Plug-and-Trust for IoT Deployments/IoT Connectivity Alliance Certified
Design Files
Receive the full breakdown. See the product footprint and more in the eCad file.
EdgeLock® SE050: Plug and Trust Secure Element Family – Enhanced IoT Security with High Flexibility
The EdgeLock SE050 secure element (SE) product family offers enhanced Common Criteria EAL 6+ and FIPS 140-2 certified security, for strong protection against the latest attack scenarios, and an extended feature set for a broad range of IoT use cases. This ready-to-use secure element for IoT devices provides a root of trust at the IC level and delivers real end-to-end security – from edge to cloud – without the need to implement security code nor handle critical keys and credentials.
Key Benefits
- Plug & Trust for fast and easy design-in with complete product support package and example codes for a broad range of use cases
- Extended user memory with dynamic file system to store credentials for multiple applications running on one chip
- Easy integration with different MCU/MPU platforms and OSs (Linux®, RTOS, Android®)
- Turnkey solution to reach system-level security with any MCU/MPU without the need to implement security nor handle critical keys and credentials
- Supports compliance to many security standards like IEC 62443, DLMS/COSEM, OPC-UA and ISO15118-2
- Real end-to-end security, from edge to cloud
- Trust anchor for IoT devices with secure credential injection at hardware level
Use Cases
EdgeLock SE050 supports a broad range of IoT security use cases such as TLS connection, cloud onboarding, device-to-device authentication, device integrity protection, attestation, sensor data protection, Wi-Fi credential protection, secure access to IoT services, IoT device commissioning and personalization.
Complete Plug & Trust Product Support Package
Delivered as a ready-to-use solution, the EdgeLock SE050, part of the EdgeVerse™ edge computing platform, comes with multiple pre-implemented cryptographic algorithms and protocols and a complete product support package that simplifies design-in and reduces time to market. In addition to libraries for different MCUs and MPUs, the support package also offers integration with the many common OSs including Linux, RTOS and Android. Time-saving design tools, such as sample code for major use cases, extensive application notes and compatible development kits for i.MX and Kinetis® microcontrollers, accelerate the final system integration.
Certified EdgeLock Assurance
The EdgeLock SE050, part of the Certified EdgeLock Assurance program, is designed to meet industry standards and follows NXP's security-by-design approach. It has been certified by an independent lab.
Product Details
Features
Configurations
- EdgeLock SE050E, Common Criteria (CC) certified EAL 6+ with extended range of ECC and symmetric cryptographic options
- EdgeLock SE050F, Common Criteria (CC) EAL 6+ and FIPS certified (140-2 security level 3 for OS and applet and security level 4 for the physical security of the hardware) with support of FIPS approved algorithms
- EdgeLock 2GO enabled for flexible credential customization and over-the-air key management to meet various application requirements
EdgeLock SE050 is available in different configurations. The available features depend on the chosen configuration:
Advanced Security
- Common Criteria EAL 6+ certified up to OS level as a safe environment to run pre-installed NXP IoT applets, supporting full encrypted communications and secured lifecycle management
- FIPS 140-2 certified platform with security level 3 for OS and applet and security level 4 for the physical security of the hardware
- Secured flash user memory up to 50kB
- Secure binding with host MCU/MPU, and bus encryption
- Secure credential injection with end-to-end encryption
- Advanced access control policies to credentials and data stored on chip
- Suitable for industrial IoT use cases
Cryptographic Algorithms
- ECC cryptographic support of extended set of ECC curves, including NIST (up to 521 bits key length), Brainpool, Twisted Edwards and Montgomery
- RSA up to 4096Bits
- AES and 3DES encryption and decryption
- AES modes: CBC, CTR, ECB, CCM, GCM
- HMAC, CMAC, GMAC, SHA-1, SHA-224/256/384/512 operations
- HKDF, MIFARE® KDF, PRF (TLS-PSK)
- TRNG compliant to NIST SP800-90B
- DRBG compliant to NIST SP800-90A
- Support of main TPM functionalities
Communication
- Contactless interface for late-stage parameter configuration of unpowered devices
- I²C target (up to high-speed mode, 3.4 Mbit/s), I²C controller (fast-mode, 400 kbit/s)
Package
- Small and very thin HX2QFN20 package particularly suited for space limited applications (3 mm x 3 mm x 0.33 mm)
Temperature
- Extended temperature range for industrial applications (-40 to +105 °C)
Product Programs
Certified EdgeLock Assurance
Certified EdgeLock Assurance is the mark of security by design. An independent lab has certified the security of this product, which is designed to comply with industry standards.
Certifications
Common Criteria EAL 6+ Certification
Common Criteria EAL 6+ certified up to OS level.
Resources
IoT Security Use Cases
From sensor data protection in industrial plants, secure Wi-Fi connections in smart homes to controlled access to industrial networks - trust NXP’s EdgeLock SE050 to help secure your application.
EdgeLock 2GO
If you are looking for options to provision the EdgeLock SE050 or onboard your IoT device to the cloud, checkout NXP’s secure and flexible EdgeLock 2GO IoT service platform.
Plug & Trust Software Packages
The EdgeLock SE05x Plug & Trust middleware package offers easy integration with different MCUs and MPUs simplifying design-in and reducing time-to-market.
In addition, the GitHub software packages are derivatives of the full Plug & Trust middleware package for specific use cases. For development purposes still look at the full package as well as it contains large amounts of examples, tools and additional documentation.
