Column: System security
Device management platforms and device lifecycle
By Hector Tejero, Solutions Architect, Arrow Electronics T
he Internet of Things (IoT) has revolutionised our ability to gain insights and innovate. However, proper care of endpoint devices is needed
to ensure data integrity, prevent breaches and keep the supply chains reliable and secure. This calls for a robust and secure device management platform, to provide a centralised hub for efficiently handling large networks of IoT devices and ensuring their optimal performance. This is a critical tool for organisations to manage and oversee deployment, configuration, monitoring, maintenance and security of IoT devices throughout their lifecycle. A crucial requirement is that it must be capable to continuously monitor devices’ security states.
Best practice Before an IoT device can be connected it must first be provisioned with the necessary credentials, including a unique identity, authentication keys and certificates, its roles and permissions, parameters such as URL addresses needed for connecting to the network, and latest firmware and software. Zero Touch device provisioning,
typically carried out offline at secure facilities, automates the process and isolates credentials and critical information from untrusted third parties (i.e., device assembly line). The process begins with injecting a unique ID into a Root of Trust and programming the default configuration into devices. This unique digital key (i.e., the ID) is typically embedded in the silicon right from the start when an IoT device is built, making it the foundation for a chain of trust. Automated device onboarding service
(also known as “device enrollment”) assists in adding provisioned devices to
10 October 2023
www.electronicsworld.com
the IoT network once they are installed and ready to connect. It includes powering up the device and verifying that a two-way authenticated session has been established; configuring initial settings; provisioning cloud platform credentials; integration into the network; and determining that the device is ready to perform its intended function. Automated onboarding decreases deployment time, improves the user experience and lowers costs. The device management platform
supports features such as device authentication, encryption and intrusion detection, and facilitates software and firmware updates. IoT devices often require updates to improve functionality, fix bugs, or patch security vulnerabilities, and the platform manages their distribution and installation across the device fleet. The ability to remotely update
device settings, firmware and software is crucial in IoT environments. The device management platform enables administrators to configure and adjust settings on multiple devices without physically accessing them. Some industries have strict regulatory requirements for IoT devices (e.g., IEC 62443-4-2, GDPR, RED, ETSI EN 303 645, etc.). The platform can help ensure that devices adhere to these regulations by providing compliance monitoring and reporting features. It provides real-time visibility to the connected devices’ status, health and lifecycle state – from provisioning and deployment, to retirement and disposal. Their continuous monitoring allows administrators to identify and address problems promptly. As IoT setups use many devices, the
platform must be scaleable and efficient in accommodating the entire fleet.
Potential challenges Despite the benefits management platforms bring to IoT setups, they have challenges, too. For example, even though device management platforms are designed to enhance security, they can become targets for cyberattacks. A compromised platform can allow unauthorised access to the devices, so ensuring its regular updates, patches and security is crucial. Also, many IoT device management
platforms are provided by specific vendors, which can lead to vendor lock-in, limiting an organisation’s flexibility to switch to a different platform or integrate different systems in the future. IoT deployments often consist of devices
from different manufacturers, using differing protocols and communication standards such as Thread, Matter, Zigbee, Bluetooth, Wi-Fi, or wired Ethernet. Ensuring seamless compatibility and management of such diversity can be challenging. Implementing and configuring an IoT
device management platform can be complex, especially for organisations with limited experience in the matter. Managing a diverse range of devices, networks and protocols requires expertise and careful planning, and so does the updating of security and software – poorly managed updates can lead to device vulnerabilities and failures. Managing large volumes of data
generated by IoT devices can raise concerns about data privacy and compliance with regulations like GDPR. Therefore, organisations must ensure that data collected and managed through their platforms adheres to relevant regulations. Then there are the costs associated
with implementing and maintaining an IoT device management platform. These involve licensing fees, infrastructure costs and ongoing maintenance expenses.
Page 1 |
Page 2 |
Page 3 |
Page 4 |
Page 5 |
Page 6 |
Page 7 |
Page 8 |
Page 9 |
Page 10 |
Page 11 |
Page 12 |
Page 13 |
Page 14 |
Page 15 |
Page 16 |
Page 17 |
Page 18 |
Page 19 |
Page 20 |
Page 21 |
Page 22 |
Page 23 |
Page 24 |
Page 25 |
Page 26 |
Page 27 |
Page 28 |
Page 29 |
Page 30 |
Page 31 |
Page 32 |
Page 33 |
Page 34 |
Page 35 |
Page 36 |
Page 37 |
Page 38 |
Page 39 |
Page 40 |
Page 41 |
Page 42 |
Page 43 |
Page 44 |
Page 45 |
Page 46
