SE051 - EdgeLock IoT Secure Element, CC EAL6+ | NXP
MPN: SE051 ✓ Hoạt độngSE051 Tóm tắt
A secure element is a dedicated, tamper-resistant hardware IC that provides a root of trust at the chip level. Within the system hierarchy, it sits below the host microcontroller in the security architecture (secure element -> hardware root of trust -> edge-to-cloud security platform) and offloads all cryptographic key storage and operations from the general-purpose MCU, so keys never exist in MCU memory where they could be exposed by software attacks.
Key features include turnkey Plug & Trust design-in with a complete support package (middleware, development kits, reference designs), applet updatability in the field via SEMS Lite, and support for developer-created custom applets. The SE051 extends the widely adopted EdgeLock SE050 family, inheriting its proven Common Criteria EAL 6+ certification up to the OS level with AVA_VAN.5 vulnerability assessment.
Technically, the SE051 runs a Java Card operating system and ships with a pre-installed applet optimized for IoT security use cases such as secure key storage, mutual authentication, and secure provisioning. Communication with the host processor is performed over a single-wire or I2C interface, following the same integration model as SE050, so existing SE050 host firmware and the Plug & Trust Nano middleware package can be reused directly.
Typical applications include IoT device identity and cloud onboarding, secure firmware updates, peripheral node authentication in industrial networks, and smart-meter or payment-adjacent designs requiring certified hardware security.
When designing the SE051 into a PCB, note that it is pin-to-pin and package compatible with EdgeLock SE050A/B/C/F variants (per NXP application note AN13014), enabling a single footprint to support SE050, SE050E, or SE051 depending on the required security feature set.
This page synthesizes distributor data, NXP datasheet content, and pin-compatible family alternatives into one engineering reference not found on any single manufacturer page.
Bộ thay thế dễ dàng lắp đặt cho SE051 — cùng gói, chân-to-chân tương thích. Các bộ phận yêu cầu hàn PCB bị loại trừ.
SE050C2HQ2/Z01CDZ
✅ Drop-In📋 Tham chiếu thay thế (không có trong danh mục)
SE050E
✅ Drop-In📋 Tham chiếu thay thế (không có trong danh mục)
SE051A2HQ1/Z01XEZ
✅ Drop-In📋 Tham chiếu thay thế (không có trong danh mục)
SE051C2HQ1/Z01XDZ
✅ Drop-In📋 Tham chiếu thay thế (không có trong danh mục)
SE051W
✅ Drop-In📋 Tham chiếu thay thế (không có trong danh mục)
SE051 Thông số kỹ thuật
| Product Type | Plug & Trust IoT Secure Element |
| Product Family | EdgeLock SE05x (SE050 extension) |
| Operating System | Java Card OS with updatable applet pre-installed |
| Security Certification | Common Criteria EAL 6+ (AVA_VAN.5) up to OS level |
| Applet Updatability | Yes, via SEMS Lite; custom applets supported |
| Hộp | 20-HX2QFN (SOT1969-1), 3x3 mm |
| Số chân | 20 |
| Host Interface | Single-wire / I2C |
| Pin Compatibility | Pin-to-pin and package compatible with EdgeLock SE050A/B/C/F and SE050E |
| Middleware | Plug & Trust middleware / Nano package for host applications |
| Role | Hardware root of trust, edge-to-cloud security |
| Kiểu lắp đặt | Surface Mount |
| Crypto Interfaces | Secure key storage, mutual authentication, secure provisioning |
Hướng dẫn cấu hình chân SE051 20-hx2qfn (sot1969-1), 3x3 mm
Cấu hình chân cho SE051 (20-hx2qfn (sot1969-1), 3x3 mm gói). Số thứ tự chân, chức năng và sơ đồ kết nối được xác định trong tài liệu thông số kỹ thuật của nhà sản xuất. Tham khảo nó để biết footprint và hướng dẫn hàn chính xác.
Không có dữ liệu chân cụ thể sẵn có cho SE051.
Tham khảo: tài liệu kỹ thuật cho cấu hình chân đầy đủ.
Ứng dụng tiêu biểu
SE051 phù hợp cho 6 Áp dụngs: IoT Device Identity and Cloud Onboarding, Secure Firmware Update Signing, Industrial Peripheral Node Authentication, Smart Metering and Utility Edge Devices, Ultra-Wideband (UWB) System Security, Prototype and Evaluation with Plug&Trust Click.
