Axis Q8615-E - Page 60

AXISQ8615-EPTZCamera
Learnmore
Secureboot
Securebootisabootprocessthatconsistsofanunbrokenchainofcryptographicallyvalidatedsoftware,startinginimmutable
memory(bootROM).Beingbasedontheuseofsignedrmware,securebootensuresthatadevicecanbootonlywithauthorized
rmware.
Securekeystore
Atamper-protectedenvironmentfortheprotectionofprivatekeysandsecureexecutionofcryptographicoperations.Itprevents
unauthorizedaccessandmaliciousextractionintheeventofasecuritybreach.Dependingonsecurityrequirements,anAxisdevice
canhaveeitheroneormultiplehardware-basedcryptographiccomputingmodules,whichprovideahardware-protectedsecure
keystore.Dependingonsecurityrequirements,anAxisdevicecanhaveeitheroneormultiplehardware-basedcryptographic
computingmodules,likeaTPM2.0(TrustedPlatformModule)orasecureelement,and/oraTEE(TrustedExecutionEnvironment),
whichprovideahardware-protectedsecurekeystore.Furthermore,selectedAxisproductsfeatureaFIPS140-2Level2-certied
securekeystore.
AxisdeviceID
Beingabletoverifytheoriginofthedeviceiskeytoestablishingtrustinthedeviceidentity.Duringproduction,deviceswith
AxisEdgeVaultareassignedaunique,factory-provisioned,andIEEE802.1AR-compliantAxisdeviceIDcerticate.Thisworks
likeapassporttoprovetheoriginofthedevice.ThedeviceIDissecurelyandpermanentlystoredinthesecurekeystoreasa
certicatesignedbyAxisrootcerticate.ThedeviceIDcanbeleveragedbythecustomer’sITinfrastructureforautomatedsecure
deviceonboardingandsecuredeviceidentication
Signedvideo
Signedvideoensuresthatvideoevidencecanbeveriedasuntamperedwithoutprovingthechainofcustodyofthevideole.Each
camerausesitsuniquevideosigningkey,whichissecurelystoredinthesecurekeystore,toaddasignatureintothevideostream.
Whenthevideoisplayed,theleplayershowswhetherthevideoisintact.Signedvideomakesitpossibletotracethevideobackto
thecameraoriginandveriesthatthevideohasnotbeentamperedwithafteritleftthecamera.
TolearnmoreaboutAxisEdgeVaultandcybersecurityfeaturesinAxisdevices,gotoaxis.com/learning/white-papersandsearchfor
cybersecurity.
60