The healthcare industry is the most complicated environment to secure—from the medical devices community, to healthcare providers, healthcare workers and government bureaucrats. This is the industry at highest risk because of the sheer volume of unmanaged or hard-to-manage devices and the consequences (life-or-death nature of the trade). The emerging nature of IoT devices and cybersecurity compliance requirements in the healthcare sector requires both equipment vendors and service providers to implement security policies that address the risks posed by cyber-attacks and insider threats. Mission critical production systems and medical devices require protection from unauthorized software updates or configuration changes, and secure authentication of field and remote operators. Legacy enterprise IT managed systems rely on password policies, multi-factor authentication and role based physical and network access. Such controls are inadequate against zero-day cyber-attacks on headless IoT devices that subvert threat intelligence-based intrusion and/or anomaly detection systems designed to prevent data breaches. Therefore, IoT solutions in the healthcare sector require a tamper-resistant system that provides built-in protection controls, trustworthy change management and continuous integrity verification—for high scalability and availability.
Digital trust for healthcare requires the following actions:
Industry: Healthcare
Devices: Aging Legacy Medical Devices
Company: Medical Device Manufacturers
Challenge
Solution
Benefits
Aging medical devices such as imaging equipment, pumps, surgical equipment, implantable medical devices, hospital and home patient monitors, and medical IoT edge devices are vulnerable due to a lack of strong cryptographic controls. In healthcare, risk is measured in terms of loss of life, human safety and reliability of the systems. While data privacy is important, compromised systems directly impact patient care.
Medical equipment manufacturers and healthcare providers must ensure compliance with HIPAA, HITECH Breach, and cybersecurity standards such as NIST 800-53, Revision 4, IEC 62443-3-3, and FIPS 140-3. Keeping up with these standards as well as emerging standards from the Industrial Internet Consortium (IIC) and Industrie 4.0 can be challenging. New regulations such as GDPR in Europe raise the stakes for non-compliance to more than €20 million per incident. Older protocols such as Modbus, DNP3 and BacNet can be difficult to secure.
Used by more than 200 OEMs to protect more than 100 million devices.
Mocana’s end-to-end cybersecurity system is a FIPS 140-3 validated embedded cybersecurity software solution that ensures device trustworthiness and secure communications by giving industrial automation manufacturers, OEMs and critical infrastructure operators an easy way to harden electronic control units and controllers with multi-factor authentication and trust chaining, as well as secure boot to validate the firmware, OS and applications.
TrustCenter™
Control center for managing devices in the field
TrustEdge™
Plug-and-play on-device clients that secure operations
TrustCore™
SDK that simplifies business application development
"Mocana has been helping industrial manufacturing and automation companies to secure industrial control systems, SCADA networks, avionics subsystems and IoT devices since 2002. Mocana’s IoT Security Platform is solving operational technology and IoT security challenges by tackling one of the toughest industry problems—making industrial controllers and IoT endpoints more secure and trustworthy."
Michael Dolbec
Managing Director, GE Ventures
"The tools provided by Mocana are rooted in its long history of equipping engineers with the ability to harden devices that perform mission-critical operations. Manufacturers can now be equipped to leverage the power of the embedded chips in their products to support the security and privacy requirements of these emerging data-driven IoT ecosystems."
Rob Westervelt
Research Manager, IDC
"Industrial IoT cybersecurity is both difficult and essential. Xilinx and Mocana share a vision to remove barriers to IIoT adoption by reducing risk, cost and speeding time to market for any customer that wants to innovate and move their business forward."
Christoph Fritsch
Director, Industrial IoT, Scientific and Medical, Xilinx
"Ensuring the safety, security, and reliability of control systems is critical. Mocana’s IoT Trust Platform can simplify the implementation of security across modern control and safety systems."
Joe Weiss
Managing Partner of Applied Control Solutions, LLC