Daily Tech: ARM to Bake On-Die Security Into Next Gen Smartphone, Tablet, PC Cores

[cbn]

http://www.dailytech.com/article.aspx?newsid=24372

Hardware-enabled security will fight traditional Windows malware, growing mobile malware epidemic

Many were surprised when Intel Corp. (INTC), the world's largest chipmaker, scooped up veteran security firm McAfee in August 2010. While the fit of hardware company plus software vendor seemed an odd equation, it began to make sense when put in the context of growing interest in hardware-based security solutions.

Even as Intel has moved to put some of those designs on-die with technologies like Trusted Execution, one of the chipmaker's top rivals -- architecture and intellectual property (IP) core licenser ARM Holdings plc (LON:ARM) -- has announced a brand new hardware security initiative of its own.

ARM already has baked a Trusted Execution Environment (TEE) solution dubbed "ARM TrustZone" into every one of its ARM Cortex A-Series cores, such as those found in Apple, Inc.'s (AAPL) iPhone or the Samsung Electronics Comp., Ltd. (KS:005930) Galaxy Nexus. The key now is to enable the hardware capabilities with supported software and operating system solutions.

To that end ARM is pairing with Giesecke & Devrient, makers of a custom heavily sandboxed, remotely manageable TEE operating system dubbed "Mobicore". As an alternative to iOS or Android, companies could flash employee handsets with Mobicore, which is now being accelerated and enabled directly by hardware, thanks to the new partnership.

ARM has also paired with Gemalto NV (EPA:GTO), another security-oriented service provider. Gemalto will aim to enable secure transactions for "traditional" mobile operating systems, such as Android. Using the TEE hardware, Gemalto can deliver encrypted key validated movie or TV show rentals to a smartphone, tablet, or ARM laptop.

By fighting mobile malware and making it easier to establish secure wireless data connections, ARM's new security muscle is helping make its smartphones and tablets safer for IT businesses. It will also open new capabilities for ARM as it races to challenge Intel in the personal computer space later this year.

ARM describes the new effort writing:

Devices with a TEE will provide consumers with more secure, user-friendly experiences that simplify and speed up how they interact with their digital world. This will enable them to use their smart, connected devices more frequently to access an increasing range of applications and services in a secure way. This includes mobile payment, enterprise productivity and mobile banking applications, as well as online commerce and premium content services.

Warren East, CEO of ARM stated, "The integration of the hardware, software and services necessary for system-wide security has been slow. I am confident that this new joint venture will accelerate the adoption of a common security standard, enabling a vibrant ecosystem of secure service providers to emerge. This will be of significant step in terms of improved consumer trust in secure transactions on connected devices."

The three companies (Gi-De, Gemalto, and ARM Holdings) will operate a joint venture together, to develop new kinds of ARM core security solutions.

The link to the MobiCore website:

http://www.gi-de.com/en/trends_and_insights/mobicore/mobicore_1/mobicore.jsp

Protecting mobile devices with open operating systems

There are now apps – small application programs for smartphones - for almost everything. Yet as the mobile data traffic and downloading of third-party applications grows, the risk of criminal manipulation also increases. Manufacturers and operators on the mobile network market are not the only people to be closely following the issue of security for mobile data transactions; in companies and public organizations where employees are using the new mobile devices to exchange sensitive data more and more frequently, concerns are also mounting. Experts are calling for new kinds of security features for modern smartphones to deal with money and business transactions.

Mobile but secure

To meet this demand, the technology group G&D, together with chip specialist ARM, has developed a mass-market security platform for mobile devices. Its key advantage is that security-sensitive applications, such as mobile banking, receive optimum protection by being strictly isolated from the other functions, without the open device structure of the smartphones having to be changed.

In the future, smartphones will provide two data worlds, working in parallel: On the one hand, the conventional operating system with the corresponding hardware environment, in which the functions and apps can operate as they did before; on the other hand, a fully isolated secure area in which G&D’s new, high-security operating system MobiCore processes security-sensitive applications.

Mobile banking in a protected space

The login to a security-critical online service is conducted without any interaction with the conventional operating system. Any malware which is already on the device therefore has no opportunity to tap into or manipulate the data. The MobiCore operating system controls the whole processing chain, from keypad functions through online connection to display on the screen. Once the security-critical logon procedure is finished, the application independently switches back to normal mode.

