IN Brief:
- Infineon has launched SECORA ID Key S USB for passwordless authentication, digital signatures, and PKI functions.
- The Java Card-based SiP combines an SLC38 crypto controller with USB and NFC connectivity.
- Engineering samples are available now, with volume production expected to begin in September 2026.
Infineon Technologies has launched SECORA ID Key S USB, a Java Card-based security solution with USB and NFC connectivity for secured authentication and digital signatures.
The product supports FIDO2 and PKI functions, and is compliant with CTAP 2.1. Infineon describes it as the first FIDO-certified Level 3+ solution, giving it a role in phishing-resistant, passwordless authentication and protection against remote software and local hardware attacks. The device includes preloaded applets for FIDO authentication, qualified digital signature creation, and PKI functions, while allowing customers to develop, migrate, and deploy proprietary Java Card applets.
SECORA ID Key S USB is built on Infineon’s SLC38 crypto controller and runs a Java Card operating system compliant with Java Card 3.1 and GlobalPlatform v2.3.1. The platform provides 250kB of user non-volatile memory, with an additional 64kB available if the ISO file system applet is removed, alongside 7,392 bytes of free user RAM. It supports secured key management and certificate processing for encrypted communication and digital signatures.
The solution is supplied as a system-in-package combining the security controller with a USB bridge controller. The package measures 4mm x 4mm x 0.85mm, giving OEMs a compact route to USB and NFC authentication hardware while reducing bill-of-materials complexity and inventory burden. Infineon is also providing development tools including a Java Card development environment and the Infineon Configurator for custom applet development and Java Card OS personalisation.
“The demand for strong, passwordless authentication has never been higher,” said Maurizio Skerlj, Senior Vice President and Product Line Manager for Authentication and Identity Solutions at Infineon. “With SECORA ID Key S USB, we are giving organizations a proven, certified solution that addresses today’s security challenges while being simple enough to deploy at scale across any environment – from enterprise workplaces to government applications and financial institutions.”
The product is aimed at secured logical access, while the open Java Card environment extends the potential use cases into physical access, crypto wallets, software rights management, and other identity-led applications. Compatibility with environments that do not include integrated smart card readers is also notable, as it allows hardware-backed authentication to be deployed through existing USB infrastructure while still supporting NFC.
The launch sits within a broader shift away from password-dependent security. Enterprises, public-sector systems, financial institutions, and industrial operators are trying to reduce exposure to phishing, credential theft, and weak authentication workflows. FIDO2-based authenticators address part of that problem by tying authentication to cryptographic keys and local user verification rather than reusable shared secrets.
The system-in-package format is an important part of the product’s engineering case. Authentication functions often have to be added to compact products with limited PCB area, constrained development time, and strict certification expectations. Bringing the controller, USB bridge, Java Card platform, and preloaded applets into an integrated package reduces some of the integration burden, although security implementation, provisioning, key management, and update procedures still require careful engineering.
Infineon’s Dresden power semiconductor fab opening has already underlined the company’s role in European power and mixed-signal manufacturing capacity. SECORA ID Key S USB shows another part of the portfolio where hardware security, identity, and embedded trust sit alongside power and IoT as industrial electronics become more connected and more exposed to cyber risk.
Regulatory pressure around connected-device security is also rising in Europe and the UK. Authentication is no longer limited to user login. It increasingly touches device identity, service access, software entitlement, maintenance, firmware update control, and secure lifecycle management. Hardware-backed keys can help establish trust boundaries, but they need disciplined enrolment, revocation, monitoring, and recovery processes around them.
Engineering samples of Infineon ID Key S USB are available now, with volume production expected to begin in September 2026. The product gives security device makers and embedded system developers a compact platform for FIDO2, PKI, and applet-based authentication as passwordless access moves from enterprise policy ambition into deployable hardware.
