SECURITY

Xiaomi Strengthens Its Position on Consumer IoT Security with Proposed Global Common Standards

Xiaomi Corporation | January 18, 2022

Xiaomi, a consumer electronics and smart manufacturing company that established the world's leading consumer AIoT (AI+IoT) platform, has published a new set of proposed global standards to support and reassure consumers about the security of their data while using IoT products.

The guideline entitled "Cyber Security Baseline for Consumer Internet of Things Device Version 2.0" *[1] aims to protect security and user privacy with a comprehensive set of requirements covering guidelines from device hardware, device software to device communication. It also states the requirements on data security and privacy, which include communication security, authentication and access control, secure boot, data deletion, etc. It is a security baseline that all Xiaomi smart devices should follow.

The guideline of Xiaomi meets the need of the consumer IoT industry as there is no such general standard that can be publicly queried and implemented. Now companies can use this guide to avoid some basic security and privacy protection risks, and to quickly improve the security and privacy protection capabilities of their IoT products.

Xiaomi owns the world's leading consumer AIoT platform. As of November 2021, Xiaomi's AIoT platform has connected more than 400 million devices, excluding smartphones and laptops, and there are more than 8 million users with 5 or more Xiaomi IoT devices around the world. Xiaomi offers the most comprehensive security protection to its users and explores the best industry solutions and common standards for other stakeholders.

The guideline comes as the British Standards Institution (BSI) confirmed that Xiaomi Mesh System AX3000 has obtained the BSI IoT Kitemark™ Certificate, which has undoubtably proved the high degree of consistency between the Cyber Security Baseline for Consumer Internet of Things Device of Xiaomi and the international IoT security standards held by BSI.

"Users' security and privacy is the top priority of Xiaomi, and we promise that this applies to all markets where we operate. I'm delighted to see that Xiaomi Mesh System AX3000 has also successfully joined the BSI Kitemark™ certification. Over the years, we have made great efforts to protect users' security and privacy. I'm confident and proud to say that Xiaomi is in the leading position of IoT security policies and practices in the world, and we will continue to work hard to build a better IoT ecosystem for our users." said Cui Baoqiu, Xiaomi Vice President and Chairman of Xiaomi Security and Privacy Committee.

"Connected devices can bring huge benefits to society, but it is imperative that their function and security can be trusted throughout the required device life. By achieving the BSI Kitemark™ for IoT Devices for its product and having its systems regularly and independently tested and monitored, Xiaomi is demonstrating to consumers their commitment to safeguarding information. Congratulations to the team at Xiaomi for this achievement."

David Mudd, BSI Global Digital and Connected Product Certification Director

The BSI IoT Kitemark™ is a product and service quality certification owned and operated by BSI. It conducts technical testing and security audits for IoT systems, giving consumers reassurance and confidence of secure and trust-worthy IoT devices under the highest standards. Obtaining the BSI IoT Kitemark™ Certificate means that Xiaomi products are in compliance with multiple cybersecurity standards, including the ETSI/EN303645 standard issued by European Telecommunications Standards Institute (ETSI), as well as the Open Web Application Security Project® (OWASP) Top 10 security requirements.

It is the third time that Xiaomi received this international security accreditation, following Mi 360° Home Security Camera 2K and Xiaomi Home App, which achieved the BSI Kitemark™ Certificates in July 2021.

These are only a small part of the bigger picture of what Xiaomi has achieved on IoT security. In June 2021, Xiaomi published the Xiaomi IoT Privacy White Paper *[2], explaining the security and privacy policies and practices of Xiaomi's IoT products, gaining trust by increasing the transparency. In November of the same year, in The Contemporary Use of Vulnerability Disclosure in IoT (Report 4: November 2021) *[3] published by the Internet of Things Security Foundation (IoTSF), Xiaomi was listed as one of the 21 IoT device suppliers that met the extended threshold test, namely received the highest rating for security vulnerability disclosure policy, which demonstrates Xiaomi's leadership in IoT security.

