Thales and Telstra are working with Microsoft and Arduino to pave the way for scalable security for connected IoT devices, by implementing a solution that enables trusted and secure end-to-end communication between device and cloud.

The solution enables instant and standardized mutual authentication between a device and a cloud platform via cellular networks, while fully-complying with GSMA IoT SAFE security specifications.

Within the IoT ecosystem, billions of devices collect, process and send data to the cloud, where a range of different IoT services are executed.

To enable security, the IoT cloud service must have absolute trust in data received from connected devices. Equally, devices need to trust the cloud. This is only possible if the device and server are mutually authenticated. However, the IoT devices market is so fragmented - with a patchwork of different operating systems and chips being utilized - that security services scalability and duplication are very limited.

The level of trust required is enabled by a sophisticated ‘security-by-design’ approach for any IoT devices based on field-proven and standardized SIM or eSIM technology.

As a result, as soon as an IoT device is switched on, any SIM or eSIM featuring Thales’s IoT SAFE application is automatically and securely provisioned. Once the IoT device gets a proper Digital Certificate created and stored in the SIM/eSIM, then a trusted communication between the device and the server is permitted, in full respect of data integrity and confidentiality.

“The key role of GSMA IoT Safe specifications is to deliver scalable and future-proof IoT security for cellular networks. Being able to in future offer standardized easy to implement IoT security to our customers as part of our existing IoT connectivity service, is a huge leap forward in terms of IoT security for all use cases, including smart energy, automotive, health, and home solutions,” said Gerhard Loots, Global IoT Solutions executive at Telstra.

"With this hassle-free approach we support a sustainable and scalable trusted ecosystem from which all key stakeholders such as mobile network operators, device manufacturers, and IoT industries can benefit,” said Emmanuel Unguran, senior VP Mobile and Connectivity Solutions at Thales.

“By bringing together each IoT technology layer; device, software, network and cloud, we can deliver a more streamlined approach to IoT security. This allows customers and partners to focus on creating business value from their solutions while ensuring their IoT deployments remain secure,” said Tony Shakib, GM, Azure IoT Business Acceleration at Microsoft Corp.