Digi Trustfence Integrated, Tested and Future-Proof Security DIGI.COM | PUBLIC | © DIGI INTERNATIONAL, INC
Total Page:16
File Type:pdf, Size:1020Kb
CONNECT WITH CONFIDENCE DIGI CONNECTCORE 6UL IOT EMBEDDED MODULE TRUSTFENCE EMBEDDED IOT SECURITY FRAMEWORK 1 DIGI.COM | PUBLIC | © DIGI INTERNATIONAL, INC. STRENGTH IN NUMBERS 285 100M 25K PATENTS ISSUED THINGS CUSTOMERS AND PENDING CONNECTED DGII 1985 515 14 204 137 Year Employees Consecutive Years Million In Million NASDAQ Founded Worldwide of Profitability Revenue In Cash 2DIGI.COM | PUBLIC | © DIGI INTERNATIONAL, INC. EXTENSIVE GLOBAL REACH North EMEA APAC America Global 50 71 34 5 Latin Digi Offices America 27 Distribution Partners HQ 15 200+ 180+ 800+ Minnetonka, MN Regional Digi Channel Channel USA Offices Technical Resources Partners Technical Resources 3DIGI.COM | PUBLIC | © DIGI INTERNATIONAL, INC. BRING CONNECTIVITY TO ANY DEVICE CREATE DEPLOY MANAGE RF & EMBEDDED CELLULAR ROUTERS DIGI REMOTE MANAGER MODULES & SBCs AND GATEWAYS DIGI DEVICE CLOUD CUSTOM DESIGN SERVICES DEVICE NETWORKING COLD CHAIN SOLUTIONS 4 DIGI.COM | PUBLIC | © DIGI INTERNATIONAL, INC. DIGI EMBEDDED BENEFITS Integrated 802.11 a/b/g/n/ac networking options Network Connectivity Bluetooth Smart Ready options on selected modules Single or dual Ethernet Design change notifications/approvals Process Control and Strong 5-year hardware warranty Reliability Stringent environmental testing to meet reliability requirements Design flexibility without the traditional complexity Quick Time-to-Market Pre-certified system on module solutions Complete out-of-box software support + design services Long-Term Availability Selected NXP i.MX application processors Long lifecycle connectors and memory components (7–10+ years) Multiple component supplier options Complete Connected Device Security Framework TM Digi TrustFence Integrated, tested and future-proof Security DIGI.COM | PUBLIC | © DIGI INTERNATIONAL, INC. Zero implementation effort EMBEDDED MODULES AND SBC Industrial grade ARM-based wireless SoM and SBCs Pre-certified Wi-Fi & Bluetooth capability Linux, Android, Windows CE, and Dynamic C Designed long-term availability Low-profile and cost-effective ARM solutions Scalable architectures On module power management 6 DIGI.COM | PUBLIC | | © ©DIGI DIGI INTERNATIONAL, INTERNATIONAL, INC. INC. RF MODULES AND GATEWAYS World’s #1 selling RF module and gateway solution Over 10 million modules shipped globally Large family of pin-compatible modules Best-in-class range at over 100 miles Easy to integrate More than 20,000 customers Secure and scalable remote management 7 DIGI.COM | PUBLIC | | © ©DIGI DIGI INTERNATIONAL, INTERNATIONAL, INC. INC. CELLULAR ROUTERS AND GATEWAYS Secure and reliable wireless WAN 3G & 4G LTE support Hardened for environmental resilience Industry-leading warranty Deployed in 95 countries globally Comprehensive remote management tools Purpose-built for mission critical applications 8 DIGI.COM | PUBLIC | | © ©DIGI DIGI INTERNATIONAL, INTERNATIONAL, INC. INC. DigiDIGI MeetsMEETS CRITICAL Mission MARKET Critical REQUIREMENTS Requirements • Performs in harsh environments • Long term product availability • Uptime is a must • Built to last: free 5 year warranties Reliability • Very long system lifespans • Commercial and industrial grade • Start small. Grow large. • Range of external and embedded options • Flexible, not one-size-fits-all approach • 20+ connectivity interfaces supported Scalability • Easy to integrate and deploy • Extensive provisioning and software tools • Mitigate risk and limit exposure • 175 security controls • Meet industry regulations • 20+ integrated hardware security features Security • Maintain compliance standards • Industry compliance (PCI, HIPAA, NIST) • Meet service level commitments • Device profile enforcement • Monitor network health • Custom network health alerts and reports Manageability • Minimize truck rolls • Turnkey firmware/software updates 9 DIGI.COM | PUBLIC | © DIGI INTERNATIONAL, INC. PRE-CERTIFIEDPre-Certified Module certifications for unintentional radiation, immunity and safety minimize design risk and significantly accelerate product development cycle - FCC Class B, EN, RSS, IC, CE, VCCI, UL/UR Entirely pre-certified Wi-Fi radio design further simplifies product development and integration process - Eliminate certification costs for intentional radiation (radio) - Estimated cost of combined 802.11 a/b/g/n approval for North America, EU and Japan is ≥ US$50k - No radio design or homologation expertise required - No approval maintenance or monitoring of worldwide regulatory changes - Radio approved in US, Canada, EU, Japan, Australia/New Zealand 10 DIGI.COM | PUBLIC | © DIGI INTERNATIONAL, INC. PRE-CERTIFIEDPre-Certified ConnectCore® 6UL, ConnectCard i.MX28 and ConnectCore 6 provide seamless integration