IoT Device Identity and Cloud Onboarding
The SE051 fits IoT device identity applications because its pre-installed, updatable applet and CC EAL 6+ (AVA_VAN.5) hardware root of trust let each device carry a unique, injection-protected identity from the factory to the cloud. Device keys are generated and stored inside the secure element, so private material never appears on the host MCU bus or in MCU memory. In use, the host processor connects over single-wire or I2C and issues Plug & Trust APDUs through the NXP middleware to sign cloud attestation challenges. The quantified benefit is design speed: Plug & Trust middleware, Nano package, and development kits reduce provisioning software effort from months to weeks, while SEMS Lite keeps the identity applet updatable over the product lifetime.
Được đề xuất
Secure Firmware Update Signing
For secure over-the-air firmware updates, the SE051 fits because it can hold the verification root key in CC EAL 6+ certified hardware and perform signature verification support in the element rather than trusting host code. The host MCU forwards the update manifest hash to the SE051 over I2C or single-wire, and the secure element performs the cryptographic operation internally, resisting glitching and key-extraction attacks that compromise software-only verification. Because the SE051 is pin-compatible with SE050 variants per AN13014, a bootloader designed around the SE050 footprint upgrades to updatable trust anchors via SEMS Lite without a PCB respin, protecting the investment as signing algorithms or certificate chains evolve across the deployed fleet.
Được đề xuất
Industrial Peripheral Node Authentication
Industrial networks benefit from authenticating sensors, actuators, and field modules before granting bus access, and the SE051 fits this role because its single-wire interface needs only one MCU GPIO plus ground, keeping per-node cost and board area minimal in the 3x3 mm HX2QFN20 package. Each peripheral board carries its own SE051 holding a unique certificate pair; the controller challenges the node at power-up through the Plug & Trust middleware, and cloned or counterfeit boards fail attestation. The Java Card OS with updatable applet lets operators rotate credentials in the field using SEMS Lite without recalling hardware, a measurable maintenance advantage over fixed-key authentication ICs in long-lifecycle factory deployments.
Được đề xuất
Smart Metering and Utility Edge Devices
Smart meters demand certified, tamper-resistant storage of billing and cryptographic keys, and the SE051 fits because CC EAL 6+ (AVA_VAN.5) certification up to the OS level satisfies the security audits typical of utility deployments. Its single-wire host interface minimizes isolation-boundary complexity, while the 20-pin 3x3 mm SOT1969-1 package occupies little PCB area on space-constrained meter mainboards. In operation, metering secrets and load-profile signing keys live exclusively inside the element; the metering SoC issues commands via the Plug & Trust middleware. Because the SE051 supports custom Java Card applets and field updates via SEMS Lite, utilities can add regional encryption schemes or re-key the fleet during a 15-plus-year service life without hardware change.
Được đề xuất
Ultra-Wideband (UWB) System Security
NXP pairs the SE051W secure element variant with the SR150 UWB chipset in UWB designs such as the Foxhound evaluation board, because UWB ranging and access-control systems (digital car keys, asset tracking) must authenticate before accepting range data. The SE051W stores the UWB session keys and device identity in EAL 6+ certified hardware, preventing cloning of UWB tags, while sharing the same SOT1969-1 HX2QFN20 footprint as the rest of the SE05x family per AN13014. Designers integrating the Murata Type 2BP module or an SR150-based radio can drop the SE051W onto the same footprint reserved for any SE050/SE051, so one carrier PCB supports secure ranging, plain ranging, or non-UWB identity products with component swaps only.
Được đề xuất
Prototype and Evaluation with Plug&Trust Click
For evaluation, the SE051 fits rapid prototyping through the MIKROE-5392 SE051 Plug&Trust Click board, which places an SE051C2 on a mikroBUS form factor so any MCU with an SPI/I2C-capable mikroBUS socket can exercise the device in minutes. This shortens the path from concept to production: the same APDU commands and Plug & Trust Nano middleware used against the Click board run unchanged against the production SOT1969-1 part, because the Click uses the identical 20-pin HX2QFN device. Teams can validate provisioning flows, key injection, and SEMS Lite update procedures on the evaluation board before committing to PCB layout, and the Click board doubles as a reference schematic for the host-interface wiring and decoupling.
