Resource · Deck
The AmbiSecure deck
A concise 17-slide overview of AmbiSecure’s hardware-rooted trust platform — authenticators, secure-element engineering, Java Card services, PKI, IoT identity, and the engagement model.
Slide 1 / 17
Slide 1 of 17
Slide-by-slide
Deck transcript
Read the 17 slides as text
- AmbiSecure. Embedded security, identity and hardware-rooted trust. FIDO authenticators, JavaCard applets, secure elements, PKI and IoT trust, engineered by the Ambimat Electronics team (established 1982).
- AmbiSecure within the Ambimat Group. The security and trusted-identity business unit of Ambimat Electronics, an embedded-engineering team (established 1982) that has shipped hardware since 1982 and identity systems since 2017. AmbiSecure is the embedded security and identity layer across the Group's connected products.
- The AmbiSecure security stack. A layered platform: EAL6+ Secure Element silicon (root) to the AmbiSEC module (nano-card / MFF2 package) to JavaCard applets (FIDO, PIV, OpenPGP, IoT) to OnePass device identity and authenticators, consumed by enterprise, telecom and IoT systems.
- A chain that begins below the OS. Trust is anchored in an EAL6+ secure element and carried up through verified boot: root of trust in the secure element, a verified boot ROM and signed bootloader, and measured, signed, anti-rollback firmware, rather than inherited from software that can be cloned or spoofed.
- Product & service portfolio. Authenticators: OnePass Card (multi-application FIDO2 smart card), OnePass Bio Card (on-card fingerprint), OnePass USB Key (FIDO2 / U2F), BioKey and Tappable. Platforms & applets: AmbiSEC module (nano-card / MFF2, EAL6+ SE), Java Card applet services, IoT Security Co-Processor, and the FIDO Validation Server (multi-tenant WebAuthn SaaS).
- One identity card, phishing-resistant. The OnePass Card replaces badges and separate security keys with a single FIDO2 smart card: FIDO2 / U2F passwordless, PIV and OpenPGP roles, door access and NDEF, and issuer keys with brand artwork, on one EAL6+ secure element. Built for enterprise, government and secure access.
- OnePass USB Key & BioKey. FIDO-certified USB security keys: the OnePass USB Key (FIDO2 / U2F, no battery, durable) and BioKey, the biometric variant with on-device fingerprint user verification for the highest-assurance tier.
- FIDO2 & modern authentication. Public-key cryptography replaces shared-secret passwords, making authentication phishing-resistant by construction. The ceremony spans the authenticator (card, USB, BioKey), the relying party (app or service) and a validation server (attestation, MDS), and the private key never leaves the device.
- AmbiSEC module & Java Card engineering. The AmbiSEC module packages an EAL6+ secure element as a nano-card or MFF2 part, programmed with in-house Java Card engineering so keys, credentials, identity and policy are enforced inside the secure element.
- Java Card applet development services. Custom Java Card applet design, SCP03 loading and personalization tooling for authentication, identity and IoT use cases, delivered on AmbiSecure secure elements.
- IoT device identity lifecycle. Hardware-rooted device identity across its lifecycle: key generation inside the secure element, provisioning, attestation, and ongoing lifecycle management for connected and IoT devices.
- Embedded PKI, attestation & key management. A certificate chain anchored in hardware: a root CA / trust anchor, an issuing CA, and device or credential certificates whose keys are generated inside the EAL6+ secure element, with attestation that the relying party validates.
- SIMAuth / eSIM trust. Telecom-grade embedded identity: eSIM / eUICC and SIM applets engineered on the dedicated Ambimat SIMAuth property, extending hardware-rooted trust to the SIM domain.
- Services & engagement model. How AmbiSecure engages: security architecture, custom applet development, personalization, and validation, working as an embedded engineering partner rather than a one-size product vendor.
- Target sectors. Where this work ships: government, enterprise IT, fintech, IoT and mobility, telecom, and transit, each with distinct identity and secure-element requirements.
- An embedded team, not a software security vendor. AmbiSecure combines embedded engineering, secure-element development, and hardware-rooted identity and authentication in one team. A generic IoT or software-security vendor ships apps and agents where trust stops at the software layer and integrates someone else's secure element; AmbiSecure owns the silicon-to-application chain.
- A security problem that lives in hardware?. Talk to engineers, not BDRs: tell AmbiSecure what you are building and get a path that is realistic, standards-aware and shipped before. Links to ambisecure.ambimat.com and the SIMAuth eSIM platform. Ambimat Electronics, Ahmedabad, India.
Go deeper
From the deck to the detail
Products
The full catalogue — OnePass authenticators, BioKey, the IoT security co-processor, and JavaCard applets.
FIDO2 & WebAuthn
Phishing-resistant authentication on public-key cryptography — the private key never leaves the device.
BioKey & OnePass USB Key
Biometric and FIDO2 USB security keys, including BioKey on-device TOTP and HOTP.
Java Card applets
Custom applet design, SCP03 loading, and personalization on certified secure elements.
Secure elements & AmbiSEC
EAL6+ secure-element silicon and the AmbiSEC IoT security co-processor module.
Talk to AmbiSecure
Building a product where keys must stay in hardware? Talk to engineers, not BDRs.