FlexConnect IoT

The FlexConnect platform employs a “secure by design” architecture to protect your data and hardware from external threats:

• Encryption at Every Level: All data is encrypted both at rest and in transit using industry-standard protocols, ensuring your information remains private even if intercepted.

• Default “Deny-All” Inbound Policy: FlexConnect devices primarily initiate outgoing connections to our backend over a secure VPN. This architecture makes the devices exceptionally robust against external attacks, as the system does not “listen” for unsolicited traffic.

• Minimal Attack Surface: By default, the only incoming connection enabled is SSH (which can be disabled by the user).

• User-Level Control: While the system is hardened out of the box, clients are permitted to install and configure standard firewalls, such as UFW (Uncomplicated Firewall), if they require granular control over specific local network traffic.

The microprocessors (MPUs) used in FlexConnect devices support robust security protocols to safeguard your hardware and information. While these devices do not use a dedicated external TPM module, it is important to note that the microprocessors natively support many of the same security features typically enabled by a TPM.

How We Protect Your Device

• Secure Boot: This is utilized specifically to prevent unauthorized OS modification. By verifying digital signatures during the startup process, the system ensures that only trusted code is executed.

• Drive Encryption: To protect data at rest, we enable full-disk encryption. This ensures that even if the physical drive is accessed, the sensitive data stored locally remains unreadable without the proper keys.

Development vs. Production

For prototyping and development, we recommend having these security features turned off initially to streamline the debugging process. When you’re ready to transition to production, you can implement your own tailored secure boot and drive encryption solutions.

Note: FlexConnect comes with secure boot and encryption automatically enabled out-of-the-box. As a developer, your primary focus will be ensuring the security of your specific application code running not running in the FlexConnect software stack.

Yes! You can leverage Audesse’s many decades of automotive experience to ensure your FlexConnect integration delivers superior value. We offer a short and simple process to get up and running.