SecEdge was created by silicon industry veterans to address the unique security challenges of the growing edge Computing space. SecEdge provides a groundbreaking digital security platform for securing industrial controls, IoT, edge AI and edge Servers.

SecEdge platform is a comprehensive security and trust solution including:

• Strong Device security foundation
  • Authentication – establishing or leveraging hardware root of trust and extending it into the application runtime, across various STMicroelectronics product families
  • Trust Provisioning – Firmware TPM enabling crypto-agility and late binding of credentials for added supply chain security
• AI Model Protection and Management
  • AI Model protection at rest and secure AI model update management
• Groundbreaking secure connectivity
  • Patented technology to implement multiple IPSec tunnels from chip to cloud
    • Ensure data privacy by separating data and management channels
    • Prevent devices from being visible on the public Internet
• Development Agility
  • Rapid integration and deployment tools to reduce time to market for secure products

Key advantages

• Single vendor, full-stack solution leaves no security gaps from edge to cloud
• Consistent security approach across STM32 MPU platforms reduces initial implementation and management costs
• Enables achieving compliance with new regulations such as CRA and NIST 800 guidelines

Products or services of SecEdge

SecEdge’s Digital Security Platform enables STM32MPU customers to rapidly deploy advanced secure connectivity from chip to cloud. It enables compliance with various regulations and recommendations across various industries and countries. The platform comprises several components:

Device Security

• SEC-TPM: is a TCG 2.0 compliant firmware TPM (fTPM) coupled with a TPM provisioning and attestation service that provides authentication and boot measurements for edge and IoT devices
• EmSPARK™ IoT Security suite: is a comprehensive device and application security software that makes use of hardware security capabilities provided by the STM32MPUs and extends it into the application runtime

Secure Connectivity

• MicroEdge™: is a Linux application deployed on the STM32MPUs that initiates multiple IPSec tunnels from STM32 devices. This establishes secure tunnels from device to cloud backends. MicroEdge™ can make use of STMicroelectronics' security ICs or other roots of trust such as TEEs.

SecEdge in STMicroelectronics ecosystem

SecEdge’s Secure connectivity solution extends the use of STM32 security features enabling a unique secure connectivity and device onboarding solution.

• Supports multiple STM32 root of trust options
• Secure Element ICs such as TPMs
• Arm TEEs
• Secure flash
• Device Provisioning
• Uses unique ID bound to Root of Trust (where available)
• Generates credentials and configures the device
• Network Isolation
• Reduces visible attack surface; isolates public internet interfaces to its own private network namespace
• Manages network stack features
• IPsec management
• Creates IPsec tunnels to cloud/data center end points
• Simplifies management; maps ports across NAT firewalls