The SIM is omni-present in all IoT devices and is the basis of the $1.53 trillion telecoms industry’s security.  

ZARIOT believe it should also be available to you, the IoT solution owner. You have paid for it, why shouldn’t you be able to fully utilize it? 

By opening up the SIM, while still maintaining the highest levels of security, ZARIOT can give each and every one of your devices free compute and security resource. Furthermore, our engineering expertise and commitment to support and innovate, means you can use it for what matters to you. 

Take control of your connectivity today to build a solution for your IoT, your way. 

A Solution for Your IoT’s DNA 

Just like human beings IoT is hugely diverse, but in both cases all that diversity comes from a common DNA. For IoT the DNA is the Device, the Network and the Application. You can build any device and application, but the network has been less accessible.  

ZARIOT changes that. Making the network available to be an integral part of your IoT solutions design.  

Free Compute & Security Resource for Your Devices 

ZARIOT can provide unrivalled core network analytics and award-winning network security, but also free resources on your device itself. Our engineers can reserve a fully secure area on the SIM, accessible to you using secure access protocols applied in telecoms networks across the globe.    

This storage and compute resource can then be used by your application for secure information, or to run independent applets outside of the core device. This private environment within your device hardware can then be used independently to achieve security operations, quality of service functions, or other purpose. 

While ZARIOT currently have a portfolio of pre-built solutions we can also demo how any information could be cryptographically protected and delivered to your devices SIM. Then utilized by your device using interface commands that can be directly incorporated into its code. Moreover, the information can be used but still hidden from the device itself, necessary if protecting a software feature license, blockchain token, cryptographic certificate or other sensitive application. 

The resource is available, how you use it is up to you. 

The “Techie Bit” 

ZARIOT engineers are able to maximize the SIM for IoT use by imaginatively using established telecom standards. This provides an innovative solution, but one which is built from fully tested and verified foundations. 

SIM storage allocation 

ZARIOT use the non-volatile secure storage allocation provided by the GSMA’s IoT-SAFE program which is used predominantly to store encryption keys. This has been developed in our SIM profile to accommodate larger information sets and small applets. ZARIOT have demonstrated the technical ability to successfully deploy multiple use case scenarios including the deployment of full smart card applets. 

SIM Compute Resource  

In addition to applets that can be installed on the SIM, the SIM has embedded functionality that can be called and used to augment software on the SIM, or the device itself. Diffie–Hellman & Elliptical cryptographic key generation, random number generation, signing, verification and other native functions can dynamically ensure enhanced security. These can be used for data encryption, policy enforcement or entitlement controls reducing the needs for expensive dedicated embedded secure elements (eSE) in the device hardware bill of materials. 

Secure Data Transmission & Delivery  

Data delivery to the SIM replicates much of the functionality used by over the air (OTA) updates, now common when updating eSIMs on mobile handsets and other devices.  

Small data packages can be delivered using secure modified SMS. This is enhanced further within ZARIOT using our sister companies’ industry recognized security solutions, effectively making ZARIOT a vendor in our own network.  

Larger packets require the use of Bearer Independent Protocol (BIP) this is a secured session directly between the device and the inhouse developed ZARIOT Interface Server (ZIS). The BIP session is triggered either by a SMS, device polling or initiation, or a network event e.g. new data session, change of cell etc. (Note SMS is not available for NB-IoT devices)  

Once established the BIP session can transport the larger packets at data connection speed. 

Enterprise Security Data Control 

As the IoT owner the enterprise should be the sole originator/terminator of unencrypted data. This is achieved using an embedded tunnel technique.  

The Enterprise is connected to the ZARIOT network via a VPN or dedicated link, from which they can reach the appropriate ZIS partition. API calls allow the enterprise user or equipment to trigger actions on the ZIS to update each individual SIM.  

Additionally, data can be encrypted inside the encrypted BIP session, meaning that even ZARIOT cannot see the data. Your IoT data is fully controlled by you. 

See a Demo Today 

ZARIOT staff would be happy to demo the solution for you and discuss how it can be adapted to compliment your IoT environment. Visit our website or contact your account representative.