--- title: "Technologies: Security and trust | Nexus Observatory" description: "Technologies of the Security and trust platform, layer by layer: Security and identity and trust. In Security and trust, security…" url: https://observatory.global/security-trust/technologies/ publisher: Nexus Observatory Inc. updated: 2026-11-07 --- [Nexus Observatory](https://observatory.global/) / [Security and trust](https://observatory.global/security-trust/) / **Technologies** # The technologies behind security and trust. Every technology this platform builds with, layer by layer, from the open taxonomy. Marked in red: what is moving now, each traced to its source. [Plan with us](https://observatory.global/security-trust/contact/deployment/) [Architecture](https://observatory.global/security-trust/architecture/) Areas · **5** Technologies · **61** Industries · **5** Specification ## Take the station apart. Every part is a class we source, wire and test before the station ships. Select a part in the drawing or a row of the sheet and the other follows. Switch on Dimensions to measure it. Station assembly Select a part to read what it does. Pull the station apart to see how it fits together. [Configure a station](https://observatory.global/studio/builder/) At a glance ## Security, identity and trust How every node proves what it is and what it runs, how links and keys are protected, how software is traced to its source, how personal data is minimised, and how incidents are found and handled. In Security and trust, security, identity and trust covers device identity and attestation, PKI, secure boot and updates, zero trust and network security and 5G and wireless security. The problem ### Every node proves what it is The technologies of Security and trust start with security, identity and trust. Hardware-rooted identity and attestation at every join, PKI, secure boot and signed updates, segmentation between nodes, tenants and sites, operational-technology and wireless security, monitoring and response, and the move to post-quantum keys, planned before it is forced. Components - Pole-mounted edge gateway node - Fixed gas detectors on a drift wall - Particulate monitoring station and sensor node - Overhead line sensor on a distribution span - Private LTE mast on a solar skid - "AI tower in a box" - Hardware security module, 1U, in an edge rack - Data hall row pair with cold-aisle containment Interfaces **Instruments**: SDI-12 · RS-485 / Modbus RTU · 4–20 mA **Radio**: Ethernet · LTE-M / NB-IoT · LoRaWAN **Time and position**: GNSS 1PPS **Security**: TPM 2.0 **Publishing**: MQTT In the story below 1. The system, part by part 2. Assembly 3. Installation 4. Deployment 5. Connections 6. Operation 7. Failure and recovery 8. Scale and federation 9. What you get Scenes · 12 Next steps [Plan a deployment](https://observatory.global/security-trust/contact/deployment/) [Open the Field Deployment Studio](https://observatory.global/studio/) [See Security and trust](https://observatory.global/security-trust/) 1. Security and trust · Technologies Every node proves what it is The technologies of Security and trust start with security, identity and trust. Hardware-rooted identity and attestation at every join, PKI, secure boot and signed updates, segmentation between nodes, tenants and sites, operational-technology and wireless security, monitoring and response, and the move to post-quantum keys, planned before it is forced. 2. Technology · Security, identity and trust Security, identity and trust How every node proves what it is and what it runs, how links and keys are protected, how software is traced to its source, how personal data is minimised, and how incidents are found and handled. In Security and trust, security, identity and trust covers device identity and attestation, PKI, secure boot and updates, zero trust and network security and 5G and wireless security. 3. Time and place When and where, on every record Every record made for Security and trust carries its time, from a clock disciplined by satellite time or a PTP grandmaster, with the position and siting record of the station that made it. When time or position degrades, the record for Security and trust says so, and every user downstream sees the same warning. 4. How it works From instrument to record On a network for Security and trust, an instrument reads and the base node checks the value, stamps its time and place, signs it and sends it over the link the site has. The edge checks each signature before it admits a record for Security and trust, and the core files the record with its metadata, quality flag and licence. 5. Trust Proved before it is trusted A node joins a network for Security and trust only after its hardware root of trust answers an attestation challenge. Its keys stay in secure hardware, its software arrives signed and every record it makes for Security and trust carries a signature, so anyone downstream can check where a value came from. 6. Evidence Standards an auditor can check Metadata for Security and trust follows WIGOS and ISO 19115 practice, and observations are served through OGC SensorThings and exchanged through WIS 2.0. We keep every release, calibration and admission for Security and trust as a signed record that an auditor can verify independently, against the standard it names. 