The pioneering work of Danfoss has received international recognition at KuppingerCole’s recent European Identity & Cloud (EIC) Conference in Munich, Germany. Danfoss’ IoT security framework project was recognized with an esteemed European Identity & Cloud Award 2017 in the Best IoT Security Project category.
Duqu, Stuxnet, Mirai and similar malware was the start of a trend of attacking connected devices in industrial environments. With IoT just about to lift off, industries are witnessing increasingly connected devices being at risk of being breached or used as weapons to attack other environments, as in the first wave of connectivity enthusiasm, the unexpected appearance of malicious actors was typically overlooked by vendors during product design and development phases, leaving the device security ignored.
In close co-operation Danfoss and Nixu have jointly developed a clean slate security platform based on modern elliptic cryptography and manageable, streamlined and mostly automated PKI. As part of platform functionality, every device gets a strong cryptographic identity during the manufacturing stage, which is then used to secure all later transactions and communication in the open Internet. The ability to address, group and manage devices with the help of a virtually unforgeable device identity; also introduces new security and business critical capabilities in license management, remote monitoring and maintenance, software updates and other areas. Ensuring root-of-trust integrity by help of some innovative hardware mechanisms results in the devices being tamper-proof and resistant against even advanced physical attacks.
The new security platform enables Danfoss a highly secure way to perform preventive maintenance and new business models. As a result of the new security platform, Danfoss will also ensure even better product quality throughout the lifecycle in a cost-efficient way.
“It is remarkable to witness an industrial technology company like Danfoss leveraging security as a true enabler for new, innovative business models. We are privileged to be part of and support Danfoss in its digitalization journey”, says Aleksandr Vara, Head of Industrial Internet Security at Nixu Corporation.
“Danfoss appreciates the new opportunities presented by the digital world. With more software built into our products, we can offer our customers appropriate control systems, intelligent data and functionalities – thereby improving user-friendliness, performance, and quality. It is imperative that we have the best possible data protection in place to do so. Nixu’s expertise has elevated us to the forefront of security in the industrial automation space “, says Theis Solberg Hjorth, Senior Security Architect, Global Research & Development at Danfoss Drives.