Security Profiles for OCF Devices and Trusted Platforms

摘要

Various systems and methods for creating security profiles for Internet of Things (IoT) devices and trusted platforms, including deployments of OCF specification devices, are discussed herein. In one example, a technique for onboarding a subject device for use with a security profile includes: receiving a request to perform an owner transfer process of a device associated with a device platform; Verifying a certificate of authentication associated with the device in question, the certificate of authentication being signed by a certificate generated using a manufacturer-embedded key, the key being provided by a trusted hardware component of the device platform; and performing a device supply of the device in question based on the authentication certificate, since the device supply causes the device in question to use a security profile that is linked to manufacturer-embedded keys.