FIDO Taipei Workshop: Securing the Edge with FDO

1. FDO FOR COMMERCIAL CAMERA,
SENSOR AND NETWORKING
DEVICES
Quan Do – Head of IoT Security Solution
Van Nguyen – Senior Researcher
FDO Workshop @ Taipei 2024
1

2. • ARM-based: Ambarella CV25, quad-core Arm
Cortex-A53, 1 GHz
• WIFI/Ethernet supported
• RAM: 512MB
• External Flash 64GB
• Alarm mode supported
VINCSS’ 02 FIRST FDO DEPLOYMENTS
FDO FOR CAMERA (12/2022 ) FDO FOR SENSOR (9/2023 )
• ESP32 based - Secure boot
• Wireless connection - BLE 5.0
• Battery powered
• Integrated FDO protocol
• BLE Mesh network
• Remote configuration
2

3. Connect Laptop to the router
using LAN cable
Power on your router Browse to default IP of
the router
Change admin
password
Configure the router
Login to router's
admin portal using
default credential
Reboot router
1 2 3
5
6
4
7
TRADITIONAL ROUTER SETUP
3

4. 02 03 04
01
FDO ROUTER SETUP
Submit router voucher
& credential to IoT
platform
Connect Router to the
internet using Ethernet
cable
Power on the router Ready to go
4

5. Admin
User
Get device info FDO Router info
(serial, QR, id)
Create FDO profile Network Portal
e.g. add network policy
Router Voucher User
Credentials Router
Profile
VinCSS IoT
Platform
Submit data to IoT platform
And get router onboard
FDO onboarding process
FDO Router
FDO process completed FDO Router is ready to
use
5
ONBOARDING WORKFLOW

6. Client Client
Client
Client
Client
NETWORK_1
Client Client Client Client
Client Client
NETWORK_1
NETWORK_2
Web server Web server
FDO server
Switch
Router Internet
State Router
Preparing for Boot N/A - Y - yellow
Booting G - blink
Onboarding B - blink
Onboarding Completed B - solid
Ready G - solid
Reseting R - solid
Ready to Reboot R - blink
private network
internet access
6
FDO ROUTER DEMO

7. BENEFITS &
ADVANTAGES
1. Hassle-free router setup: No technical know-how or
physical attendance needed.
2. Speedy and secure network connections.
3. Effortless large-scale rollouts.
4. OpenWRT compatibility with 2000+ commercial Wi-Fi
devices and straightforward implementation on open-
source hardware.
5. Simplified creation and management of network access
policies.
6. Designed for the simplest transformation of devices to
new uses.
7

8. NEXT STAGE
1. Open source VinCSS FDO client for OpenWrt
2. Network Portal will be available online for
testing/demo in May
3. VinCSS Network Portal can be cloud or on-premise.
We provide tailor solution service for any businesses.
8

9. ANY QUESTION?
CONTACT US!
9

10. VINCSS INTERNET SECURITY SERVICES
JSC
• 20Ath Floor, Vincom Center Dong Khoi 45A Ly Tu Trong
Street, Ben Nghe Ward, Dist. 1, HCMC, Vietnam.
• Email: v.office@vincss.net
• Website: www.vincss.net
THANK YOU!
10