As more and more Appliances use USB-C for charging but also for data transfer, the need to improve the technology becomes apparent. The USB Implementers Forum announced (PDF) changes to USB C authentication for more security.
This new security feature will allow devices to verify that USB-C connections are legal, both for charging and for data transfers.
With the upcoming technology the device it will immediately verify that a USB-C connection is indeed legitimate, and block or allow the connection accordingly.
For example, suppose you want to charge your device to a public charger. At the moment the risks are great. No one can know if the public charger has been "tampered with" and your data is compromised.
However, with USB C authentication, the connected device could verify that the charging source is secure and block access to your data if it is not.
Features of the upcoming USB-C:
A standardized one protocol to certify USB Type-C chargers, devices, cables and power sources
Support for authentication via either USB data channel or USB Power Delivery communication channels
Products using the authentication protocol have control over the security policies that need to be implemented and applied
Depending on 128-bit security for all encrypted methods
The specifications report existing internationally accepted cryptographic methods for certificate format, digital signing, hash and random number generation
Naturally, device manufacturers and operating system developers should include support for the new USB-C authentication.
Hopefully, most manufacturers/developers will recognize the value of the technology and include it in their devices or operating system system.
___________________
- iGuRu.gr Google Group Forum support
- FOSSA the EU finances bug bounty for 14 open source projects
- Google: forget the white Google Search page
- Windows 10 OEM product key without third-party tools
