IEEE Std 2866.1-2023 PDF

Full title and description

IEEE Std 2866.1-2023 — IEEE Standard for Device Trusted Extension: Software Architecture. This standard defines a hierarchical software architecture for a Device Trusted Extension (DTX) system, maps security components to abstract architectural layers, and provides definitions for those security components to support design, development, and testing of DTX implementations.

Abstract

IEEE 2866.1-2023 describes the software architecture of a Device Trusted Extension (DTX) system. It presents a layered, hierarchical model that locates and defines security components, explains their roles and interactions, and provides terminology and architectural guidance to implementers and evaluators. The document is intended to promote interoperable, secure device-level trust extensions used for device identity, attestation, secure storage, and trusted execution support on constrained and general-purpose devices.

General information

• Status: Active / Current standard
• Publication date: 22 August 2023
• Publisher: Institute of Electrical and Electronics Engineers (IEEE)
• ICS / categories: 35.080 (Software); 35.030 (IT security)
• Edition / version: 2023
• Number of pages: 19

Scope

This standard specifies the software architecture for Device Trusted Extension (DTX) systems. It maps security components to architectural layers, defines component functions and interfaces at an abstract level, and provides guidance applicable to the design, development, integration, and testing of DTX-capable devices. The scope covers architecture and components for device identity, attestation, secure storage/sealing, trusted execution elements, and the interactions required to extend trust from device hardware to higher-level software and services.

Key topics and requirements

• Hierarchical, layered software architecture model for DTX systems.
• Definition and mapping of security components (e.g., identity, attestation, secure storage, trusted execution interfaces) to layers.
• Roles and responsibilities of components and their high-level interfaces.
• Design guidance to support interoperability, testability, and secure integration of DTX elements.
• Applicability statements for use in device design, development, and testing workflows.
• Terminology and conceptual models to standardize communication between implementers and evaluators.

Typical use and users

Primary users are device architects, firmware and software engineers, security architects, product designers, test and validation teams, certification bodies, and system integrators building devices that require strong device identity and attestation (for example IoT devices, consumer electronics, industrial edge devices, and embedded systems). The standard is used to guide architectural decisions, to frame security requirements, and to provide a common reference for interoperability and testing.

Related standards

Standards and specifications commonly consulted alongside IEEE 2866.1-2023 include IEEE 802.1AR (Secure Device Identity), IETF and industry device onboarding/bootstrapping guidance (for example RFCs on secure device install and provisioning), Trusted Computing Group (TCG) specifications on attestation and Root of Trust components, and other IEEE device and cybersecurity standards such as IEEE 1686 (IED cybersecurity capabilities). Implementers often reference cryptographic, secure-boot, and trusted execution environment (TEE) specifications from platform vendors and industry bodies when applying the architecture.

Keywords

Device Trusted Extension, DTX, software architecture, device attestation, device identity, trusted execution, secure storage, secure boot, security components, IoT device security.

FAQ

Q: What is this standard?

A: IEEE Std 2866.1-2023 is the IEEE standard that defines a hierarchical software architecture for Device Trusted Extension (DTX) systems and specifies and maps required security components to architectural layers.

Q: What does it cover?

A: It covers an abstract, layered software architecture for DTX systems, defines the security components (identity, attestation, secure storage, trusted execution interfaces, etc.), maps those components to layers, and provides guidance for design, development, integration, and testing of DTX-capable devices.

Q: Who typically uses it?

A: Device and firmware engineers, security architects, system integrators, test and certification organizations, and product teams developing devices that require hardware-rooted identity, attestation, or trusted execution support.

Q: Is it current or superseded?

A: As published in August 2023, IEEE 2866.1-2023 is an active/current standard. Users should check IEEE or their standards provider for any later amendments, corrigenda, or superseding documents when precise currency is required.

Q: Is it part of a series?

A: Yes — this document is the IEEE 2866.1 element addressing software architecture within the broader Device Trusted Extension work. Implementers may encounter related or follow-on IEEE projects and other specifications that address complementary aspects (protocols, interfaces, test methods, or hardware requirements).

Q: What are the key keywords?

A: Device Trusted Extension, DTX, software architecture, device attestation, device identity, trusted execution environment, secure storage, secure boot, security components.