Security of Mobile Terminal & Cell Phone

1. Security of Mobile Terminal & Cell Phone Cell Phone Environment & Virus in Japan McAfee Japan Yoshihiro Kato

2. AGENDA • Cell Phone in Japan Now • Transition of Internet Population in Japan • Cell Phone Function & Service in Japan • Approach to Cell Phone Security • Virus Possibility in Cell Phone • Engineering Issues • Required Functions • Cell Phone Structure & Service Overview • Cell Phone Security in Future

3. Cell Phone in Japan Now Cell Phone Subscriptions in Japan (as of 30/Sep/04) WW Cell Phone Shipment FCST (2004) Total 83,834 (unit: 1,000) Total 479,400 (unit: 1,000) 3G Terminal: 24938 Data Source: Japan Electronics and Information Technology Industries Association (JEITA) Data Source: Telecommunications Carriers Association (TCA) ・Gartner FCST: 620M (Sep.2004)

4. Cell Phone in Japan Now Categorized by Messaging Method Total Number 83,467,800 (as of 31/Aug/04) 19% 7% 3% 71% Data Source: Telecommunications Carriers Association (TCA)

5. Cell Phone in Japan Now Contractors by Carrier Total83,467,800 （as of 31/Aug/04） 4% 19% 56% 22% Data Source: Telecommunications Carriers Association (TCA)

6. Transition of Internet Population in Japan Data Source: Telecommunications Carriers Association (TCA)

7. Transition of Internet Population in Japan Web Access Service • Using Compact HTML Mail Service • Mailing inside the carrier (e.g. Skｙmail) • Internet Mail Contents Service • Various Contents Service: Game, MusicDownload Communication Service • TV Telephone Media Access Service • TV, Radio

8. Transition of Internet Population in Japan(2) --- Example: NTTDoCoMo Services --- Cell Phone as Purse (FeliCa) • Shopping, Air-ticket, Cinema, Concert Bar-code Reading • URL, Telephone No.

9. Approach to Cell Phone Security February 2001 • Start Studying the Possibility based on the Original Idea Collaborate with Fujitsu BROAD SOLUTION & CONSULTING Inc April 2001 • Information Exchange with UK Engineering Team Difference from Smart Phone Since May 2001 • Start Approaching to the Carriers October 2003 • Joint Announcement with NTTDoCoMo

10. Virus Possibility in Cell Phone Java Implement • Application Download function API false movement Expand App space and Data space • Image Data , Sound data Additional communication device • Memory-stick, miniSD SPAM mail Other Communication method • Bluetooth

11. Engineering Issues Operating System • Most makers adopts their original OS and they are closed. • Symbian (NOKIA, MOTOROLA, Sony Ericsson: Europe & North America • Linux (NEC …) Developing Compact Engine Supposing the Functions to Implement Supposing the Necessary System for Operation

12. Other Issues Cooperation between Cell Phone Maker & Carrier Secure Engineers • Micro i TRON Engineer

13. Required Functions Interrupt of All I/O • Necessity of operation environment at lower layer Renewal Function of Defined Information On-demand Operation

14. Cell Phone Structure & Service Overview Flash ROM Code Area Data Area Internet App App App API Java VM Communication Storage Driver (Sound Flash-Mem) Operating System Micro I TRON

15. DAT Cell Phone Structure & Service Overview Data center ASP System phone Maker McAfee AVERT Carrier Technical Information Customer D/B Unjust Mail,Java etc. Inter-net Carrier Phone Network Unjust　Access　

16. Cell Phone Security in Future Offer Various Services • Ticket Reservation, GPS Multi Functional Mobile Terminal (PC?) • Multi-CPU, Large-Memory Expand to Other Devices such as Automobile Connect to IPｖ６ Network (P2P Data Communication)

17. Cell Phone Security in Future Contents Access Control • Block Harmful Sites Identify Every Individual (User) • Identify by Fingerprint or Code Prevent Unjust code invasion / operation

18. Mobile Virus – Concept Virus Symbian/Cabir (Jun/04) WinCE/Duts (Jul/04) First Mobile Virus in the world Attach the body to the message via Bluetooth Infected by opening the attached file Infect to the specific series of NOKIA only First WinCE virus in the world Copy itself to the opened file Infected by opening the infected file Infect to the recent CE PDA

19. Thank you!