Placed on – 19 December 2022

BACE Cloud PaaS as a private deployment

BACE is the product line created by EVALAN to help anyone digitalize their assets and build state-of-the-art IoT applications quickly.
BACE Cloud PaaS

BACE (Build a Connection Everywhere) is the product line created by EVALAN to help anyone digitalize their assets and build state-of-the-art Internet of Things (IoT) applications quickly.  

BACE has two highly integrated parts: the BACE gateway and the BACE Cloud, a PaaS (Platform as a Service) that provides four pillar services and combines several applications to help you build your IoT solution without having to worry about building and maintaining the underlying infrastructure. 

The BACE PaaS as a private deployment 

The standard BACE platform is hosted on a shared cloud resource with other tenants and EVALAN takes care of all operations related to the infrastructure, maintenance, scaling and security.  

We are aware that companies in some industries need to follow specific privacy and security regulations. For them, we offer the flexibility to run a private instance of BACE platform under their own Microsoft Azure account. This provides them with full control of anything happening in the system, with our guarantee of:  

  • Smooth operations and a maintenance free data pipeline.  
  • Easy configurability when changes are needed, or devices/users need to be added.  
  • Optional operational services for keeping devices up to date and running. 

More on Security 

Because the security of an IoT deployment depends on the protection of all its components, we implement security from the design stage at device and cloud level and pay special attention to privacy.  

Security at the Gateway level 

1. Flash Encryption

First, during the assembly process, the BACE gateways are protected with flash encryption, which helps keep the data stored on the device safe from unauthorized access or tampering. Each gateway has its own unique key for encrypting and decrypting stored data on the microcontroller, which cannot be accessed by any third party.  

2. Firmware Encryption

Second, the firmware running on the gateway is also encrypted which makes it difficult for anyone to see how the firmware works or to access any sensitive information that it may hold.  

3. Secure Boot

Third, to prevent malicious software or firmware from being installed on the device, the BACE gateways do secure boots. This feature prevents unauthorized firmware from running on a gateway manufactured by EVALAN, and hence helps to avert cyber-attacks and other security breaches.  

4. Identity Certificate

Fourth, to connect with the BACE Cloud, each gateway includes a specific identity certificate which gets verified and authenticated every time a communication to the Cloud platform occurs. Furthermore, the communication between the device and Cloud is also encrypted.  

Related to the last point, is the fact that we also support encryption for wireless communication (e.g., Z-Wave and Wi-Fi) with third party devices that support it; this is especially needed when sending sensitive information, for example in healthcare.  

Security at Cloud level 

The security at the Cloud level is divided by design into several layers, including separate security for the data in transit and for the data in rest. For the former, when information is sent from one system to another, the information is encrypted following several protocols.

For the latter, we implement secure passwords, roles and permissions, which means that access to data is done through accounts and granted based on roles and functionalities that specific users need. Furthermore, the information is isolated and kept in a private network.

In that sense, if a breach occurs, only data in transit is visible, thus limiting the attack surface. 

Privacy by design 

Finally, it is important to note that our systems always consider the sensitivity of data and do not store or send personal information. In that sense, we follow the subsequent principles to ensure privacy and compliance to the GDPR:  

  • Purpose limitation: we collect data only if it’s used for processing (the processing purposes are specified in our privacy policy).  
  • Data minimization: we only collect the necessary amount of data for the service. 
  • Storage limitation: we offer automatic retention of data based on a custom retention period.  
  • Integrity and confidentiality: the data is stored securely and confidentially in our private databases.  
  • Transparency: EVALAN is open and clear about all security and privacy principles applied in its IoT solutions.  

Want to know more?  

Share this article

Our success cases

Smart Care Solution

Shifter – Smart time registration system

More Blogs

Energy & WaterIndustry

Dynamic Load Balancing for Optimization and Peak Shaving

Exceeding contract limits used to result in an automatic increase of the agreed peak power. In the age of grid congestion it can lead to contract termination and law suits.
Energy & WaterIndustry

Announcing BACE Panel for Rapid Deployment of Assets in an IoT Platform

BACE Panel has been updated with new tools such as a library of Modbus Templates. You can also store your own Templates, to make onboarding your own assets even faster.
Energy & WaterIndustry

Breaking Down your Energy Consumption with Sub-Metering

Sub-metering delivers essential information that is needed to meet ESG objectives and comply with new regulations, such as the CSRD.
Energy & WaterIndustry

IT and OT – Focus on Bridging the Gap

BACE was developed to bridge the gap between IT and OT. What does that mean and why is this relevant for you?

Remote Monitoring and Control in today’s Data-Driven World

Test your Remote Monitoring or Remote Control Use Case with a few simple steps. Benefit from years of IoT experience and eliminate the need for in-house IoT development.

IoT and the Hype Cycle – how are we doing with that?

Gartner’s Hype Cycle illustrates the journey of new technologies. Where is IoT in this cycle?

"We solve problems with IoT solutions to give your business a competitive advantage."