Kerlink – HIP19 third-party manufacturer application (#121)

Co-authored-by: Benoit Duffez <b.duffez@kerlink.fr>

0019-third-party-manufacturers/kerlink.md

@@ -0,0 +1,156 @@
+# Kerlink
+
+![logo](kerlink/logo.png "Kerlink Logo")
+
+## Summary
+
+Kerlink is an IoT connectivity-network and management-software company that assists business and cities of all sizes to design, launch and operate IoT Network, and reliable and securely connect things that matter, over time.
+
+Kerlink manufactures best-in-class industrial, carrier grade, indoor and outdoor LoRaWAN access points, and provides tools to operates a reliable infrastructure
+
+Below are the Wirnet<sup>TM</sup> iStation (ethernet + 4G), Wirnet<sup>TM</sup> iFemtoCell (ethernet + WiFi), and Wirnet<sup>TM</sup> iFemtoCell Evolution (ethernet + 4G).
+
+<img src="kerlink/istation.png" alt="iStation" width=200 />
+
+_Figure 1: Wirnet<sup>TM</sup> iStation (Outdoor, Ethernet/4G) — $899_
+
+<img src="kerlink/fevo.png" alt="iFemtoCell Evolution" width=200 />
+
+_Figure 2: Wirnet<sup>TM</sup> iFemtocell Evolution (indoor, Ethernet/4G)_
+
+<img src="kerlink/wifc.png" alt="iFemtoCell Evolution" width=64 />
+
+_Figure 3: Wirnet<sup>TM</sup> iFemtocell (indoor, Ethernet/Wifi) — $449_
+
+References:
+*   [https://www.kerlink.com/product/wirnet-istation/](https://www.kerlink.com/product/wirnet-istation/)
+*   [https://www.kerlink.com/product/wirnet-ifemtocell-evolution/](https://www.kerlink.com/product/wirnet-ifemtocell-evolution/)
+*   [https://www.kerlink.com/product/wirnet-ifemtocell/](https://www.kerlink.com/product/wirnet-ifemtocell/)
+
+Kerlink will release miner software to run inside the gateways (full miner), but that requires the HIP25 (Validators) to be in production (to eliminate the high CPU usage on the gateways due to the Consensus Group work).  
+Kerlink will eventually switch to light gateways, as any other manufacturer.
+
+## Company Information
+
+Kerlink, an Innovative IoT pioneer and pure industrial player, has been founded in **2004** in France.
+
+*   Designed the first worldwide LoRa<sup>TM</sup> Gateway in **2013**
+*   **Founding** and **Board Member** of the **LoRa Alliance<sup>TM</sup>** since **2015**
+*   **Founding** and **Board Member** of the **uCiFi Alliance<sup>TM</sup>** (Smart Cities convergence initiative) since **2017**
+*   Provided more than **75 000** LoRaWAN gateways, over all continents
+*   Deployed the largest LoRaWAN Network in the world (India)
+*   Worldwide presence (**US**, **France**, **Singapore**, **India**, **Japan**)
+*   Listed on French **Euronext Growth** since May **2016**
+
+Kerlink products and services (network infrastructure operation) bring a high level of quality for reliable, efficient and secure IoT network, dedicated to Industries, Enterprises, cities and professional services
+
+Its vertical ecosystem and partnership open huge opportunities to deploy massive Iot solution on Helium network.
+
+## Product Information
+
+Kerlink portfolio, compatible with Helium network, contains high quality and radio performances, resilient and secure gateways, based on the same hardware and software architecture, with a 8-channels LoRaWAN modem (Semtech Reference design v1), a worldwide bands 4G modem Quectel EC25G (depending on the model) and 10/100 ethernet controller.
+
+All gateways come in 915MHz, 923MHz and 868MHz variants, and support US915, AU915, AS923-*, EU868, IN865, RU867, etc. LoRaWAN regional parameters.
+
+* Wirnet<sup>TM</sup> iStation
+  * Outdoor (IP67), 
+  * 8 Channels, 
+  * Internal built-in antennas (GPS, LoRa, 4G), support external LoRa Antenna,
+  * Ethernet and 4G (worldwide bands) backhauls,
+  * PoE and +/-48VDC power supply
+
+    <img src="kerlink/istation2.png" alt="iStation overview" width=140 />
+    <img src="kerlink/istation_use_cases.png" alt="iStation use cases" width=400 />
+
+* Wirnet<sup>TM</sup> iFemtocell and iFemtocell evolution
+  * Indoor casing (IP30)
+  * 8 Channels, 
+  * External LoRa antenna (3dBi)
+  * Multi-Backhaul
+    * Wirnet<sup>TM</sup> iFemtocell : Ethernet, Wifi (build-in antenna)
+    * Wirnet<sup>TM</sup> iFemtocell-evolution ; Ethernet, 4G (worldwide Bands, integrated LTE antenna)
+  * Multi-powered options
+    * AC/DC power supply (90-264VAC/12VDC)
+    * 5V DC supply via USB-C
+    * UPS (Accessories) 5h or 24h autonomy
+
+    <img src="kerlink/femto2.png" alt="iFemtoCell overview" width=120 />
+    <img src="kerlink/ifemto_use_cases.png" alt="iFemtoCell use cases" width=300 />
+
+The gateways are ready to be connected to the infrastructure management platform **Wanesy<sup>TM</sup> Management Center**, providing:
+
+* Zero-Touch provisioning (backhaul credentials), including preinstallation, preconfiguration of the Helium Miner at the first plug-in
+* Realtime monitoring of the gateway fleet health
+* Remote maintenance
+* Signal monitoring and radio Statistics
+
+<img src="kerlink/wmc.png" alt="Wanesy Management Center" />
+
+_Figure 4: exemple Radio spectrum monitoring_
+
