Recently, Alibaba Cloud’s Link ID² Internet of Things device identity authentication service platform completed a security evaluation of commercial password applications. This evaluation is provided by the National Financial Technology Evaluation Center (Bank Card Testing Center) to provide professional evaluation services.
Commercial cryptographic application security evaluation (referred to as secret evaluation) is an important part of the cryptographic testing and certification system, and it is the compliance, correctness and effectiveness of cryptographic applications in networks and information systems built using commercial cryptographic technologies, products and services. Evaluation. According to the requirements of Article 10 of Chapter II of the "Administrative Measures for the Security Evaluation of Commercial Encryption Applications (Trial)", critical information infrastructure and network security level protection level 3 and above information systems shall be evaluated at least once a year.
Alibaba Cloud Link ID² (IoT Device ID) is an identity authentication system for IoT devices. It provides IoT systems with end-to-end trusted access capabilities such as device security authentication, secure connection, and business data encryption through trusted computing and cryptographic technology. Provide unique identification information for each connected device to prevent the device from being tampered with or counterfeited. Alibaba Cloud Link ID² in the device burning process, ID² distributes ID² keys that support the national secret algorithm to manufacturers through the key distribution center, and uses national secret cryptography to ensure the confidentiality and integrity of the data during the distribution process. In the device authentication link, Alibaba Cloud Link ID² is based on the national secret algorithm, and ID² authenticates the device with trusted identity through the authentication center. At the same time, ID² adopts the lightweight iTLS protocol that supports the national secret algorithm for device authentication and secure connection, which is compatible with TLS and greatly reduces the resource consumption of IoT devices.
Alibaba Cloud Intelligent IoT Senior Security Expert Shi Fei said: "ID² has been deeply involved in the application of identity authentication and national secret cryptography for many years, and is committed to building an identity authentication security infrastructure for IoT devices based on national secret algorithms. It focuses on national secret algorithms and trusted computing. , ID² also provides end-to-end trusted software and hardware integrated solutions, including the ID² security chip that supports the national secret and the national secret cloud server cryptographic machine."