Intelligent Controllers

DESI Controller

Replaces the end-of-line resistor and gives every analog sensor a cryptographic identity.

The Digital Encrypted Security Interface is a miniaturized computational element inches from the sensor or control device. It replaces end-of-line resistor loops and unprotected relay controls with a FIPS-compliant cryptographic identity, so data is authenticated at the far edge.

DESI Controller
Category
Intelligent Controllers
Certifications
UL 294 · UL 2610
Configurations
3 variants

Trust where none existed

DESI installs in the sensor or at the output device, replacing vulnerable end-of-line resistors with challenge-response authentication of every input before acceptance and every output before command execution. Tamper, side-band attacks and loss of control voltage are reported as alerts.

Over the wiring already installed

Multiple DESI devices run over a single pair of wires, so a door’s request to exit, lock control, door position and tampers travel one pair to the panel, cutting cabling by over half. Existing sensors, locks, readers and building controls keep working, with no special wiring or retrofit.

Genuine from the factory

Each DESI carries a globally unique identifier and a write-once OEM data page, so sensors and electro-mechanical devices can be verified as genuine products of their manufacturer. Private keys are generated on the device and never exposed, with four root rekey events over its life.

  • Replaces end-of-line resistors with authenticated inputs and outputs
  • FIPS-compliant PKI; private keys generated and held on the device
  • Up to 64 DESI per gateway or EM-16 over existing wiring
  • Tamper, side-band attack and power loss detection with alerts
  • Write-once OEM data page for supply chain authenticity

desi-controller-overview

Specifications

Specifications for the three stocked DESI variants. Download the data sheet for the complete document.

Parameter DESI-INDESI-RDESI-S
Function
Type Dual input edge device for monitoring sensorsSingle Form C relay output, N.O. and N.C.Single Form A solid state relay output, N.O.
Rating Dry contact, programmable rising or falling edge latchSPDT, 120 VAC or 28 VDC at 12 ASPST, 30 VDC at 2 A
Power monitoring Not applicableRemote power monitoring, alert on lossRemote power monitoring, alert on loss
Cryptography
Standards FIPS-186 ECDSA P256, FIPS-198 HMAC, NIST SP 800-90B, SHA-256 OTP, ECC-P256SameSame
Key generation On device, never exposed, or externally inputSameSame
Rekeying 4 root chain of trust rekeys; unlimited session rekeyingSameSame
Tamper Monitoring and alerts, active die shield, encrypted key storageSameSame
Physical
Form factor 19.6 x 10.7 mm; shielded variant available44 x 20 mm28 x 16 mm
Connection 6 in AWG 18 flying leads; braided shield drain on shielded6 in AWG 18 flying leads6 in AWG 18 flying leads
Mounting Co-located with the sensing elementCo-located with the deviceCo-located with the device
Environmental -40 to 85°C-40 to 85°C-40 to 85°C
Deployment
Per panel Up to 64 on a UFP-GW or EM-16, 32 on an EM-8, any mixSameSame
Per channel 4 typical; more by applicationSameSame
Compliance
Safety UL294, UL2610, UL62638-2, RoHSSameSame
Supply chain Made in the USA, NDAA, TAA, BAA; globally unique identifierSameSame

Videos

Walkthroughs and demonstrations for this product.

  • DESI Controller video 1

  • DESI Controller video 2

Downloads

Data sheet, brochure and specification documents for this product.

A&E resources · 3 available

Specification-ready files for this product. Download what you need without leaving the page.

Category What it contains File types Action
Guide Specification CSI MasterFormat Section 28 14 13 for DESI-IN, DESI-R and DESI-S, three-part format, in one ZIP. ZIPDOCX Download Guide Specification
Design Guide Zero Trust Architecture Design Guide, for any project using PSG. PDF Download Design Guide
Submittal Package Data sheet, guide specification and certificates in one download, with index. ZIP Download Submittal Package

Where it sits

DESI sits in Acquisition and Control, inches from the sensor or lock. It is where trust begins: the identity it supplies is what every layer above verifies.

Explore the full architecture
  1. Enterprise Consumers Purdue 4 to 5
  2. IT and OT Operations Purdue 2 to 3
  3. Acquisition and ControlDESI Controller Purdue 1
  4. OT Edge Purdue 0

Questions about the DESI Controller?

Tell us what you are protecting and what is installed. Visit with a PSG systems engineer about configuration options and how it connects to your existing systems.