Proving the Business Case for the Internet of Things

Globalsign and Xage partner on IoT security

Steve Rogerson
May 1, 2019



A partnership between certificate authority GMO Globalsign and California-based IoT cyber-security firm Xage Security aims to use blockchain technology to protect devices, applications and humans.
 
Belgium-based Globalsign provides identity and security for the IoT. To secure the industrial IoT. Xage employs its blockchain-protected Xage Fabric to safeguard every device, application and human connecting to industrial networks, from edge-to-edge and edge-to-core.
 
With this partnership, Xage will be leveraging Globalsign's IoT identity platform for certificate enrolment, bringing additional enrolment capabilities to Xage's distributed security fabric technology.
 
The strong and unique identities provided by Globalsign's public key infrastructure support Xage's device discovery process, as well as device authentication and authorisation for the company's zero-touch, in-field device-to-application enrolment.
 
The joint offering is a converged and scalable method for identity management consistent with multiple standards and protocol guidelines including 802.1AR, Common Industrial Protocol (CIP) and IEC 62443. Together, the two companies address the device authentication and encryption challenges on the edge layer of industrial operations and provide secure and scalable services that meet current and future IIoT security needs.
 
"Automatic certificate-based enrolment and enforcement in the edge is a major enabler for the delivery of next-generation highly automated machine-to-machine industrial operations,'' said Roman Arutyunov, co-founder of Xage Security. "With billions of devices being deployed, customers need this convenient, secure and multi-party way to deliver distributed management of identity and enrolment at scale."
 
Globalsign's IoT identity platform is flexible and scalable enough to issue and manage billions of identities for IoT devices of all types. Using PKI as the core identity mechanism, the platform can serve the varied security use-cases of the IoT across all verticals, including manufacturing, agriculture, smart grid, payments, IoT gateways, healthcare and other industrial ecosystems. It supports the full device identity lifecycle, from initial certificate provisioning – both greenfield and brownfield deployments – to lifetime maintenance through to final sunsetting, decommissioning or transfer of ownership.
 
Giving each device or endpoint a unique identity allows them to get authenticated when they come online and then throughout their lifetime, prove their integrity, and securely communicate with other devices, services and users.
 
"Xage's mission to secure industrial operations aligns with the Globalsign IoT philosophy to protect systems and services that operate at the edge," said Nisarg Desai, director of IoT product management for Globalsign. "Combining Xage's in-field distributed security fabric with PKI-based certificate provisioning is a remarkable step forward and breaks new ground in IIoT security practices. Working closely with innovators in the space like Xage makes perfect sense."