Making IoT and Embedded Devices Even More Secure

Ensuring IoT and embedded devices are secure and up-to-date after deployment can be quite challenging. Keeping them operational in the field means they require vulnerability patching, firmware updates, and long-term reliability to ensure their continued functionality. Thistle Technologies helps ease that task with three products: an OTA update, secure/verified boot, and Control Center that support the device throughout its lifecycle.

Thistle’s end-to-end over-the-air (OTA) update delivers new firmware and application versions to IoT devices. This package features the company’s cloud services, developer tools, and device-side components. It’s compatible with embedded Linux systems on architectures like ARM/ARM64 and x86-64. In addition, the OTA product works with devices running on Infineon PSoC 6 MCUs (Fig. 1).

Rather than using ad hoc scripts or manual updates, device makers can deploy verified and cryptographically signed updates to those systems with built-in rollback and failure handling. If something goes wrong during an update, the device automatically reverts to a known-good version instead of becoming unusable. This approach is more practical due to quick vulnerability patching and ensures products stay current for years after launch.

The secure and verified boot product adds another layer of security to devices. With secure boot, firmware signed with an approved cryptographic key can run upon device bootup. It’s like a gatekeeper that stops unsigned or tampered code from executing and compromising the system (Fig. 2).

Verified boot extends this trust by checking cryptographic hashes or signatures at all boot chain stages, starting from the bootloader, through intermediate firmware stages, to the operating system and applications. This helps prevent attackers from injecting malicious firmware or modifying low-level system components. If verified boot detects tampering in the chain, it stops the boot or rolls back to a trusted state.

Overall, secure/verified boot includes enablement tools, device software, and cloud support, allowing teams to install boot-level protections on compatible hardware platforms.

Lastly, Thistle’s Control Center shows the businesses’ device fleets and security posture. Viewed on a web interface, teams can manage update campaigns, monitor rollout status, and check firmware versions across devices. If a device doesn’t have the most recent critical patch, the control center highlights that information so that operators can take action (Fig. 3).

All three of these products work together to help keep IoT and other devices secure over time. By combining OTA updates, secure boot, and centralized device fleet management, manufacturers can lower operational risk, quickly patch vulnerabilities, and maintain long-term device reliability. Even better, this doesn’t require manual processes to run.

In the video above, Thistle Technologies Founder and CEO Window Snyder discusses the features and benefits of these products.