In the future, Xiaomi will keep improving its IoT security framework, while strengthening its security management and technical testing capabilities to fulfill the responsibility of a global industry leader and let everyone in the world enjoy a better and smarter life through innovative and safe technology.

About Xiaomi Corporation
Xiaomi Corporation was founded in April 2010 and listed on the Main Board of the Hong Kong Stock Exchange on July 9, 2018 (1810.HK). Xiaomi is a consumer electronics and smart manufacturing company with smartphones and smart hardware connected by an IoT platform at its core.

Embracing our vision of "Make friends with users and be the coolest company in the users' hearts", Xiaomi continuously pursues innovations, high-quality user experience and operational efficiency. The company relentlessly builds amazing products with honest prices to let everyone in the world enjoy a better life through innovative technology.

Xiaomi is one of the world's leading smartphone companies. The company's market share in terms of smartphone shipments ranked no. 3 globally in the third quarter of 2021. The company has also established the world's leading consumer AIoT (AI+IoT) platform, more than 400 million smart devices connected to its platform as of September 30, 2021, excluding smartphones and laptops. Xiaomi products are present in more than 100 countries and regions around the world. In August 2021, the company made the Fortune Global 500 list for the third time, ranking 338th, up 84 places compared to 2020.

Xiaomi is a constituent of the Hang Seng Index, Hang Seng China Enterprises Index, Hang Seng TECH Index and Hang Seng China 50 Index.

Spotlight

Explore uses of WiFi (6/6E/7) capabilities for Industrial IOT (IIOT) applications Define and validate critical KPIs (latency, reliability, mobility, etc Field trials of WiFi6E IIOT use-cases in progress (stand-alone & 5G/Wi-Fi convergence)


Other News
SOFTWARE AND TOOLS

Increasing Implementation of IoT in Several End-use Verticals to Set Stage for PIR Sensors, States Fact.MR