Được đề xuất
Tóm tắt các sản phẩm được đề xuất
Dữ liệu tham khảo kỹ thuật cho SE051 — so sánh, hướng dẫn thiết kế và thông tin tuân thủ.
Hướng dẫn chọn lựa
So sánh với các sản phẩm thay thế
| Tham số | Sản phẩm này | SE050C2HQ2/Z01CDZ | SE050E | SE051A2HQ1/Z01XEZ | SE051C2HQ1/Z01XDZ | SE051W |
|---|---|---|---|---|---|---|
| Package | 20-HX2QFN (SOT1969-1), 3x3 mm | 20-HX2QFN (SOT1969-1) - same | 20-HX2QFN (SOT1969-1) - same | 20-HX2QFN (SOT1969-1) - same | 20-HX2QFN (SOT1969-1) - same | 20-HX2QFN (SOT1969-1) - same |
| Brand | NXP Semiconductors | NXP Semiconductors | NXP Semiconductors | NXP Semiconductors | NXP Semiconductors | NXP Semiconductors |
| Security Certification | CC EAL 6+ (AVA_VAN.5) to OS level | CC EAL 6+ (AVA_VAN.5) | CC EAL 6+ (AVA_VAN.5) | CC EAL 6+ (AVA_VAN.5) | CC EAL 6+ (AVA_VAN.5) | CC EAL 6+ (AVA_VAN.5) |
| Applet Updatability | Yes - SEMS Lite + custom applets | No - fixed applet set | No - fixed enhanced applet | Yes - SEMS Lite | Yes - SEMS Lite | Yes - SEMS Lite (UWB-focused) |
| Operating System | Java Card OS with updatable applet | NXP SE050 OS (fixed applet) | NXP SE050E OS (fixed applet) | Java Card OS | Java Card OS | Java Card OS |
| Custom Applet Support | Yes | No | No | Yes | Yes | Yes |
| Pin Compatibility with SE050 | Yes (per AN13014) | Native SE050 | Yes (per AN13014) | Yes | Yes | Yes |
| Target Use Case | General IoT security, updatable identity | General IoT security (fixed) | Enhanced SE050 IoT security | General IoT security (A2 applet) | General IoT security (C2 applet) | UWB system security (SR150 pairing) |
Bảo phân biệt quan trọng
- Field-updatable applet via SEMS Lite (vsSE050C2HQ2/Z01CDZ)
- Java Card OS flexibility (vsSE050E)
- Turnkey Plug & Trust onboarding (vsSE051A2HQ1/Z01XEZ)
- General IoT applet focus (vsSE051W)
Ghi chú thiết kế
Design the PCB footprint as the SOT1969-1 HX2QFN20 3x3 mm land pattern and reserve the SE050 pinout; per NXP application note AN13014, SE051, SE050E, and SE050A/B/C/F are pin-to-pin and package compatible, so a single footprint lets you qualify cost-optimized SE050 variants and the updatable SE051 on the same board. Place the 3x3 QFN with short traces to the host; the single-wire interface is sensitive to bus capacitance, so keep the SCL/SDA or S1 wire under a few centimeters where possible.
Supply the SE051 from a clean, always-on rail so keys and the updatable applet survive main-power cycles. Decouple VDD with a 100 nF ceramic capacitor placed within 2 mm of the package per standard QFN practice, and verify the supply sequencing requirements in the SE051 datasheet before sharing a regulator with the host MCU. Exact voltage range and current figures should be taken from the NXP SE051 datasheet table (see [DATA_NEEDED] markers on this page) rather than from secondhand values.
Do not assume all SE051 order codes are identical: SE051A2, SE051C2, and SE051W differ in pre-installed applet configuration and target use case (SE051W is oriented to UWB designs with the SR150). Confirm the variant code (e.g., SE051C2HQ1/Z01XDZ stocked at DigiKey) matches your provisioning plan before layout sign-off. Also note that migration from SE050 requires checking the AN13014 integration guidance - hardware is compatible, but applet behavior and SEMS Lite update flows differ from fixed SE050 applets.
Thông tin tuân thủ
Compliance status not stated in the provided web data; consult the NXP SE051 datasheet and product page for RoHS/REACH declarations.
