AWS IoT got out away ahead of the competition on this, partnering with Atmel/Microchip on the ECC508A crypto-chip. [1] Microchip acts as the certificate authori

AWS IoT got out away ahead of the competition on this, partnering with Atmel/Microchip on the ECC508A crypto-chip. [1] Microchip acts as the certificate authority, using ECDH to generate and store keys in hardware, at the fab facility when the chip is manufactured. They add in some pre-configured AWS server policies, giving OEMs the ability to connect devices to AWS IoT without setting up their own authentication infrastructure. Removes a lot of the possibility of an embedded developer screwing up cloud security. Still, in many serious industrial "IoT" deployments, operational data is never sent to a cloud or 3rd party server, and stays in on-premise data centers, or is simply discarded after a quick sanity check. This is slowly changing (see GE Predix, Siemens MindSphere, Bosch IoT Suite), but there are still a lot of issues around architecting safety-critical systems that can support bi-directional communication with the internet and 3rd party data centers. [1] http://embedded-computing.com/articles/aws-microchip-deliver-trust-anchor-for-end-to-end-iot-security/ http://embedded-computing.com/articles/aws-microchip-deliver...