FACT.MR | December 14, 2022

As per this new study by Fact.MR, a market research and competitive intelligence provider, the global PIR sensor market is set for a valuation of US$ 647 million in 2023 and is projected to surge ahead at a CAGR of 12.3% during the forecast period (2023-2033). The market is predicted to grow rapidly with the expanding semiconductor industry and its applications in various countries. PIR sensors have a more complex nature than any of the other sensors such as FSRs, photocells, and tilt switches. The sensor's input and output results are affected by multiple variables. These are basically pyroelectric sensors that detect infrared radiations in the surrounding environment. PIR sensors (PIRs) use heat radiation from bodies to identify the presence of people and animals. This can be used for unlocking doors or starting a video recording. PIRs are commonly utilized because of their less power consumption feature. PIR sensors have previously been used to generate binary events, such as whether a person or animal is present or not. Since then, the employment of PIR sensors has been seen in numerous advanced applications. Download a Free Sample Copy of this Report – https://www.factmr.com/connectus/sample?flag=S&rep_id=8000 The worldwide automobile sector has seen significant transformations as a result of IoT technology. The need for PIR sensors is expected to rise as autonomous and connected cars become more common since they enable vehicles to detect impediments in their path. Throughout the projection period, they will be crucial in revolutionizing the automotive industry through advancements in transportation planning and vehicle automation, leading to the high usage of PIR sensors. Key Takeaways from Market Study The global PIR sensor market is projected to grow 3.2X and reach US$ 2.06 billion by 2033. The market expanded at 6.2% CAGR between 2018 and 2022. Under measuring range, outdoor PIR sensors dominated the market with US$ 326.1 million valuation in 2022. Smart home and IoT application is expected to reach a market valuation of US$ 168.9 million by 2023-end. North America dominated the global market with 27.2% share in 2022. “Technological advancements in the semiconductor industry will support the market growth for PIR sensors,” says a Fact.MR analyst. Segmentation of PIR Sensor Industry Research By Connection : Wired Wireless By Measuring Range : Indoor PIR Up to 3 m 3-6 m 6-10 m Above 10 m Outdoor PIR Below 20 m 20-50 m 50-100 m Above 100 m By Output : Analog Digital By Application : Lighting Controls Thermostats and HVAC Systems Smart Home and IoT IP Cameras and Surveillance Systems Digital Signage Others By End-use Vertical : Consumer Electronics Automotive Industrial & Manufacturing Aerospace & Defense Healthcare BFSI Residential Others By Region : North America Latin America Europe East Asia South Asia &Oceania Get Customization on this Report for Specific Research Solutions – https://www.factmr.com/connectus/sample?flag=RC&rep_id=8000 Market Development Pyroelectric infrared (PIR) sensor technology has been one of the fastest-developing technologies in recent years. Infrared sensors have been widely used in many fields such as civil, aerospace, military, astronomy, industry, and meteorology. More technological advancements and the introduction of latest trends such as IoT, industry 4.0, etc., will increase the productivity of the device in different applications. Integration through collaborations with some R&D industries may also lead to robust improvements, thereby augmenting the sales of PIR sensors. Key Companies Profiled:- Adafruit Ecosens Lighting Pvt. Ltd KEMET Corporation. Knightsbridge Murata Manufacturing Co., Ltd. NINGBO ENERGYLUX OPTOELECTRONICS TECHNOLOGY CO., LTD Ningbo Haishu Kaiau Electronics Co., Ltd. Panasonic Industry Co., Ltd PIR Motion Sensors Seeed Technology Co., Ltd Sensinova Shenzhen Asia Bright Industry Co., Ltd. ShenZhen HaiWang Sensor Co., Ltd Shenzhen Sumring Technology Co., Limited. SHENZHEN TAIAN ELECTRONICS CO., LTD STMicroelectronics Zuden Technology (HK) Co., Limited Explore Our Safe & Secure Payment Options for Quick Buy – https://www.factmr.com/checkout/8000 More Valuable Insights on Offer Fact.MR, in its new offering, presents an unbiased analysis of the global PIR sensor market, presenting historical market data (2018-2022) and forecast statistics for the period of 2023-2033. The study reveals essential insights on the basis of connection (wired, wireless), measuring range (indoor PIR (up to 3 m, 3-6 m, 6-10 m, above 10 m), outdoor PIR (below 20 m, 20-50 m, 50-100 m, above 100 m)), output (analog, digital), application (lighting controls, thermostats & HVAC systems, smart home & IoT, IP cameras & surveillance systems, digital signage, others), and end-use vertical (consumer electronics, automotive, industrial & manufacturing, aerospace & defence, healthcare, BFSI, residential, others), across key regions, namely, North America, Latin America, Europe, East Asia, South Asia & Oceania, and the Middle East & Africa. Check out more related studies published by Fact.MR Research: LiDAR Sensor Market: The global LiDAR sensor market is set to surpass a valuation of US$ 1,908.1 million in 2022 and further expand at a CAGR of 12.7% to reach US$ 6,328.7 million by the end of 2032. Sales of LiDAR sensors accounted for less than 1% of the global sensor market at the end of 2021. Marine Sensors Market: The global marine sensors market is estimated at USD 21.9 Billion in 2022 and is forecast to surpass USD 46.2 Billion by 2032, growing at a CAGR of 7.7% from 2022 to 2032. IoT Sensors Market: Global sales of IoT sensors is expected to procure US$ 27.4 Billion in 2022, up from US$ 21.8 Billion in 2021. The global IoT sensors market is expected to garner absolute dollar growth of US$ 146.3 Billion by 2032. Yaw Rate Sensors Market: The automation market majorly focuses on providing safety to consumers. Along with providing seat belts, safety switches, and safety scanners that ensure maximum safety; automation markets also provide yaw rate sensors that not only ensure safety but also help the driver to take correct decisions such as applying brakes to realign the vehicle. Sensor Screwdrivers Market: Screwdrivers play an important role in everyday handyman uses to industrial screw fastening applications. For handyman activities using a simple, handheld screwdriver often times does the job, whereas for industrial production applications more complex and precise screwdrivers are used to achieve the right amount of torque. About Us: We are a trusted research partner of 80% of fortune 1000 companies across the globe. We are consistently growing in the field of market research with more than 1000 reports published every year. The dedicated team of 400-plus analysts and consultants is committed to achieving the utmost level of our client’s satisfaction. Specialties: Competition Tracking, Customized Research, Syndicated Research, Investment Research, Social Media Research, Business Intelligence, Industry Analysis, Thought Leadership.

