Thales e-Security Enables Data Security for High-tech Manufacturing

Data security solutions from Thales e-Security enable high-tech manufacturers to secure their production operations and produce devices with inherent security capabilities.

High Tech Manufacturing

The connected devices produced by high-tech manufacturers are attractive targets for cybercriminals, who seek opportunities to use devices for illicit activities, such as man-in-the-middle attacks, intercepted/manipulated data-in-transit and more. Thales e-Security HSMs and data encryption solutions are trusted by manufacturers worldwide to address today's high-tech manufacturing security challenges.

Attacks on Connected Devices

Devices or attackers impersonating a trusted device or user could use that status to conduct a range of illicit activities, such as a man-in-the-middle attack, tapping into corporate networks, and more. Advanced persistent threats can take control of device software to steal customer information or intellectual property.

Introduction of Unauthorized Code

Insufficient security over code updates can allow hackers an entry point to the device in order to launch attacks or steal data from the device itself. Without adequate security measures at the factory, unauthorized code can also be introduced during the production process itself.

Unauthorized Production Runs

Unsecured manufacturing processes can lead to production of unauthorized units that can be sold on the black market, either with authentic branding or white labeled. This exposes the organization to significant financial and reputational damage.

Device Authentication with Digital Certificates

Manufacturers use Thales nShield HSMs in conjunction with security applications to secure root signing keys and the issuance of digital certificates, which are injected into connected devices during the production process. The nShield provides end-to-end protection of the certificate and key generation, and device insertion process, allowing for strong authentication of each device. Read our Polycom case study for a detailed example.

Secure Software & Firmware Updates

Without proper security over software and firmware updates, hackers can inject unauthorized code onto devices to launch attacks or establish a trusted connection to corporate networks. With strong authentication in place, using HSMs to establish a root of trust, the device can validate that any code being introduced comes from a trusted publisher.

Strong Code Signing

The best practice to confirm the integrity of code updates and defend against the risks associated with software tampering is to ensure that code is signed using highly secure signing processes with private signing keys protected by HSMs. Thales nShield HSMs are trusted by manufacturers worldwide to secure their critical keys.

Protect Against Brand and Financial Damage

By defending against the production of unauthorized units you can mitigate the brand and financial damage associated with overbuilding and cloning, especially with remote manufacturing facilities.

Ensure Only Authorized Code is Running on Devices

By allowing only unauthorized code to run on devices you can defend against:

  • hackers using the device's trusted status to tap into networks or conduct man-in-the-middle attacks
  • software that sidesteps organizational policies
  • erroneous or malicious code introduced by vendors in your supply chain
Cost Savings and Revenue Opportunities

With the ability to update devices deployed in the field, you can reduce the time and costs associated with in-person updates. You can also deliver firmware updates that create new revenue opportunities through improved product performance or additional functionality.

Case Studies : Thales Accelerates Polycom’s Integration of Digital Certificates into Phones

Polycom turns to Thales Professional Services and Thales HSMs to enhance VoIP Security. Thales accelerates Polycom’s integration of digital certificates into phones....

Download

Case Studies : Qube Cinema Revolutionizes Digital Cinema Distribution With Help From Thales Hardware Security Modules

As a manufacturer of servers, projectors, mastering and distribution technology for digital cinema, Qube Cinema saw a unique opportunity to introduce a highly disruptive technology...

Download

Data Sheets : Thales nShield Certified Systems Engineer Training Data Sheet

The nCSE provides the training to give your people the knowledge to get the most from your investment. Getting the best from your technology requires a technology, getting the best use from it depends on how much you invest in it....

Download

Посмотрите интерактивное демо Подробнее
Записаться на демо Записаться
Свяжитесь со специалистом Свяжитесь с нами