Securing the first and last mile LEDGER TECHNOLOGY

3. Without trust, data has no actionable value node node node node nodeCloud servers User on a PC or a smartphone Industrial sensor / IoT node node node Connected object Blockchain/IT trusted zone Physical world absence of trust Is this really you? Am I allowed to executethis transaction? Critical temperature data Did the driver got switched?

4. The ubiquitous Safe Best technical solution for at scale (CHEAP) secure deployment Best technical solution against physical attacks (theft, evil maid)

5. A configurable Safe Lot of resources invested in secure remote management Great portability of Java Card, at least on paper

6. But not YOUR manageable identity The secrets are not YOUR secrets Or are yours but you can’t manage them (fingerprint match on card) > >

7. Definitely not made for YOU Not Plug & Play Cannot be reliable in a regular (malware infected) computing environment

8. Rebooting the Smartcard Plug and Play Developer friendly Malware resistant Auditable

9. Plug and Play Native browser / mobile access No driver, no middleware Reusing the FIDO standards

10. Malware resistant Physical user consent can be required for all sensitive operations Display the operation to be validated, in human readable format

11. Developer friendly Native isolation whenever possible Accelerated, low level cryptographic primitives to build on

12. Improving on isolation, using ARM capabilities Native application 1 Native application 2 Native application 3 Microkernel User seed MMU lock User modeSupervisor mode System call UI application

13. Auditable Isolate secure and non secure code Build on top of a microkernel that can be gradually opened

14. Ledger platform architecture Trusted / Secure component (Secure Element or enclave) with limited I/O options Non trusted component with more I/O options Screen Direct control from the Trusted component, proxied Pairing at boot time User app 1 User app 2 Button Sensor USB

15. Our latest consumer devices Ledger Nano S : available now Ledger Blue : pre order, Christmas delivery (larger screen, BLE)

16. Hardware Oracle - for machines Cryptographically attestable anti-tampering sensors ￭ Secure chip ST31G480 (CC EAL6+) ￭ Sensor ￭ 3 axis anti-tampering MEMS ￭ USB interface for blockchain computer

17. Getting started with development Nano-S resources : compiler and SDK - https://github.com/ledgerhq/ledger-nano-s Sample applications : https://github.com/LedgerHQ/blue-sample-apps Documentation in progress : http://ledger.readthedocs.io/ Developer Slack : http://slack.ledger.co Documentation is getting put together, so don’t hesitate to ask on Slack

18. Thank you @btchip

�ݺ�ߣ

Rebooting the smartcard

Recommended

More Related Content

What's hot (20)

Similar to Rebooting the smartcard (20)

Recently uploaded (11)

Rebooting the smartcard