The asset tracking industry has traditionally been focused on physical security, but data security is increasingly important. It takes significant investment to develop end-to-end secure systems and corporate responses to threats. Typical IoT platforms are lacking in meaningful security because of the investment requirements.
All of the BlackBerry IoT Platform modules including data intelligence, lifecycle management, device management, and federated identity include the security features found in the platform. These features offer support for OAuth2 or ECC TLS to establish device trust, available certificate management, and patented encryption to help keep data protected while the data is in transit.
The asset tracking industry has many actors - manufacturers, buyers, carriers, ports, regulators, and insurance agents. As the electronic exchange of data becomes more common, authenticating, securing, and managing data flow between the actors will become critical features, which can be handled via the BlackBerry IoT Platform. Further, the permissions designed into the BlackBerry IoT Platform enable fine-grained control of data access and facilitate data sharing, such as for shipment exceptions or delivery status.
BlackBerry maintains industry surveillance and security incidence response teams for its existing operations. The teams are employed to detect emerging security threats and to respond accordingly. These services are provided as part of the BlackBerry IoT Platform.
The infrastructure provides physical data center security and security crisis management planning to ensure high availability, disaster recovery, and contingency preparedness. The lifecycle management module also includes advanced access controls and support for integration with leading on-premises user management systems (such as LDAP) to help keep data confidential.