Read More

SECURITY

Finite State Adds Larry Pesce to Scale Guidance and Services for Customer Product Security Teams

Finite State | November 09, 2022

Finite State, the product security leader for connected devices, today announced it has hired Larry Pesce as its Product Security Research and Analysis Director. Pesce will serve as a senior consultant, providing expert guidance and services to product security teams worldwide, including product security program design and development, product red-teaming and penetration testing, software supply chain risk management, and vulnerability management. Recent research from the Ponemon Institute indicates that six of every ten organizations find it increasingly difficult to quickly respond to new vulnerability disclosures that may impact their devices, a reality that becomes especially painful when zero-day vulnerabilities such as last month's OpenSSL vulnerability surface. “Sixty percent of IT and IT security practitioners report that their organizations lack the in-house expertise to stand up a strong security posture and 62% cite a lack of resources, I'm confident that, with Larry's leadership and expertise, he will work closely with our customers to understand their needs, identify their product security gaps, and guide them toward solutions. As our Product Security Research and Analysis Director, Larry will act as an internal voice of our customers to help our product, engineering, R&D, and sales teams develop and deliver the solutions that our customers need right now." Matt Wyckhouse, founder and CEO of Finite State Pesce has held senior security and research positions at leading cybersecurity and IT services and consulting firms including InGuardians, Inc., and NWN Corporation. Earlier in his career, Pesce oversaw IS security at Care New England, a Rhode Island-based healthcare provider. An established cybersecurity thought leader, Pesce serves as a principal instructor and course author at the SANS Institute and has co-hosted the popular Paul's Security Weekly podcast for more than 15 years. “Embedded device security has been a passion of mine since the early 2000s. So long ago that it was well before the dawn of what we now refer to as IoT,” said Pesce. “I’m excited to bring my expertise to Finite State to help our customers utilize effective SBOMs, provide actionable results to issues [vulnerabilities], and affect the security of the IoT software supply chain in a positive manner.” Pesce holds several GIAC certifications, including the Global Industrial Cyber Security Professional (GICSP), the GIAC Certified Incident Handler (GCIH), and the GIAC Assessing and Auditing Wireless Networks (GAWN) credentials. Pesce earned his B.S. in Computer Information Systems from Roger Williams University. About Finite State Finite State empowers organizations to gain control of product security for their connected devices and supply chains. Across the software supply chain lifecycle, Finite State is the single pane of glass for customers that provides continuous visibility into product supply chain risk. Backed by a team of seasoned experts, our automated product security platform arms our customers with the actionable insights, critical vulnerability data, and remediation guidance necessary to mitigate product risk and protect the connected attack surface.

Read More

ENTERPRISE IOT

SORACOM Applies for Listing on the Tokyo Stock Exchange

SORACOM | November 23, 2022

KDDI CORPORATION and SORACOM, INC, a global provider of advanced IoT connectivity services, today announced that SORACOM has applied to list its shares on the Tokyo Stock Exchange. Soracom joined the KDDI Group in August 2017. Since then, Soracom has grown its IoT connectivity platform to support over 5 million IoT connections* for more than 20,000 customers worldwide in industries ranging from energy and manufacturing to payments, consumer electronics, healthcare, and agriculture . From day one, Soracom has made its mission to deliver a global connectivity platform that accelerates speed to market for the teams building tomorrow’s connected world and helps them to pursue success at any scale. To further accelerate its own business growth and global expansion, Soracom began preparation for a potential public offering in 2020. KDDI and SORACOM describe this as a “swing-by” IPO, in which a startup grows with the support of a larger company prior to public offering, as if a space probe accelerates using the gravitational mass of a planet. With appropriate corporate governance systems now in place and demonstrated capacity for independent management, Soracom has now applied to list its shares on the Tokyo Stock Exchange. Prior to any such listing, it is necessary to obtain listing approval from the Tokyo Stock Exchange and complete examination by the Japan Exchange Regulation. This application does not establish any specific commitments regarding listing availability or timing. This press release has been prepared for the sole purpose of publicly announcing that the Company has applied to list its shares on the Tokyo Stock Exchange, and not for the purpose of soliciting investment or engaging in any other similar activities within or outside Japan. This press release does not constitute or form a part of any offer or solicitation to purchase or subscribe for securities in the United States. Any securities may not be offered or sold in the United States absent registration or an exemption from registration under the U.S. Securities Act of 1933. If any public offering of securities is made in the United States, it will be made by means of an English language prospectus prepared in accordance with the U.S. Securities Act of 1933.

