| Linux phone stack becomes more secure |
Jul. 26, 2007
A la Mobile has added advanced security features to its embedded Linux stack for mobile phones. New security-oriented features in its Convergent Linux Platform (CLP) are said to include pre-boot OS signature checks, filesystem encryption, application sandboxing, and secure OTA (over-the-air) firmware upgrade capabilities.
The new security features, dubbed "Mobile Security Engine" (MSE), are said to operate "at the most fundamental layer," and the company claims to have a "pending patent focused on the location of the security technology -- at the bootloader and kernel levels."
Convergent Linux Platform architecture
According to a la Mobile, MSE comprises:- Pre-boot security checks to verify OS integrity; works with OTA firmware updates
- Filesystem encryption, with encryption keys stored in CMOS on the processor
- All applications in CLP stack are signed; unsigned applications can be run, but are sandboxed so they can not gain access to the telephony interface, filesystem, addressbook, and so on
Claimed benefits include protection from malware, malicious attacks, and unauthorized access.
Asked how pre-boot security and filesystem encryption could protect data, given that most phones are lost or stolen in a pre-booted state, a la Mobile explained, "A component of the Mobile Security Engine (MSE) allows for the handset vendor, or the enterprise customer, or the consumer to elect to 'lock' any files/items (e.g., contact list, corporate database, etc.). To unlock and gain access to the functionality and data, the user must enter a PIN/Password."
Eight million phones will be lost this year, including 700,000 smartphones, according to research from In-Stat, as cited by a la Mobile. "Smart phones are a corporate data security breach waiting to happen and make headlines," an unnamed In-Stat analyst reportedly wrote.
In a statement, CEO Pauline Lo Alker said, "Increased use of data-rich applications leaves mobile devices more vulnerable to a variety of security threats."
The new MSE features are "built in" to CLP, rather than available as a separate option, the company said.
Availability
A la Mobile's Convergent Linux Platform with Mobile Security Engine is available now for various XScale-based mobile phone application processors. Touted as the industry's only "complete" stack, it is said to include "all device drivers, Linux kernel and middleware, a browser, Java, Adobe Flash, and a core suite of applications such as messaging, push-mail, VoIP, firmware over-the-air update, and streaming multimedia."
Related Stories:
(Click here for further information)
|
|
|
FUEL Database on MontaVista Linux
Whether building a mobile handset, a car navigation system, a package tracking device, or a home entertainment console, developers need capable software systems, including an operating system, development tools, and supporting libraries, to gain maximum benefit from their hardware platform and to meet aggressive time-to-market goals.
Breaking New Ground: The Evolution of Linux Clustering
With a platform comprising a complete Linux distribution, enhanced for clustering, and tailored for HPC, Penguin Computing¿s Scyld Software provides the building blocks for organizations from enterprises to workgroups to deploy, manage, and maintain Linux clusters, regardless of their size.
Data Monitoring with NightStar LX
Unlike ordinary debuggers, NightStar LX doesn¿t leave you stranded in the dark. It¿s more than just a debugger, it¿s a whole suite of integrated diagnostic tools designed for time-critical Linux applications to reduce test time, increase productivity and lower costs. You can debug, monitor, analyze and tune with minimal intrusion, so you see real execution behavior. And that¿s positively illuminating.
Virtualizing Service Provider Networks with Vyatta
This paper highlights Vyatta's unique ability to virtualize networking functions using Vyatta's secure routing software in service provider environments.
High Availability Messaging Solution Using AXIGEN, Heartbeat and DRBD
This white paper discusses a high-availability messaging solution relying on the AXIGEN Mail Server, Heartbeat and DRBD. Solution architecture and implementation, as well as benefits of using AXIGEN for this setup are all presented in detail.
Understanding the Financial Benefits of Open Source
Will open source pay off? Open source is becoming standard within enterprises, often because of cost savings. Find out how much of a financial impact it can have on your organization. Get this methodology and calculator now, compliments of JBoss.
Embedded Hardware and OS Technology Empower PC-Based Platforms
The modern embedded computer is the jack of all trades appearing in many forms.
Data Management for Real-Time Distributed Systems
This paper provides an overview of the network-centric computing model, data distribution services, and distributed data management. It then describes how the SkyBoard integration and synchronization service, coupled with an implementation of the OMG¿s Data Distribution Service (DDS) standard, can be used to create an efficient data distribution, storage, and retrieval system.
7 Advantages of D2D Backup
For decades, tape has been the backup medium of choice. But, now, disk-to-disk (D2D) backup is gaining in favor. Learn why you should make the move in this whitepaper.
|
|
|
|
|
news feed