Definition
TLS (Transport Layer Security) is an encryption protocol that ensures the security of network communications and forms the basis of HTTPS. TLS encrypts transmitted data and performs integrity checks to prevent eavesdropping, tampering, and man-in-the-middle attacks. In the International IoT Cloud Platform (ICMP), TLS ensures the HTTPS transmission security of RESTful API, Webhook, Global Dashboard, Partner Portal, and works together with IAM and RBAC to form a complete security system.
Working Principle
TLS establishes an encrypted channel on top of TCP: during the handshake phase, it negotiates encryption algorithms, exchanges certificates, and verifies identities; once the session is established, application-layer data is transmitted after encryption and decrypted by the receiving end for use. TLS 1.2 and TLS 1.3 are the currently recommended versions, and older protocols (such as SSLv3 and TLS 1.0) must be disabled to avoid known vulnerabilities. ICMP's API Gateway and web services must enable TLS, with certificates issued by trusted CAs and support for SNI to host multiple domains. In cross-border scenarios, encryption strength requirements of different regions must be met, and some regions have special regulations for export encryption.
Use Cases
Typical scenarios include: RESTful API calls—customers call the API via HTTPS, with TLS protecting sensitive data such as API keys, tokens, and request parameters; Webhook callbacks—when the platform pushes events to customer systems, HTTPS ensures that the callback content is not eavesdropped on or tampered with; Portal and Dashboard—logins and operations on the Global Dashboard and Partner Portal are encrypted with TLS; Payments and sensitive operations—integration with Payment Gateway and submission of card information require TLS protection to meet PCI DSS and other compliance requirements.
Practice in ICMP
SimtoLink ICMP enforces HTTPS for all external services, using TLS 1.2 or higher. API Gateway, Global Dashboard, and Webhook endpoints all have valid certificates and support security enhancements like HSTS. Combined with IAM and OAuth2 authentication, this forms a dual protection of "transport encryption + identity authentication." In cross-border scenarios, the platform complies with Data Residency and GDPR requirements, and TLS encryption is one of the important means of protecting cross-border transmission data.