+## Customer Support
+
+Kerlink has a worldwide 24/7 level 2 support teams based in France, USA (California), India, Singapore and Japan.
+
+Kerlink will provide worldwide support and replacements or reverse logistics through our distribution network.
+
+## Hardware Security
+
+Kerlink gateways have an embedded hardware security built in the CPU, provided by ProvenCore<sup>TM</sup>. The behavior is very similar to an ECC chip. This has a dedicated processing and storage unit that can store secrets and process security functions (signature, encryption) using private keys. The key is stored ciphered in a hardware memory that is not reachable from the Linux Kernel or userland. Even if the hardware is physically compromised, the key cannot be recovered. When the hardware performs signatures or encryptions, the key is never loaded into the RAM.
+
+When the firmware signature verification is enabled, the bootloader will refuse to load the firmware unless the signature matches the key burned in the CPU. The CPU has 4 slots of keys that are fuses, and one slot can be erased in the event of key compromising.
+
+The bootloader itself cannot be modified (locked).
+
+Kerlink can provide more information upon demand and is willing to comply to any third party audit.
+
+Kerlink gateways can be configured to be monitored by the Wanesy<sup>TM</sup> Management Center (WMC) software. This is a cloud-based SaaS that enables remote gateway management (OTA firmware upgrade, configuration change, monitoring, KPIs, supervision, alarms, etc.). The connection between the gateways and the WMC is secured by an OpenVPN connection. The OpenVPN certificate and private key are stored in the ProvenCore<sup>TM</sup> hardware security module. The key is never reachable from the Kernel or userland and cannot be compromised. TLS and security negotiation for the VPN are handled by ProvenCore<sup>TM</sup> so that the key is never loaded into the RAM.
+
+Kerlink gateways can remotely self-configure using a provisioning server called Wanesy<sup>TM</sup> Operational Assistant (WOA). The gateways have a private key generated in production and download a certificate (PKCS10) from WOA to authenticate themselves. This provides TLS client-based and server-based mutual authentication. Provisioning information that WOA may send (OTA, configuration, etc) are securely transmitted only to the gateway authorized and authenticated for it.
+
+Kerlink plans to use this security to store the swarm_key, generated in production. WOA would save the public key part of the swarm key and will never store the private key. The gateway will be able to authenticate on WOA during the onboarding procedure, to generate the add_gateway transaction and provide it to WOA. WOA will then provide it to the phone wallet app once ownership of the gateway by the phone wallet app has been identified (like a QR code on the gateway). The wallet app will sign the transaction. The onboarding server will retrieve the swarm public key from WOA, the transaction from the blockchain and will be able to sign the add_gateway transaction. The private swarm key will never leave the gateway, is never stored by Kerlink, and it cannot be recovered since it is stored ciphered in the hardware security memory.
+
+
+## Manufacturing Information
+
+Kerlink is a major player in the LoRaWAN ecosystem and has shipped more than 75 000 gateways to more than 330 customers across the world. The biggest LoRaWAN network in the world, in India, is built with Kerlink gateways.
+
+Kerlink has a worldwide presence and has been a leading gateway provider since the existence of LoRaWAN. Kerlink has a network of resellers and distributors across the globe that provide stock, local support and importation convenience to many customers.
+
+As an Industrial fabless company, Kerlink can easily scale its production lines on-demand through its EMS partnership.
+
+
+## Proof of Identity
+
+Kerlink SA is a stable public company, listed at Euronext Growth, Paris stock exchange.
+
+All financial information are public:
+
+https://live.euronext.com/en/ipo-showcase/kerlink
+
+
+## Budget & Capital
+
+Kerlink SA is a stable public company, listed at Euronext Growth, Paris stock exchange.
+
+All financial information are public:
+
+https://live.euronext.com/en/ipo-showcase/kerlink
+
+
+## Risks & Challenges
+
+The main challenges are businesses. The best value of the Helium network is IoT proof-of-coverage allowing connectivity for Massive IoT applications.
+
+But These Application need to become real. And Kerlink, as a Pioneer and Pure player, is a real valuable go-in-between to connect concrete use cases to Helium Network.
+
+## Other information
+
+* Desired Discord support channel name: Kerlink
+* Twitter profile: https://twitter.com/kerlink_news
+* Facebook profile: https://www.facebook.com/pages/Kerlink/1289247241168460
+* Other social profiles: -
+* Website: https://kerlink.com
+* Payment methods available: -
+* Regions covered / shipped to: worldwide
+