Industrie 4.0; Sicherheitsmechanismen für die Produktion 14. Deutscher IT-Sicherheitskongress; Andreas Philipp Utimaco HSM Aachen, Germany 2015 Page 1
At a glance 1... 2... 3... Headquarters in Aachen one of Germany s high-technology centers Employees: 110+ (70% in R&D, Support, Production and over 1000 combined man years of experience) more than 1.000 Installation in over 80 countries 4... 5... 6... In 2013 a management led buy out was backed by the investors Pinova and BIP Official Security clearance by the German government Revenue: (FY 12/13) 30.0 Million Utimaco HSM Aachen, Germany 2015 Page 2
The World is Changing.. 2005 Quelle: NBC News : Luca Bruno Aufbarung Paul II 2005 2013 Quelle: NBC News : Luca Bruno / AP and Michael Sohn / AP vatican election 2013 Utimaco HSM Aachen, Germany 2015 Page 3
Connected Devices 6.6 billion connected things in 2015 0.060 billion connected vehicles 0.019 billion connected telemedical devices 0.070 billions security system 0.120 billions meters 0.260 smart TV 0.625 tablets 3.000 smartphones 1.498 laptops 0.895 desktops 0.044 Servers Innovation Driver Proccing power Bandwith 1995 2005 2015 Source: Robert Bosch Engineering and Business Solutions Limited 2015 Utimaco HSM Aachen, Germany 2015 Page 4
Industrie 4.0 Smart Factory Secure Manufactoring M2M Source: Philips2015 Utimaco HSM Aachen, Germany 2015 Page 5
Transformation of industry Mechanization Electrifications Punch cards Energy: electrical Digitalization Field busses Flexible production Electronic data storage Connection/ Internet Usage of Internet standards IP connection Cyber physical systems Mobile operation Energy: Water/steam power Industrial (r)evolution Utimaco HSM Aachen, Germany 2015 Page 6
Next generation IT in Manufacturing refers to the technological evolution from embedded systems to cyber-physical systems. represents a paradigm shift from centralized to decentralized production - made possible by technological advances. connects embedded system production technologies and smart production processes. Utimaco HSM Aachen, Germany 2015 Page 7
Secure your Hardware! Utimaco HSM Aachen, Germany 2015 Page 8
Hardware security Risks: Rogue Firmware Invisible backdoor Malicious certificate Eavesdropping Mitigation Secure Storage Secure Boot Drawbacks: Vendor look Tivoization Utimaco HSM Aachen, Germany 2015 Page 9
You can t secure What you can t update Utimaco HSM Aachen, Germany 2015 Page 10
Upgrading is hard!! Must bee bulletproof NAND flash errors Unexpected power loss Network errors Unexpected incompatibilities Checksum, cryptographic signature failure (a 0,1% failure rate on 1 Mio. Device grid is 1000 broken device) Utimaco HSM Aachen, Germany 2015 Page 11
Solution A B C Utimaco HSM Aachen, Germany 2015 Page 12
Secure the supply chain Start at the SoC Secure the whole manufacturing chain Chip Manuf. Fab Device ODM Device Product distribution Device Store Application; Use case Chip Manuf. Fab OEM Service Provider Utimaco HSM Aachen, Germany 2015 Page 13
Key Distribution Utimaco HSM Aachen, Germany 2015 Page 14
Security Infrastructure Local Appliance Chip Manuf. Fab Local Appliance Device ODM Device Product distribution Centralize Service Device Store Application; Use case Local Appliance Chip Manuf. Fab OEM Service Provider Centralize Service Centralize Service Utimaco HSM Aachen, Germany 2015 Page 15
Solution feature Cluster support for high availability and scalability Meets manufacturing critical performance requirements Advanced key and data management Production service support (test/development, pre-production, and production) End-to-end encrypted communication channel Root Authority for system permissions and authorizations Advanced encrypted key and data storage Two-factor user authentication Compatible with FIPS-140-2 Level 3 Utimaco HSM Aachen, Germany 2015 Page 16
We deliver the root of trust No problem solver: Secure communication Utimaco HSM Aachen, Germany 2015 Page 17
Thanks for your attention! Andreas Philipp VP Business Development andreas.philipp@utimaco.com Utimaco IS GmbH Germanusstr. 4 52080 Aachen Germany Tel +49 241 1696 200 Fax +49 241 1696 199 Utimaco Inc. 475 Alberto Way, Suite 120 Los Gatos, CA, 95032 USA Tel.: +1 844 UTIMACO Utimaco HSM Aachen, Germany 2015 Page 18