Intel® Secure Device Onboard (Intel® SDO)
Place, Power, Provision
Scale IoT Onboarding - Any Device to Any IoT Platform
Today, customers are struggling with “hard-coded,” manual provisioning methods to onboard devices to IoT device management and cloud analytics platforms. This can take up to an hour per device, is
Intel has worked with the ecosystem to deliver Intel® Secure Device Onboard (Intel® SDO), a neutral onboarding service with simplified ecosystem enablement to put more devices into service faster.
Intel® Secure Device Onboard (Intel® SDO):
Hardware Protected Onboarding and Privacy
Eliminate passwords, Mirai* style IoT DDoS attacks, and insecure user/installer authentication of IoT devices in the field with Intel® Enhanced Privacy ID (Intel® EPID) embedded in silicon. The Intel SDO service leverages the Intel EPID identity to cryptographically validate the device. Unlike typical PKI-based authentication methods, Intel SDO does not insert Intel into the authentication path. Intel brokers a “rendezvous url” where Intel EPID technology opens a private authentication channel between the device and the customer’s IoT platform.
Intel EPID is an open TCG/ISO standard that has been proven at scale with over 2.7 billion keys distributed in Intel and non-Intel MCU processors since 2008. Intel EPID solves the privacy dilemma for IoT to ensure device onboarding and software provisioning updates are kept anonymous and secure. Intel EPID establishes a best practice identity model for IoT onboarding and is compatible with more traditional PKI IoT identity models.
A Superior Onboarding Experience & Ecosystem Enablement ROI
Intel SDO will dramatically scale customer’s IoT deployments while increasing profitability for device manufacturers, distributors, installers, and IoT platform providers. By inherently distributing an embedded hardware security model with the device coupled with one-time software enabling tools, Intel SDO creates a repeatable model that works with any IoT ecosystem. During deployment, highly skilled technicians can be replaced with installers that merely add power to the device for fast activation.