Read More

SOFTWARE AND TOOLS

Former GM Mobility, IoT and AI at Microsoft, Jim Hudak, Joins MCE’s Advisory Board

MCE Systems Ltd | December 19, 2022

MCE Systems Ltd., the global leader in digital Device Lifecycle Management (dDLM) for mobile and IoT devices, announces today it has appointed Jim Hudak, a senior executive formerly focused on Mobility, IoT and AI at Microsoft, to the MCE advisory board. Jim joins a group of world-renown MCE advisory board members including Dr. Il-ung (IU) Kim (former President of SK Telecom), Mike Sutcliff (former Accenture Digital Group CEO), Scott Rice (former Sprint CIO), Teresa Ostapower (former AT&T SVP Technology Transformation), and John Elliott (former McKinsey Partner), who was announced earlier this week. Jim is a proven senior executive with a successful history of structuring, managing, and leading sales, business development and partnership programs. He has a demonstrated ability to identify, develop, and drive new revenue through strategic growth initiatives by applying new and emerging technologies coupled with innovative GTM and partnership programs. His breadth of experience includes industries such as: energy, federal government (U.S.), healthcare, industrial (discrete and process manufacturing), and retail/CPG, service provider/telco, smart city/building/home, transportation and logistics. “It is a privilege to be appointed to MCE’s advisory board at a time when we are seeing exponential growth in adopting digital-first customer experience transformations,” says Jim, MCE Advisory Board Member. “The pandemic advanced the demand for digital solutions and MCE has found a way to digitize Device Lifecycle Management through an innovative platform that puts intelligence in the hands of the users to solve device-related requests quickly. This has created a great opportunity for telco companies to accelerate digital transformation for device-related journeys to improve CX, costs to serve and revenues.” "Jim is a consummate professional whose keen insight into AI and business will help lead MCE as it grows strategically” says Yuval Blumental, MCE Co-Founder & CEO. “We really see Jim’s capabilities in developing revenue-accelerating partnerships and advising MCE on key expansion areas. By appointing Jim to the MCE Advisory Board, we are continuing our tradition of gaining leading business expertise to support our mission of providing disruptive digital transformation solutions to the telco industry ecosystem.” Jim most recently came from Microsoft and Accenture. He has spent his career in mobility, IoT and AI. Jim is also an active investor and advisor. MCE is the pioneer in digital-first mobile device lifecycle management (dDLM) for operators and their partners since 2005. MCE’s industry-leading dDLM platform solutions mobilize operations, increase revenues, and decrease inefficiencies. Specific solutions range from device diagnostics and trade-in management with a price guarantee, to handling device returns. All are omnichannel-ready with world-class virtualization and provide fully integrated data management to anticipate customer needs around device-related customer issues (e.g., device health, upgrade timing, trade-in instead of repair). Over its more than 17 years of experience, MCE has become the trusted mobilizer of extraordinary customer experiences for Tier-1 operators and their partners. Visit www.mce.systems

Read More

Spotlight

Explore uses of WiFi (6/6E/7) capabilities for Industrial IOT (IIOT) applications Define and validate critical KPIs (latency, reliability, mobility, etc Field trials of WiFi6E IIOT use-cases in progress (stand-alone & 5G/Wi-Fi convergence)

Resources