Pairpoint - DAB - Secure Device Transactions

Technology

SECURE DEVICE TRANSACTIONS

The Digital Asset Broker (DAB) platform leverages secure SIM technology and a scalable distributed ledger core to provide services that allow physical things to benefit from securely brokered and permissioned device-to-device communications, processes and transactions. DAB is available as a Platform as a paaS service offering – where the capabilities are accessed via APIs, SDKs and a convenient operations console.

Secure

Secure authentication
Certificate and key management
Root cryptography

Trust

Decentralised
End-to-end signed data
Digital device twin

Transact

Payment service
Application automation
Immutable data storage

Secured by SIM Technology

Using patented SIM technologies, DAB agrees keys via highly secure mobile network exchange processes for use in data signing at the edge without requiring additional technologies such as a Hardware Security Module. This data is then sent over encrypted TLS connections to the DAB platform, providing double assurance of device signing and encryption. The platform uses 256-bit encryption for secure communications, enhancing IoT security and data protection.

Device Identity

Devices are uniquely identified on the DAB network, based on the SIM as a root of trust. The DAB platform then provides an extended, layered approach to device identity, where devices are given a separate DAB network identity that is used to access the DAB network. At the higher–level, DAB provides identity services based on W3C standards that allow device identity to be presented in a standardised and verifiable way to other devices and applications, which is crucial for secure IoT deployments.

DAB Distributed Ledger

Leveraging a best-in-class private permissioned business Distributed Ledger Technology core, DAB provides independent assurance of the source of data from the edge and immutable storage on the DAB ledger, along with solutions for distributed application processing.

Integrated Payment services for the Economy of Things

The DAB platform allows payments to be made as part of subscribed application flows so that devices can “purchase” goods and/or services in the Economy of Things, facilitating IoT monetization.

Application Automation

The DAB platform allows customers to use the Distributed Ledger network to automate some or all of their applications, for example, in making or receiving payments or providing data storage, enabling automation in IoT.

Application Programming Interfaces

A comprehensive range of APIs are usable from devices and customer systems to allow the enablement of autonomous automation, device management, and identity management, facilitating IoT scalability.

Learn more About Security

HOW IT REALLY WORKS…

IOT DEVICE INTEGRATION: FUNCTIONALITY AND SECURITY

Devices interoperate with the DAB platform through a “device agent”. The device agent is the component that provides DAB platform interfacing and the root-of-trust for the edge device, where a DAB software library (running on the device operating system) is integrated into the part of the application software stack running on the device. This DAB software library provides integration with the DAB-enabled SIMcard to generate keys used for cryptographic signing and edge encryption from the device to the target servers, and the same software library provides convenient access to the DAB platform capabilities.

Key to the DAB agent is “root cryptography”, where DAB supports three deployment favours:

IOT safe

Where the SIM is born with the cryptographic hardware that supports PKI keys, aimed at new greenfield device deployment.

SIM trust

A DAB family of patents that can be injected into legacy devices via over-the-air communication, aimed to upgrade brownfield devices to become DAB-enabled.

Hardware Secure Module (HSM)

Powered devices, where the DAB cryptography resides in a 3rd party chipset, outside the SIMcard.

These modes of root cryptography securely generate keys, they are used to prove the identity of the device and to sign requests when interacting with the DAB platform. The device is in turn provisioned into the DAB platform and ‘twinned’ with a digital representation of the device on the immutable distributed ledger. This establishes an end-to-end trust model that ensures customers can rely on the authenticity of data sent to and received from other devices, as only data signed by the associated SIM (or HSM) can be sent to the DAB platform, and once data is stored on the distributed ledger, it cannot be deleted due to the immutable properties of the ledger.

Learn More

Smart Contracts & Microservices

Smart contracts and microservices seamlessly connect IoT with Distributed Ledger Technology (DLT), ensuring secure interactions and transactions.

Application Automation & Customisation

Customers are given low-code tools for quick process creation and customisation, allowing for automated business transactions.

Flexible Payment Options

Integrating various payment mechanisms, such as cards and bank transfers, that are triggered by specified conditions in business processes.

Advanced Identity Capabilities

W3C standards are being leveraged for strong device identities, with decentralised IDs and verifiable credentials for increased ‘Know Your Thing’ (KYT) tools.

OPERATIONS CONSOLE: EFFICIENT MANAGEMENT AT YOUR FINGERTIPS

DAB customer organisations can manage their DAB resources using the ‘Pairpoint Operations Console’ – a web-based tool that allows customer operations users to administer the following functions: