100 likes | 190 Views
Learn how Phoenix Technologies goes beyond TCPA platform security to secure applications with firmware. Discover Phoenix's innovations, partnerships, and FirstWare product areas. Explore the integration of StrongROM and StrongCLIENT for robust application integrity and access control.
E N D
Securing Applications With Firmware(Going Beyond TCPA Platform Security)Dr. Robert W. BaldwinBob_Baldwin@phoenix.comChief Scientist
Outline • Who is Phoenix Technologies? • What is Phoenix doing in Security? • Current & Future Partners
Phoenix Dominates PC BIOS • BIOS: Initialize & Manage PC Motherboard & Devices • Phoenix is 21 Years Old • 80% PC Market Share • > 100 Million in 2001 • Expanding to • Set Top Box • Internet Appliance • Wireless Handheld • Prior Success With • Power Management • Plug n Play • USB 100 Million PCs in 2001
Phoenix FirstWare Opportunity Motherboard Includes Protected Execution Environment Past: Power Management USB, Plug n Play Now: Firmware Smart Card for Each Application Application Integrity & Access Control RSA, AES, SHA1-HMAC World Wide Trust Infrastructure(PKI Initializes AES Smart Cards) Application Win OS StrongROM
Phoenix FirstWare Opportunity Bind Data (Cryptographic Seal & Unseal): to Specific Application on Specific Device App-Device Pair Registered with Enterprise or Merchant Checks Signature on In-Memory Application Code Viruses, Tampering, Reverse Engineering Application App Data
FirstWare Product Areas • Check the Virus Checker & OS Loader • One-Time Password Authentication • Convenient Two-Factor Challenge-Response • VPN Client, RAS Dial-Up, SSL Web Access • Protect RSA Private Key & Certificate • VPN Client Certificate, E-Mail, Purchasing Card • Software Licensing & Content DRM • Device Asset Control & Tracking
FirstWare Deployment StrongROM secured computer StrongClient secured computer New PC, Handheld, Set Top Phoenix cryptographic engine + security keys Phoenix StrongROM on motherboard Legacy & Non-Phoenix Devices Application Includes StrongClient WDM
Working With Security Partners Phoenix FirstAuthority Server Family Device Authority Service Providers Phoenix FirstWare StrongROM & StrongCLIENT ISVs & IT Developers Device Manufacturers & System OEMs Phoenix FirstAuthority Device Security Server & SDK • Chips Vendors • Motherboard & PC Makers • OS Vendors • Wireless & Handheld • Security App Vendors • Financial App Vendors • DRM Vendors • Trust Infrastructure Providers