7. Operations Every node watched, every incident closed The operations console shows every node of a network for Security and trust with its state, its plan and its evidence. An alert arrives with its data and a runbook, acknowledging it opens a work order, and an incident for Security and trust closes only when the operator records the cause and verifies the fix. 8. Failure and recovery When a node fails, the fleet knows first When a node for Security and trust goes silent or a sensor drifts, the node buffers its data and fails over to a second link where the site has one. The alert carries the evidence a responder needs, and the record for Security and trust loses nothing and counts nothing twice. 9. Updates Updates in rings, with rollback Software and configuration reach a fleet for Security and trust in rings: one canary site first, then a few, then all, each ring gated on health and data completeness. A failed gate stops the wave, and each node for Security and trust returns to its last good release without a site visit. 10. How it scales One base unit, repeated A network for Security and trust starts with one base node and the instruments it reads. A station adds power and radio, a site adds a relay and a fleet repeats the proven site, so capacity for Security and trust grows by adding units, never by replacing what works. 11. What you get Open where it can be, contracted where it must be The protocol, the methods and the open data behind Security and trust are free to use and build on. Nexus Observatory Inc. delivers sites, fleets, managed operations and data tiers for Security and trust under contract, priced per site and per fleet, with service levels written as numbers you can check. 12. Next step Security and trust, planned with you Tell us which technologies of Security and trust your sites must run and the standards your buyers hold you to. An engineer replies with a survey proposal, a design and a scope for Security and trust, and the plan grows from one site to the network you need. [Plan a deployment](https://observatory.global/security-trust/contact/deployment/) [Open the Field Deployment Studio](https://observatory.global/studio/) [See Security and trust](https://observatory.global/security-trust/) More presentations ## See it from every side. Each opens as a full-screen presentation: deeper pages on the same subject, explainers, stories, guided tours of the places, network scenes and the observatories that came before. [All presentations](https://observatory.global/presentations/) ### In depth [Use case **Utility grid-edge private LTE and wildfire weather**](https://observatory.global/use-cases/utility-grid-edge/) [Sector **Industrial**](https://observatory.global/sectors/industrial/) [ISIC section · ISIC B **Mining and quarrying**](https://observatory.global/industries/b-mining-and-quarrying/) [ISIC section · ISIC F **Construction**](https://observatory.global/industries/f-construction/) ### Explainers [Explainer · Industrial **Industrial** Blast vibration at the pit, fire weather at the grid edge, methane at the fenceline and tailings movement from GNSS.](https://observatory.global/industries/infrastructure/explainer/) [Platform **Security and trust** Every unattended node is an entry point](https://observatory.global/security-trust/) [Platform **Sensors & instruments** A number without its story](https://observatory.global/sensors/) ### Stories [Story · Private 5G and AI-RAN **Private 5G with the inference in the radio** A private cellular network gives a site its own coverage, its own security and its own priorities. AI-RAN adds a second idea: the accelerators that run the…](https://observatory.global/stories/private-5g-ai-ran/) [Story · Post-quantum cryptography **Cryptography that outlasts the quantum computer** Data signed today may need to be trusted in 2040. Post-quantum standards were first published in August 2024, and governments have set dates for leaving…](https://observatory.global/stories/pqc-migration/) [Story · Timing and PNT **Time as infrastructure** A 5G cell must hold its phase within 3 µs of its neighbours, ±1.5 µs of a common reference; a synchrophasor’s one per cent vector error leaves room for only…](https://observatory.global/stories/timing-pnt/) ### Places and networks [Guided tour · Guided 3D tour **Transmission corridor** Lattice towers carry a line across open country; conductor sensors report temperature and sag, and the substation edge brings them into the grid operator’s systems.](https://observatory.global/environments/transmission-corridor/) [Guided tour · Guided 3D tour **Open-pit mine** GNSS slope monitors on the benches, a blast seismograph at the boundary and a private cell for the fleet, around a benched pit cut into the ground.](https://observatory.global/environments/open-pit-mine/) [Network scene · Private 5G · Mining **Private 5G in an open-pit mine** A private network for haul trucks, drills and slope radar: a mast on the rim, a cell in the pit, the core at the plant, and coverage computed over the benches themselves.](https://observatory.global/environments/networks/private5g-mine/) ### Heritage observatories [Heritage observatory · Global network of about 150 stations; USGS and EarthScope (formerly IRIS) partnership · 1984 **Global Seismographic Network** About 150 digital broadband seismic stations in some 80 countries, sending data to open archives within minutes.](https://observatory.global/observatories/iris-gsn/) [Heritage observatory · United States · 1921 **Caltech Seismological Laboratory** A laboratory in Pasadena that gave earthquakes a number. The Richter magnitude scale of 1935 depended on one instrument type in many places, a lesson as relevant to networks today…](https://observatory.global/observatories/caltech-seismo-lab/) ### Interactive