Greater security for millions of smart home appliances

Sending recipes to the oven, optimising the washing machine settings, monitoring the contents of the fridge – BSH Hausgeräte GmbH is focusing on digital services, smart products and sustainable business models to improve life at home. Materna supports the company in further developing its digital and sustainable solutions, from platform strategy right through to user experience.

Innovation as a key to success

Innovative products are a key success factor for companies in the manufacturing sector. They form the basis for future value-added services in the Internet of Things (IoT).

BSH Hausgeräte GmbH (BSH) therefore invested early on in developing the Home Connect IoT platform for the smart home. With BSH’s Home Connect app, consumers can control smart home appliances from various brands from anywhere. Over 35 million Home Connect-enabled devices have already been sold. The app is available in over 60 countries and 30 languages.

A key component of the Home Connect infrastructure is the central control and communication unit in every appliance with Home Connect functionality – whether in a fridge, a coffee machine or a dishwasher. In the current generation, this takes the form of microprocessor-based electronics that centrally control all the appliance’s functions. To ensure a secure connection to the Home Connect IoT ecosystem, each electronic unit is assigned a unique cryptographic identity during production.

PKI ensures secure IoT control devices

To ensure that every smart household appliance can be securely connected to the Home Connect platform, BSH uses what is known as a Public Key Infrastructure (PKI). This ensures that every appliance is assigned a unique digital identity – comparable to a digital ID card. A special, patented process is used for this purpose. This process is a key part of production: it ensures that every device is assigned its own key and certificate. Only in this way can it be uniquely identified later on – and only authorised persons or applications can control it.

The initial development and operation of the system were initially carried out by BSH. To drive forward the already professional further development of the system, the manufacturer commissioned Materna in early 2023. Since then, the system has undergone numerous functional enhancements and further developments. These include, for example, the automated installation of the system and the addition of a dedicated development environment.

To ensure that the handover of the process runs smoothly and production is not interrupted, a stable and secure technical infrastructure first had to be established. This includes specialised servers for the public-key infrastructure (PKI), appropriate software and so-called hardware security modules (HSMs). These HSMs are highly secure devices that safely generate, store and process sensitive data such as digital keys. All of this was set up at BSH’s production sites worldwide. It was clear from the outset that the systems would be regularly replaced with new devices featuring the latest software and technology in order to ensure a consistently high standard of security.

www.bernhardrampf.com ©

Offline processes running in the background of the IoT

For security reasons, the installation and configuration of the combination of PKI and HSM are carried out entirely offline. In addition to the physical and cryptographic security measures on the hardware itself, the systems are protected by racks and rooms that are specifically secured against unauthorised access. All data exchange takes place exclusively via specially secured processes and channels. This applies both to the resolution of faults and to the archiving of production data. To ensure continuous operation, multiple layers of redundancy are employed.

Close collaboration between Materna and BSH

In parallel with the ongoing support of the systems at the production sites, Materna continues to develop the solution’s software components and operating system. Crucially, the system is adapted to current security standards in such a way that compatibility with Home Connect-enabled control units is maintained. Regular meetings with all project stakeholders worldwide facilitate the necessary coordination. Furthermore, the dual-control principle applies to all work carried out on the live PKI.

To test each new installation, Materna provides the BSH factories with a simulation environment featuring real control units. Until installation, the systems are stored in a specially secured area at Materna’s premises, which are certified to ISO 27001.

Automated installation and configuration

A key requirement for the project team is to minimise manual intervention. This is the only way to sustainably increase the efficiency and security of the process. Automation prevents errors and simplifies documentation. This is achieved through scripts and tools for the automated installation and configuration of the systems. These are developed, continuously improved and made available by Materna staff.

In addition, Materna organises the return of faulty hardware components and the secure transport of hardware during regular system replacements and new installations. Where necessary, Materna’s specialist staff carry out the entire installation on-site at plants worldwide.

www.bernhardrampf.com ©

Conclusion:

By outsourcing this process, BSH has expanded its security expertise in production, thereby ensuring the supply of its innovative HomeConnect-enabled household appliances. Furthermore, the company benefits from Materna’s expertise in providing security processes for industry throughout the entire lifecycle of its PKI systems and relies on Materna’s expertise for the secure handling of hardware and the archiving of PKI data.

About Home Connect

Home Connect brings together various home appliance brands in one handy app and enhances them with numerous useful features, such as control via voice assistants or the ability to set up personalised routines. As an open platform, Home Connect is constantly being expanded with new features and services in collaboration with new smart home partners, enabling interaction with other smart home devices and services. Home Connect-enabled appliances can currently be used conveniently and in a personalised way in over 60 countries, in 30 languages and with numerous partners.

Home Connect is available for the home appliance brands Bosch, Siemens, Gaggenau, Neff, Solitaire, Thermador, Balay, Constructa, Pitsos and Profilo. Home Connect GmbH is a subsidiary of BSH Hausgeräte GmbH.

The Home Connect app allows you to control all household appliances registered on the Home Connect platform.