DJI passes CVMP to receive validation from Commerce Dept.

LOS ANGELES – Popular drone manufacturer DJI has received recognition for its DJI Core Crypto Engine from the U.S. Department of Commerce after passing the Cryptographic Module Validation Program (CMVP).

The achievement qualifies the DJI Crypto Core Engine to receive the Federal Information Processing Standard (FIPS) 140-2, and this validation reinforces DJI’s commitment to customer data and privacy the company wrote. (FIPS) 140-2 compliance has been widely adopted around the world as a practical security benchmark.

According to DJI, their Crypto Core Engine is a firmware hybrid cryptographic module providing security services for the entire DJI platform, including things like key management, platform identity, cryptography, secure boot, and secure Life Cycle State (LCS).

“When it comes to data, DJI has very strong principles around transparent usage, security and privacy.  We truly believe that ‘customer data is none of our business’ and understand how important data security is for the people, businesses and government agencies that rely on our platforms,” said Christina Zhang, Senior Director of Corporate Strategy at DJI. “This encryption validation is testament to how tirelessly we strive to make customer data and privacy more secure by tightening existing systems, innovating new ones and embracing new methods and technologies.”

DJI’s platform provides a variety of security features for users to protect their data like Local Data Mode, which prevents internet data connection and eliminating the possibility of sharing flight data inadvertently. DJI’s customer data protection protocols are also independently reviewed in a security audit by Kivu Consulting, a San Francisco based cybersecurity firm.

“From this point on, all DJI drones containing the DJI Core Crypto Engine ensure that whether flown for leisure or operated for business, customers are treated to trusted, authoritative and globally recognised security standards,” DJI wrote. “This is particularly key for enterprise or government customers requiring this specification and additional peace of mind.”

More at security.dji.com.