NXP Semiconductors

SE050

Plug & Trust Secure Element

SE050

All information provided in this document is subject to legal disclaimers.

© NXP B.V. 2020. All rights reserved.

Product data sheet

Rev. 3.0 — 12 May 2020

504930

7 / 30

3.1.2.4 HMAC Key object

An HMAC key object allows to securely store an HMAC key. The following operations are

supported on HMAC Key objects to compute an HMAC:

• Init

• Update

• Finalize

3.1.2.5 Binary file objects

Binary file objects are byte arrays of a generic type. As in a standard file system, the

values can be accessed using read/write operations.

3.1.2.6 Counter Objects

Counter objects are special kinds of binary file objects with specific functionality

interpreting the content of the file.

The supported operations for counters are:

• Set

• Get

• Increment

3.1.2.7 Hash-Extend register

A hash-extend register secure object stores a hash over all data provided to that secure

object. It therefore contains the complete history of values provided to that register since

last reboot or since creation and can be used for attestation purposes.

3.1.2.8 User ID secure object

User ID secure objects can be used to create sessions based on the User ID in cases

where multi-tenant support without cryptographic credential usage is required.

3.1.3 Access control

Each secure object can be linked to object specific access control policies. An access

control policy associates a user identified by an authentication with a set of privileges

such as read, write, …

To scale the functionality into a broad range of ecosystems, a set of different

authentication options is provided:

• User-ID based authentication

• Symmetric key based authentication with secure messaging

• Asymmetric key based authentication with secure messaging

At creation of a secure object, an optional set of policies is associated with that

secure object. Each policy assigns a set of allowed operations on that object to an

authentication object.

3.1.4 Sessions and multi-threading

The SE050 IoT applet is prepared for ecosystems where multi-threading and multi-

tenant use cases are needed on APDU level. To enable that, the applet supports 2

simultaneous sessions that can span full secure messaging sessions, self-authenticated