Tern Share Discussion Threads

[emigna2020] 08/2/2021 15:07

Watch that spread, the shark is waiting to bite.

[ohsod1t] 08/2/2021 15:07

Well it's been counting down for a while then!

[gulampatmyg] 08/2/2021 15:03

S&S I hope you right.

[shakin not stirred] 08/2/2021 15:00

emigna I have no problem with anyone selling "one man's meat is another mans poison". Value will out and is being seen. It is inevitable the floodgates will open. TICK TOCK as I said before remember the time 1ST FEB 2021 that is when the countdown began.;-))

Edited accordingly as typo 2020 previously thanks for spotting OHSODIT which is what I was thinking when you highlighted the typo.

[still waiting] 08/2/2021 14:59

Will someone swoop for DA now?

[siddle] 08/2/2021 14:55

I wouldn't worry too much about intraday gyrations and orders.MMS looking to take this higher will welcome weaker hands.The only question is how high she can go..

[maarleck] 08/2/2021 14:54

Another big buy in the system?
The bid and offer just moved up for 100k

Bid. 9.147

Offer 9.785

[still waiting] 08/2/2021 14:53

EPS have now sorted it with DA.

[still waiting] 08/2/2021 14:46

Who’ll be next.

[billiam] 08/2/2021 14:39

Think that we can safely say with confidence that DA has now successfully completed the testing phase, and is on to roll-out. Great news, what an advantage.

[jonc] 08/2/2021 14:37

admikes associates.

All muppets.

[jonc] 08/2/2021 14:36

madmike has his finger on the pulse.

[emigna2020] 08/2/2021 14:31

Keep an eye on that daily chart now mugs!

[andrbea] 08/2/2021 14:30

So how close is the relationship Azure Sphere/DA?


andrbea
9 Dec '20 - 10:54 - 231368

Look at it from the point of view of, say, Starbucks

30,000 outlets in the world. Coffee equipment has many a IoT sensor, eg temperature.

Starbucks wants all those machines connected using MS Azure Sphere (existing equipment, so a brownfield project). I saw a Channel 9 type video (that you had to register for, so no usable link) between the Starbucks CEO and Azure Sphere last September. The CEO spoke of a further 6 years using Azure Sphere to get that done.

As Josh (Azure Sphere) revealed in the Nov 4 2020 webinar with DA, they can do the over-the-air updates themselves, to the equipment (using AT&T for the global connectivity).

But the clients wants more (as John of DA) pointed out at the webinar (the layer on top (authorize/deauthorize.... issue/revoke TLS certificates).

Azure Sphere has to say red-faced, we're just a chip (OEM) manufacturer, we don't do that certificate stuff (agnostic, at GREAT scale, with no human intervention, ... ... so, to Azure Sphere, KeyScaler is a life saver, calming the extra demands of big clients like Starbucks.

Nov 4 isn't so long ago...

See where this is going.. and be patient

In my view, Microsoft Azure Sphere buys DA within the next 4 months.
andrbea
9 Dec '20 - 10:54 - 231369 of 231370 Edit
0 0 0

The Josh/DA dialogue of Nov 4 2020

Josh (Microsoft Azure Sphere, hereinafter A-S)

Bad outcomes of insecure devices. He explains the 5 main types.

The cost of IoT attacks
7 properties for secure, connected devices (based on a Microsoft white paper, 2017)

A-S have 10 years of security experience
A-S OS updates delivered to each device by Microsoft (hereinafter M-S)
Over-the-air updates and OS patches delivered to each device by M-S

A-S certified chips, including authentication.

Devices should be able to access EAP-TLS access points. Radius servers (like Keyscaler (hereinafter K-S) are needed to get the PKI certificates.

(James, Device Authority, hereinafter DA):

explains their IoT security blueprint.

The top blue band on the slide = the secure-by-design production process, solved by A-S.

First, operationalize the device = zero touch provisioning via the K-S platform.

then (step 3) the EAP-TLS (509) certificates.

Step 4: Enterprise integration.
step 5: Decommision and/or recommission

James praises the work done (in the blue band) by A-S.

Essential to DA is:

- device trust
- data trust
- operation trust at IoT scale

And in that order. If you can't trust the device, you can't trust the data!

Automate the life cycle management of IoT devices at scale, with policy-driven solutions.

K-S can automate and simplify the issuance of certificates for A-S.

andrbea
4 Nov '20 - 17:36 - 224799 of 224801 Edit
0 5 0
Part 2

Consider the A-S-tenant.
It has its own CA (certificate authority)


Step 1: import the tenant to K-S.

A line of trust & policy management is now in place.

Once the device is 'up', it talks to the A-S service to get its bootstrap certificate.

Step 3: Register the TLS and bootstrap with K-S.

K-S generates the certificates. Signs them and then sends them to the CA (step 4).


Step 5: The IoT device checks periodically to download the latest EPS-TLS certificate from K-S.

All the above steps take place without human intervention.

The K-S goal: security life-cycle management AT A GREAT SCALE.

Case example: Medical devices, sold to hospitals, etc.

the problem: the copying and pasting of certificates won't scale to any kind of process.

To us, at DA, the goal is 'trusted automation'.

The client should be able to authorize/deauthorize medical devices connecting to the network.

He is free to use existing PKI systems and incorporate them in K-S.

DA's goal: a single pane of glass for the customer, to log into for device management (one-click approval, where possible). If that is your wont, log in via the preferred device management portal. In the background the various steps (involving K-S) are automated (so happen off-screen). E.g. to remove a certain device from the network. Keep it simple for the user.

Summary slide

The 'marriage slide' (if you like)
of

A-S (on the left) and K-S (on the right)

The A-S programme handles the 'clean' manufacturing process, for the most secure possible 'start in life' for the IoT devices.

DA does the device provisioning, device life-cycle management and provides easy integration with A-S devices.

(Josh, A-S): Cloud and network security are also needed. DA does a great job, he says, in that story.

A-S can do both brownfield and greenfield projects
A-S uses Guardian devices to shield the brownfield device(s). (secure connectivity). And then we bring in K-S to ensure the onboarding & life-cycle management.

James answers (Q&A): Yes, we can mix & match A-S devices and other devices in the existing hardware.

To ensure that device groups work harmoniously for secure provisioning and management of all device categories.

[andrbea] 08/2/2021 14:25

Sept 2020

The Azure Sphere Silicon ecosystem

'A lot of partners to come online in the very near future'


eg we have partnered with NXP, ....

slide the timebar to 8m00s

[still waiting] 08/2/2021 14:25

Yes, cheaper for them to buy back now.

[mikemichael2] 08/2/2021 14:23

They have pressed it!!!!

[kcowe] 08/2/2021 14:22

mikemichael2 another to the filtered list.

[mikemichael2] 08/2/2021 14:18

My 'associates' have all their fingers hovering over the sell button.

[andrbea] 08/2/2021 14:05

Entrust's top-tier priorities

In Australia, we have a steady growth in contactless payment technologies and device authentication services. Recent statistics show that Australians make more than 1.8 billion electronic POS transactions per year, which equates to nearly five million every day, according to Eftpos Australia. In view of the current global pandemic, we foresee a growing shift towards contactless payments.

As for the latter, secure device authentication currently stands among the top-tier investment priorities for key IoT markets. Coupled with work-from-home measures across the globe, we are seeing an increase in the need for stronger digital identity management and frictionless access to remote networks.

[still waiting] 08/2/2021 14:00

How big are EPS ?

A stepping stone onto their bigger ecosystem ?

[emigna2020] 08/2/2021 13:58

The 10% gang have their fingers poised over the sell button watch after the next blip up.

Never fails.