Innovative TLS 1.3 Identity Module for Trusted IoT Device

This paper presents an innovative identity module (IM) dedicated to TLS 1.3, which fully protects server credentials. The IM software is implemented within a commercial javacard 3.04, and tested with open TLS 1.3 stacks. In order to enable smart integration within IoT devices, we designed a cheap board (Identity Module Component, IMC) comprising a microcontroller unit (MCU) and a secure element (i.e. javacard), providing a simple UART interface. The software integrity is checked by an original remote attestation algorithm. In order to detect hardware clones, we use SRAM dynamic PUF for MCU fingerprinting.