The digital certificate and related private keys are stored in your devices with the use of the optional tamper-resistant secure elements VaultIC. The Security Broker ness connected to your IoT platform performs the authentication and validation of the messages coming from the different IoT devices and transfers only trusted messages to the background applications. INeS relies upon the proven ISTANA PKI platform, the advanced solution specifically tailored to match the needs of IoT. Using state-of-the-art cryptographic algorithms, the ISTANA PKI platform is designed to meet the highest standards to issue, manage and validate digital credentials for IoT, and is scalable to support environments with hundreds of millions of devices. Additionally, INeS features Entity Management (Identities, Group, Type, Role, Life Cycle, any custom attributes), Message Security Policy Management and Business Rules Management and it interfaces with both – the Cloud infrastructure and Business Applications. The system can be installed on customer premises, or outsourced to WISeKey and located in one of our secure data centers in Switzerland, USA, India or China. Digital certificates and associated cryptographic assets are used to identify and authenticate devices during their entire life. Only trusted devices can connect to secure networks. Digital certificates, for instance, TLS certificates, can also be used to secure communication channels from devices to gateways/routers, and from gateways/routers to servers. These cryptographic assets are securely stored in WISeKey’s VaultIC range of tamper-resistant secure elements. VaultIC is a product family, ranging from tamper-resistant Integrated Circuits to software vaults, to be used as a companion to the IoT-device host processor. VaultIC chips feature a configurable cryptographic toolbox for authentication, confidentiality and integrity, executed in a secure environment. VaultIC embeds on-chip non-volatile tamper resistant data storage capabilities for keys, certificates and customer data. The VaultIC chips’ low-power consumption profile make them a viable solution to meet the limited power budgets of IoT devices.
VaultIC comes with middleware enabling secure boot, a secure firmware update for IoT devices and secure communication (TLS). VaultIC offers the best digital security guaranteed by independent certifications:

• FIPS 140-2 Level 3
• Based on state of the art secure microcontrollers certified to Common Criteria EAL4+/5+