Common problems and their mitigations
Here are some key problems that are really common and some indications on how to solve them.
Establishing a trust relationship between the backend and a device
Here, the main problem is how to establish a trust relationship between a device in the field and the management infrastructure. In order to tackle this problem, a few elements have to be understood, not only about the device itself but also about its fabrication and enrollment process.
The main challenge in the usual situation is that the vendor will want to reduce the actions toward an individual device as much as possible in order to keep the manufacturing costs as low as possible, keep the hardware cost as low as possible, but still get the highest possible level of assurance for their money.
The questions you have to ask for the device are as follows:
- Is the MCU capable of reasonable cryptographic operations (that is, SSL/TLS)?
- Does the MCU have a secure enclave...
