Open Call 2 Winners

CERTIoT-6G

Cyber-Resilience Certification and Security-as-a-Service for IoT in 5G/6G Networks

Security- and privacy-focused use cases for data protection and trusted communications

The rapid growth of always-connected Internet of Things (IoT) devices in healthcare and smart city environments creates major security, privacy, and regulatory challenges. Under the upcoming EU Cyber Resilience Act (CRA), manufacturers and operators must ensure security- and privacy-by-design, effective vulnerability management, and continuous compliance. However, traditional certification approaches remain manual, slow, and costly, limiting scalability and leaving critical infrastructures exposed.

CERTIoT-6G addresses this challenge by combining Mulini’s CertifIoT AI-powered compliance framework with the advanced 5G/6G capabilities of the KAU testbed at Karlstad University, part of the 6G-PATH infrastructure. The project introduces a Security-as-a-Service (SECaaS) model for automated certification and continuous monitoring of IoT devices operating in mobile networks.

The KAU testbed provides 5G SA/NSA coverage, low-latency local breakout, Kubernetes-based orchestration, network slicing, Quality-on-Demand APIs, and advanced monitoring tools.

Within this environment, CERTIoT-6G will:

Automate device certification through real-time traffic analysis, mapping CRA requirements to observable network behaviors.
Simulate adversarial scenarios (e.g., latency manipulation, unauthorized access, service degradation) to validate resilience and privacy in healthcare and smart city IoT applications.
Extend AI-driven regulatory probing tools—currently applied to Wi-Fi-connected devices—to devices connected to 5G/6G mobile networks, detecting anomalies and policy violations.
Deliver live compliance dashboards and trust scores, generating verifiable reports for enterprises, regulators, and certification bodies.

The Mulini testbed will complement KAU by supporting adversarial testing, edge orchestration, and real-world validation campaigns with partners such as the Italian National Cybersecurity Agency (ACN) and RIPE. The project aims to progress from TRL 5–6 to TRL 7.

CERTIoT-6G will establish a scalable model for automatic IoT certification and continuous compliance in 5G/6G ecosystems, strengthening Europe’s digital resilience and enabling trustworthy connected devices.