tools [Interactive tool · Plan a site **Field Deployment Studio** Terrain, devices, coverage, viewshed, power and the best spot for a station, then a deployment request with the plan attached.](https://observatory.global/studio/) **01** The layered map ## Layer by layer, from the open taxonomy. Each domain this platform draws on, with its layers and the technologies in each. Open a layer for what each technology does and the standard behind it. ### Security, identity and trust How every node proves what it is and what it runs, how links and keys are protected, how software is traced to its source, how personal data is minimised, and how incidents are found and handled. [The full directory →](https://observatory.global/technologies/security/) ### [Device identity and attestation](https://observatory.global/technologies/security/device-identity-and-attestation/) Technologies · 8 · Frontier · 1 - Trusted Platform Module - DICE layered identity - Secure device identifiers - Remote attestation architecture - Entity Attestation Tokens - Secure elements - Physically unclonable functions - Zero-touch secure onboarding ### [PKI, secure boot and updates](https://observatory.global/technologies/security/pki-secure-boot-and-updates/) Technologies · 7 - Certificate profiles - Automated certificate enrolment - Revocation and status checking - Secure and measured boot - Firmware update security - Software update frameworks - Signed orchestration plans ### [Zero trust and network security](https://observatory.global/technologies/security/zero-trust-and-network-security/) Technologies · 7 - Zero trust architecture - Workload identity - Port-based access and link encryption - Transport security - IPsec and site tunnels - Zones, conduits and segmentation - GNSS interference and spoofing resilience ### [5G and wireless security](https://observatory.global/technologies/security/5g-and-wireless-security/) Technologies · 6 - 5G system security - Network product security assurance - Open RAN security - 5G security reference practice - LPWAN security - RF jamming and rogue emitter detection ### [OT security and software supply chain](https://observatory.global/technologies/security/ot-security-and-software-supply-chain/) Technologies · 9 - Industrial security programmes - System and component security levels - Secure development lifecycle - OT security guidance and threat models - Software bills of materials - Build provenance and supply-chain levels - Vulnerability exploitability exchange - Hardware supply chain integrity - Product cybersecurity regulation ### [Privacy and data protection](https://observatory.global/technologies/security/privacy-and-data-protection/) Technologies · 7 - Canadian privacy law - International privacy law - Privacy information management - Privacy by design - Privacy impact assessment - Camera and audio minimisation - De-identification ### [Keys, cryptography and post-quantum migration](https://observatory.global/technologies/security/keys-cryptography-and-post-quantum-migration/) Technologies · 9 · Frontier · 5 - Key management lifecycle - Hardware security modules - Key management interfaces - Random number generation - ML-KEM key encapsulation - ML-DSA and SLH-DSA signatures - Stateful hash-based signatures - Hybrid key exchange - Crypto inventory and migration planning ### [Monitoring, incident response and governance](https://observatory.global/technologies/security/monitoring-incident-response-and-governance/) Technologies · 8 - Incident response - Security monitoring and logging - Coordinated vulnerability disclosure - CSIRT services - Digital evidence handling - Information security management - Government security control profiles - Product security evaluation **02** Across the network ## The whole spectrum, on the main site. [Main site Every technology domain All domains, layers and items, with their sources. Open →](https://observatory.global/technologies/) [Main site The spectrum The technologies of observation on one map. Open →](https://observatory.global/spectrum/) [Observatory Protocol Standards The open standards the protocol is composed from. Open →](https://observatory.global/protocol/standards/) **03** On this site ## Where to go next. [Security and trust Areas Every area, with its systems and standards. Open →](https://observatory.global/security-trust/areas/) [Security and trust Architecture Layers, functions and evidence. Open →](https://observatory.global/security-trust/architecture/) [Security and trust Industries The industry sites built on this platform. Open →](https://observatory.global/security-trust/industries/) [Security and trust Resources Explainer, stories, specification and forms. Open →](https://observatory.global/security-trust/resources/) ## Bring us the site. We bring the survey, the design and the crew. The form names who receives your details. [Plan a deployment](https://observatory.global/security-trust/contact/deployment/) [Contact](https://observatory.global/security-trust/contact/) [Nexus Observatory](https://observatory.global/) **Security and trust** . Every node proves what it is. [Talk to us](https://observatory.global/contact/) Security and trust - [Overview](https://observatory.global/security-trust/) - [Areas](https://observatory.global/security-trust/areas/) - [Technologies](https://observatory.global/security-trust/technologies/) - [Architecture](https://observatory.global/security-trust/architecture/) - [Industries](https://observatory.global/security-trust/industries/) - [Resources](https://observatory.global/security-trust/resources/) - [Contact](https://observatory.global/security-trust/contact/) Platforms - [Protocol & Grid](https://observatory.global/grid-services/) - [Software](https://observatory.global/software/) - [Hardware & power](https://observatory.global/hardware/) - [Sensors & instruments](https://observatory.global/sensors/) - [Connectivity](https://observatory.global/connectivity/) - [Edge compute & AI](https://observatory.global/edge-ai/) - [Earth observation & GeoAI](https://observatory.global/earth-observation/) - [Space and satellite systems](https://observatory.global/space/) - [Positioning, navigation and timing](https://observatory.global/pnt/) - [Security and trust](https://observatory.global/security-trust/) - [Digital twins and simulation](https://observatory.global/digital-twins/) - [Data & licensing](https://observatory.global/data-products/) - [Field services](https://observatory.global/field-services/) - [Design and integration](https://observatory.global/integration/) - [Test and qualification](https://observatory.global/qualification/) - [Operations centre](https://observatory.global/operations/) - [Training and enablement](https://observatory.global/training/) - [Frontier labs](https://observatory.global/labs/) Solutions - [Early warning](https://observatory.global/use-cases/street-flood/) - [Wildfire and fire weather](https://observatory.global/use-cases/wildfire-camera/) - [Environmental compliance](https://observatory.global/use-cases/methane-fenceline/) - [Asset monitoring](https://observatory.global/industries/infrastructure/) - [Private networks](https://observatory.global/connectivity/private-5g/) - [Remote power and sites](https://observatory.global/use-cases/remote-microgrid/) - [Climate and resilience](https://observatory.global/industries/climate/) - [Site twins](https://observatory.global/digital-twins/) - [Data licensing](https://observatory.global/data-products/) Industries - [Public safety](https://observatory.global/industries/public-safety/) - [Government](https://observatory.global/industries/government/) - [Cities](https://observatory.global/industries/cities/) - [Civil resilience](https://observatory.global/industries/resilience/) - [Communities](https://observatory.global/industries/communities/) - [Humanitarian](https://observatory.global/industries/humanitarian/) - [Climate](https://observatory.global/industries/climate/) - [Water](https://observatory.global/industries/water/) - [Nature](https://observatory.global/industries/nature/) - [Oceans](https://observatory.global/industries/oceans/) - [Agriculture](https://observatory.global/industries/agriculture/) - [Energy](https://observatory.global/industries/energy/) - [Telecom](https://observatory.global/industries/telecom/) - [Transport](https://observatory.global/industries/transport/) - [Infrastructure](https://observatory.global/industries/infrastructure/) - [Mining](https://observatory.global/industries/mining/) - [Industry](https://observatory.global/industries/industry/) - [Research](https://observatory.global/industries/research/) - [Education](https://observatory.global/industries/education/) - [Health](https://observatory.global/industries/health/) - [Insurance and finance](https://observatory.global/industries/insurance/) - [Events](https://observatory.global/industries/events/) Products - [Field Deployment Studio](https://observatory.global/studio/) - [Station Builder](https://observatory.global/studio/builder/) - [Field services](https://observatory.global/field-services/) - [Data products](https://observatory.global/data-products/) - [APIs and SDKs](https://observatory.global/protocol/developers/) - [Edge runtime and fleet](https://observatory.global/software/) - [Hardware catalogue](https://observatory.global/hardware/) - [Reference designs](https://observatory.global/protocol/reference-designs/) Resources - [Learn](https://observatory.global/learn/) - [Stories](https://observatory.global/stories/) - [Presentations](https://observatory.global/presentations/) - [Environments](https://observatory.global/environments/) - [Network scenes](https://observatory.global/environments/networks/) - [Observatories atlas](https://observatory.global/observatories/) - [Earth and maps](https://observatory.global/earth/) - [Technologies](https://observatory.global/technologies/) - [Countries](https://observatory.global/countries/) - [Spectrum](https://observatory.global/spectrum/) - [Observatory Protocol](https://observatory.global/protocol/) - [Specification](https://observatory.global/protocol/specification/) - [Conformance](https://observatory.global/protocol/conformance/) - [Open source](https://observatory.global/open/) - [Data credits](https://observatory.global/credits/) Company - [About](https://observatory.global/about/) - [Open governance](https://observatory.global/consortium/) - [Security and trust](https://observatory.global/security/) - [Careers](https://observatory.global/contact/careers/) - [Press](https://observatory.global/contact/press/) - [Contact sales](https://observatory.global/contact/) - [Privacy requests](https://observatory.global/privacy-request/) © 2026 Nexus Observatory Inc. [Security and trust](https://observatory.global/security/) [Privacy choices](https://observatory.global/privacy-choices/) [Accessibility](https://observatory.global/legal/accessibility/) [Privacy](https://observatory.global/legal/privacy/) [Terms](https://observatory.global/legal/terms/) [Status](https://status.observatory.global/) [Help translate](https://observatory.global/translate/)