and interoperability with common network infrastructure protocols for easy end device deployments Wi-Fi 802.11 Logo Certification Ready - Managed and defined by Wi-Fi Alliance - Interoperability tests, performance, connection reliability Cisco Compatible Extensions (CCX) v4 Certification Ready - Managed and defined by Cisco - Requires 802.11n Logo certification - Interoperability and validation of Cisco proprietary feature implementations, such as power management and Cisco Certificate Key Management (CCKM) for fast and secure roaming 11 DIGI.COM | PUBLIC | © DIGI INTERNATIONAL, INC. KEY MARKETS TARGET Digi Offices Distribution Partners 12 DIGI.COM | PUBLIC | © DIGI INTERNATIONAL, INC. 12 CONNECTCORE I.MX SOM FAMILY CONNECTCORE 6 DIGI CONNECT ME 9210 FAMILY o Scalable single to quad core oDigi ARM9 processor performance oScalable, compact, low-cost, off-the o 802.11 a/b/g/n + Bluetooth 4.0 shelf module for intelligent Ethernet o Ruggedized low-profile SMT design and Wi-Fi connectivity o10/100 Mbps Ethernet with built-in PoE pass-through option, or NET+OS o802.11 bgn wireless networking CONNECTCORE for i.MX6UL o Power-efficient ARM Cortex A7 performance o 802.11 a/b/g/n/ac + Bluetooth 4.2 o Ruggedized low-profile SMTplus design 13 DIGI.COM | PUBLIC | © DIGI INTERNATIONAL, INC. CONNECTCORE I.MX SBC FAMILY CONNECTCORE 6UL SBC CONNECTCORE 6UL SB o Build on ConnectCore 6UL o Build on ConnectCore 6UL o Dual Ethernet, XBee and cellular option o Multiple expansion connectors incl. Grove o LVDS and parallel display options sensor interfaces o Production-ready industrial grade o 8-bit parallel LCD option Single Board Computer o Production-ready industrial grade Single Board Computer CONNECTCORE 6 SBC o Built on ConnectCore 6 o Additional XBee and cellular options o Multiple display and camera interfaces o Production-ready Single Board Computer with industrial grade option 14 DIGI.COM | PUBLIC | © DIGI INTERNATIONAL, INC. DIGI TRUSTFENCE BUILD SECURE CONNECTED EMBEDDED DEVICES 15 DIGI.COM | PUBLIC | © DIGI INTERNATIONAL, INC. IOT MARKET AND DEVICE SECURITY 16 DIGI.COM | PUBLIC | © DIGI INTERNATIONAL, INC. FOCUS ON CONNECTED DEVICE SECURITY, NOT “JUST” SECURE CONNECTIONS 17 • Security by obscurity is an outdated “concept” - embedded devices are already a high profile target • IoT already further amplifying existing concerns/issues • Embedded devices require a device security approach supporting their 7-10+ year product lifecycles • Go beyond mandatory need for secure connections – Secure Boot, Secure Storage, Access Control, ASLR, Device Identity/Authentication, Certificate Management, Secure Configuration/Updates, Tamper Detection … Image Source: Wind River Device Security is a critical design aspect DIGI.COM | PUBLIC | © DIGI INTERNATIONAL, INC. INTRODUCING DIGI TRUSTFENCE™ “… by 2020 more than %25 of “…70% of IoT devices are identified attacks will involve vulnerable to attack…” IoT…” Source: HP Security Research, 2016 Source: Gartner, 2016 Digi-exclusive Device Security Framework that protects connected devices 18 DIGI.COM | PUBLIC | © DIGI INTERNATIONAL, INC. SIMPLIFY BUILDING SECURE CONNECTED PRODUCTS WITH DIGI TRUSTFENCE™ 19 DIGI.COM | PUBLIC | © DIGI INTERNATIONAL, INC. DIGI TRUSTFENCE™ AS AN UMBRELLA BRAND Digi TrustFence™ IOT Device Security Embedded Cellular RF WDS Cold Chain Device Cloud Technical Services Digi XBee® Cellular TrustFence Security Digi Remote Digi Security Center Honeycomb ConnectCore® 6UL TransPort® LR54 LTE Cat 1 Audit Manager Scanning & Reporting Digi XBee® Cellular Professional Services ConnectCore® 6 TransPort® LR11 FreshTemp LTE Cat M1 and Support Digi XBee® Cellular TransPort® LR21 NB-IOT TransPort® LR31 TransPort® LR54R DIGI.COM | PUBLIC | © DIGI INTERNATIONAL, INC. IOT SECURITY – BALANCE BETWEEN ECONOMIC COST AND BENEFIT DIGI.COM | PUBLIC | © DIGI INTERNATIONAL, INC. FOUR KEY THREATS FOR IOT DEVICES DIGI.COM | PUBLIC | © DIGI INTERNATIONAL, INC. INCREASING PUBLIC ATTENTION ON IOT SECURITY • FBI recently issued PSAs specifically related to IoT/connected device security concerns . I-091015-PSA INTERNET OF THINGS POSES OPPORTUNITIES FOR CYBER CRIME . I-031716-PSA Motor Vehicles Increasingly Vulnerable to Remote Exploits • FTC released staff report urging adoption of best practices for security related design aspects of connected devices • ICS issued advisories for software update and mitigation guidance regarding specific vulnerabilities present in connected devices such as hospital medical equipment and HVAC controllers • Various examples demonstrating the vulnerability of connected device applications were widely publicized . Connected cars, ODB-II dongles, medical devices, CCTV cameras, baby monitors, HVAC units … 23 DIGI.COM | PUBLIC | © DIGI INTERNATIONAL, INC. EXAMPLES: CONNECTED VEHICLE DEVICE ISSUES • Widely publicized Fiat-Chrysler uconnect