Potential for new mobile services

For developers of future generations of devices, the MobiCore environment offers a complete, certifiable security solution which is suitable for smartphones, netbooks, web-enabled TV devices, or navigation systems. Authentication routines and monitored data transactions can be integrated seamlessly into diverse online services and applications on the new platform. With this platform, G&D and ARM are meeting the decisive condition that will make security-critical services such as mobile banking attractive to a mass market.

Really Interesting stuff.....and definitely very important in this day and age!

It just makes me wonder if Intel will launch its own sandboxed Operating system?

 

[SunnyD]

Really Interesting stuff.....and definitely very important in this day and age!

It just makes me wonder if Intel will launch its own sandboxed Operating system?

If by "interesting" you mean "disheartening" and by "stuff" you mean "forced DRM solutions" leaving you, the consumer, with less access to the hardware and software you paid for, then yeah, you're pretty much right on the nose.

This technology will be utilized most essentially by DRM solutions. Exactly something I, as a consumer, DON'T want.

 

[VirtualLarry]

If by "interesting" you mean "disheartening" and by "stuff" you mean "forced DRM solutions" leaving you, the consumer, with less access to the hardware and software you paid for, then yeah, you're pretty much right on the nose.

This technology will be utilized most essentially by DRM solutions. Exactly something I, as a consumer, DON'T want.

Exactly! This "trusted" stuff is pure crap. If you don't hold the keys, then you don't own it.

 

[StrangerGuy]

Ha, if you think this going to protect you and not the likes of RIAA/MPAA.

 

[grimpr]

This aint nothing compared to the grand declaration of war against Intel that happened last week.

http://www.pcworld.com/article/252955/qualcomms_quadcore_chips_to_counter_intels_ultrabooks.html

 

[Arachnotronic]

This aint nothing compared to the grand declaration of war against Intel that happened last week.

http://www.pcworld.com/article/252955/qualcomms_quadcore_chips_to_counter_intels_ultrabooks.html

Yeah, that's going to succeed. "Quad core" ARM-anything isn't going to be anywhere NEAR as fast as *-Bridge dual core.

 

[grimpr]

Yeah, that's going to succeed. "Quad core" ARM-anything isn't going to be anywhere NEAR as fast as *-Bridge dual core.

Sure, but for Windows 8 ultrathins and tablets it doesnt matter, mobile computing and web/cloud apps makes processing power largely irrelevant and Qualcomms ARM cores will have a major advantage, very cheap price.

Heres a new model, rent a PC on your tablet!

http://desktop.onlive.com/

 

[Cerb]

Yeah, that's going to succeed. "Quad core" ARM-anything isn't going to be anywhere NEAR as fast as *-Bridge dual core.

Way better than Atom, though, possibly better than Bobcat, provided video drivers don't suck. I would expect K8 to Core 2 speeds within this next generation or two or ARM CPUs/SoCs. But that's what, 10-20% of the battle, maybe?

However, they need to work on selling them away from us. Developing nations might give them a fair chance. In the US, and much of Europe, we want x86 for anything general-purpose.

Exactly! This "trusted" stuff is pure crap. If you don't hold the keys, then you don't own it.

You are not supposed to own anything, even the hardware itself. You are supposed to consume it, at the whims of the publishers.

 

[VirtualLarry]

You are not supposed to own anything, even the hardware itself. You are supposed to consume it, at the whims of the publishers.

This is the unfortunate truth. I called it "Technological Feudalism". Where the rights of private property ownership no longer exist, for technology. Everything is "owned" and controlled by a few centralized, powerful, corporations. Us serfs are only allowed to "work the land".

Thank God for Linux, and still somewhat open hardware platforms.

 

[taltamir]

Exactly! This "trusted" stuff is pure crap. If you don't hold the keys, then you don't own it.

To understand what trusted computing means:
1. The term is borrowed from the CIA, a "trusted" machine is one that you compromised & control rather then the actual owner / user.
2. A trusted device is one that can be trusted to NOT do what its "owner" tells it, rather it follows commands from an external source (via internet tethering) and is encrypted against user tampering.
3. Trusted devices mean no more open source software of any kind.