- The Plug and Trust middleware mini package is a subset of the Plug & Trust middleware for Linux use
- The Plug and Trust middleware nano package is a minimalistic version of the Plug & Trust middleware optimized for constrained devices. It also provides an integration with Zephyr OS and an example of Qi 1.3 authentication
Related products
Buy/Parametrics
|
|
|
|
|
|
|
|---|---|---|---|---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Documentation
Quick reference to our documentation types.
1-10 of 60 documents
Compact List
Application Note (35)
-
Plug & Trust MW Documentation[AN13030]
-
EdgeLock SE05x for Blockchain ID[AN12665]
-
SE050A/B/C/D/F APDU Specification[AN12413]
-
SE050 configurations[AN12436]Featured
-
SE05x IoT applet APDU Specification[AN12543]Featured
-
Get started with EdgeLock SE05x support package[AN13013]Featured
-
OM-SE05xARD Hardware Overview[AN13539]Featured
Brochure (1)
-
IoT Security Brochure[A71CH-IOT]
Data Sheet (1)
-
Plug & Trust Secure Element[SE050_Datasheet]
Errata (1)
-
SE050 Errata Sheet[SE050-ES]
Fact Sheet (2)
-
NXP EdgeLock® 2GO[NXP-EDGELOCK-2GO]
-
EdgeLock SE050: IoT Secure Element product family[EdgeLock-SE050-IoT-Secure-Element-Leaflet]
User Guide (4)
-
Essentials of Edge Computing eBook[EDGE-COMPUTING-EBOOK]
-
SE050A/B/C/D User Guidelines[AN12514]
-
NXP SE05x T=1 Over I2C Specification[UM11225]
-
EdgeLock SE050E User Guidelines[AN13483]Featured
White Paper (16)
-
EdgeLock SE05x and A5000 Use Case: Smart, Secure Medical Devices[EdgeLock-SE05x-and-A5000-WP]
-
EdgeLock Smart, Secure Energy Management[EDGELOCK-USE-CASE-SECURE-ENERGY]
-
EdgeLock™ SE050 Use Case: Secure Cloud Onboarding[SE050-SECURECLOUDFS]
-
EdgeLock SE050 Use Case: Secure, FIPS - and Matter-Compliant IP Cameras[SE050-USE-CASE-IP-CAMERAS-WP]
-
EdgeLock® SE051 Use Case: Smart Home Security - Matter[SE051-USECASE-SMART-HOME-SECURITY-MATTER]
-
EdgeLock SE05x and EdgeLock A5000 Use Case: Qi 1.3 Wireless Charging Authentication[QI-1-3-WIRELESS-CHARGING-AUTHENTICATION-WP]
-
EdgeLock® SE050 Use Case: Secure Communication[SE050_CASE_08_SECURE]
-
EdgeLock® SE050 Use Case: Beyond Trusted Platform Module (TPM)[NXP_SE050_USE_CASE07_WP]
-
Security by Design for IoT Devices[ZUAS-SECURITY-BY-DESIGN-FOR-IOT-DEVICES]
-
EdgeLock® SE050 Use Case: Securing the Industrial IoT[SE050-USECASE-SECURING-INDUSTRIAL-IOT-WP]
-
EdgeLock® SE050 Use Case: Wi-Fi Credential Protection[SE050-USECASE-WIFI-CREDENTIAL-PROTECTION]
-
EdgeLock® SE050 Use Case: Late-Stage Parameter Configuration[SE050-USECASE-LATESTAGE-CONFIGURATION]
-
EdgeLock® SE050 Use Case: Secure Access[SE050-USE-CASE-SECURE-ACCESS-WP]
-
EdgeLock® SE050 Use Case: Protect Sensor Data[SE050-USE-CASE-WP]
Design Resources
Hardware
Quick reference to our
board types.
1-5 of 14 hardware offerings
-
Evaluation and Development BoardsEdgeLock® SE050 Development KitsFeatured
Active -
Complete SolutionNXP Rapid IoT Prototyping Kit
-
-
Additional hardware available. View our featured partner solutions.
-
Complete SolutionPX4 Drone Flight Management Unit - RDDRONE-FMURT6
-
Software
Quick reference to our software types.
1-5 of 7 software files
-
Middleware
EdgeLock SE05x Plug & Trust Middleware (04.07.00)Featured
-
Software Development Resources
Integrating EdgeLock SE05x to FRDM MCX development boardsFeatured
-
BSPs and Device Drivers
Plug & Trust MIMXRT1060 MCUXpresso SDK Package (04.05.00)
-
Additional software available. View our featured partner solutions.
-
BSPs and Device Drivers
EdgeLock SE05x Middleware SD card image for i.MX8M (04.00.00)
-
BSPs and Device Drivers
Plug & Trust FRDMK64F MCUXpresso SDK Package (04.05.00)
Note: For better experience, software downloads are recommended on desktop.
Engineering Services
To get further assistance directly from NXP, please see our Engineering Services.
4 engineering services
-
Independent Design House (IDH)
Schematic Integrity AI Analysis
-
Independent Design House (IDH)
Android and Linux Engineering Support
-
Independent Design House (IDH)
CAD Design Translation
-
Independent Design House (IDH)
Hardware Engineering
To find additional partner offerings that support this product, visit our Partner Marketplace.