What is IoT Device ID (This document is no longer maintained)
This topic describes the service architecture, benefits, and scenarios of IoT Device ID.
IoT Device ID (ID²) is an Internet of Things (IoT) identity management and data access control system that secures device identities, access to software and data assets, and end-to-end communication links. This enables trusted data to be uploaded to the cloud and recorded on the blockchain.
Architecture
Features
Identity management
Issues a unique identity for each IoT device. The identity is securely distributed to devices through pre-burning on the production line and dynamic distribution.
Secure deployment
Based on various software and hardware secure computing technologies, such as secure elements (SE), secure microcontroller units (MCU), trusted execution environments (TEE), and software sandboxed containers, it securely deploys IoT identities and keys. This meets business requirements for different security levels.
Identity authentication
It uses identity authentication technologies, such as a unique key, password, or feature for each chip, to effectively prevent identity theft and forgery.
Business data encryption
It encrypts sensitive data and supports Chinese national encryption algorithms, such as SM1, SM2, SM3, and SM4.
Features
No production line modification needed
Distributes identity information to IoT devices over a secure link without modifying the production line.
Multiple security levels
Flexibly combines security carriers (finance-grade hardware, trusted computing software), authentication mechanisms (PSK, PKI), issuance methods (production line burning, dynamic acquisition), and encryption algorithms (international, Chinese national) to meet the requirements of various security levels.
Support for open source components
Supports device access using open source components, such as Paho-MQTT C.
Multiple deployment modes
In addition to delivery as a public cloud service or an all-in-one IoT security management appliance, it also supports on-premises deployment in Apsara Stack, on bare metal servers, or in container environments.
Strong ecosystem support
Through partnerships with mainstream security chip vendors, the service has been successfully applied in multiple projects. This provides a wide range of security chips to accelerate the launch of smart devices.
Stable access for massive numbers of devices
It offers 99.9% service availability and supports hundreds of millions of concurrent processes.