Active Security for Connected Device Lifecycle: The CERTIFY Architecture

The technological evolution of embedded devices over the last decades has revolutionized our way of interacting with the world, and, at the same time, brought significant cybersecurity challenges in managing digital products. One of the paradigms that has had the most impact on our daily lives is the Internet of Things (IoT), whose number is estimated to reach 74.44 billion by 2025 according to Gartner. Regulations and standards have been approved at both European and global level emphasizing the importance of managing the security of devices throughout their lifecycle. The CERTIFY framework architecture emerges as a solution to implement security management during the lifecycle of an IoT device, including mechanisms for secure design and deployment, threat monitoring and mitigation, and secure upgrading. This article describes the CERTIFY architecture, highlights its key technologies and shows how it operates to protect each phase of the device lifecycle.