SDA India is an online resource for Software, Development,IT, Architecture, Open Source, Mobile, Security, Databases, Delphi, C, OS, Asp, .Net, Php, Xml, Java
From the News Desk
Thursday, 31. August 2006
New Mobile Security Specification to Lock down Mobile Phones
A new set of security standards designed to lock down mobile is set to be unveiled at the CTIA Wireless I.T. & Entertainment show being held in Los Angeles next month. Called the Mobile Security Specification, it is billed as the basis for a new generation of secure phones and mobile devices that will be harder to tamper with and more secure. Companies such as Nokia, Samsung Electronics, and France Telecom are backing the new standards.
The specification has been years in development, said Janne Uusilehto, head of Nokia product security and the chairman of the working group developing this technology.
How it Works
In general terms, the specification calls on hardware vendors to store protected information in a secure area of the phones called the Mobile Terminal Module (MTM). Similar to the Trusted Platform Module used in PCs, the MTM could be used to ensure that the phone's operating system, applications and data have not been tampered with.
In order to ensure that the phones on their network can’t be used if they are stolen , network operators could also use this type of trusted module, said Mark Redman, a principal engineer with Freescale Semiconductor Inc. who is familiar with the specification. "That is probably one of the biggest concerns that the cell phone operators have at this stage," he said.
Though some companies may be early adopters of the Mobile Security Specification, it could take years before mobile phone users reap any benefits, said Roger Kay, an analyst with Endpoint Technologies Associates who serves as on the TCG's advisory council. "What typically will happen is that there may be some early adopters who start adhering to the specification before it's fully accepted," he said, adding that "just because [the Trusted Computing Group standard] promulgates, it doesn't mean that it's going to be adopted."
Even after years of development, there is still debate about whether trusted modules are the right approach for the PC industry, he said. "The most interesting, most advanced features are going to take years, because everybody has to agree to adhere to the new standard."
The specification has been years in development, said Janne Uusilehto, head of Nokia product security and the chairman of the working group developing this technology.
How it Works
In general terms, the specification calls on hardware vendors to store protected information in a secure area of the phones called the Mobile Terminal Module (MTM). Similar to the Trusted Platform Module used in PCs, the MTM could be used to ensure that the phone's operating system, applications and data have not been tampered with.
In order to ensure that the phones on their network can’t be used if they are stolen , network operators could also use this type of trusted module, said Mark Redman, a principal engineer with Freescale Semiconductor Inc. who is familiar with the specification. "That is probably one of the biggest concerns that the cell phone operators have at this stage," he said.
Though some companies may be early adopters of the Mobile Security Specification, it could take years before mobile phone users reap any benefits, said Roger Kay, an analyst with Endpoint Technologies Associates who serves as on the TCG's advisory council. "What typically will happen is that there may be some early adopters who start adhering to the specification before it's fully accepted," he said, adding that "just because [the Trusted Computing Group standard] promulgates, it doesn't mean that it's going to be adopted."
Even after years of development, there is still debate about whether trusted modules are the right approach for the PC industry, he said. "The most interesting, most advanced features are going to take years, because everybody has to agree to adhere to the new standard."
