Feeds

Unrootable: Mash these bits together to get a CLASSIFIED spyphone

Someone kind of already has - but who?

Security for virtualized datacentres

Sysadmin blog What does it take to build a classified smartphone? Demand clearly exists Given how readily every iPhone and Android device is rooted, infected, and otherwise compromised, the answer isn't simply "better software." In the battle to secure our mobile endpoints, operating system tricks and mobile device management will only take us so far.

To build a powerful, capable smartphone that can be trusted with classified documents, but used by personnel in the field takes the perfect marriage of hardware, software and expertise. To start with, we obviously need sealed storage – nothing on or off that device unless both the hardware and the software agree that this is allowed. Memory curtaining is also vital; technologies like Intel's TXT enable segmentation of system memory such that not even the OS can see all of it.

Signed everything will be part of our classified smartphones – the bootloader, the OS, every single app, patch, and the communications. In some cases, you can let local hardware like Intel's Trusted Platform Module handle verification of signatures for items like the bootloader. In others you need to use hardware and software to do remote attestation: verifying a package (or communication) is allowed against a centrally controlled authority.

This classified smartphone needs to be able to encrypt not only every bit of data on the device, but every bit of data shuffled off of it. It may even need to secure every screen displayed. Storage encryption is old hat. Secure communications is harder, but doable. Encrypting display output, meanwhile, is even trickier – we're probably headed into the realm of wearable communications there, with headsets that verify the iris prints of the user. We've been a while getting there, but these technologies are now all doable in the real world, not just the lab.

On the software side, a classified smartphone can't rely on post-event detection. It needs to prevent data compromise before it happens. Packets or phone calls can't go "anywhere by default". They go to whitelisted destinations only, or get forwarded through a centralised IDS with the knobs turned to 11. The phone should have heuristic software looking for deviations from expected operation. In a "classified smartphone", the hardware and software are not only known, they're signed.

This is Trusted Computing Group's Trusted Computing (TC) taken to its logical conclusion. The main complaints about TC to date have been the lack of control the end user has over their device combined with privacy and even ethical concerns regarding the creation and adoption of such technologies. Classified systems users are not expected to have control over their systems nor are their interactions with said classified systems expected to contain any form of privacy whatsoever.

This is what the acquisition of McAfee by Intel was all about. This is why Intel feels there is a market for Medfield-descendant phones, despite them offering nothing obvious beyond compatibility issues to those who adopt them. This is part of the reason Intel keeps its fingers in Tizen, and why it tried repeatedly at all those predecessors.

Let's not forget Wind River, either. It might seem reaching to drag that acquisition into my prognosticating, but the talent and expertise within Wind River would certainly lend itself nicely to a classified Smartphone project.

Intel has a combination of talent and the technologies that nobody else on Earth can match. Sources within Intel tell me the firm is preparing to broach the "classified smartphone" topic in a big way; paving the road for porting its significant investment in TC technologies into the mobile sphere. If this is true - and I suspect we'll know very soon - Intel will become one of the biggest players in mobile overnight. Classified smartphones, tablets and even Ultrabooks would be the only viable choice for billions of units shipped each year into government, military and high-security corporate markets.

Intel's mobile strategy has seemed chaotic (at best) for years. It seems now that they were merely biding their time and they are ready to make their play.

Mobile is just the beginning. Systems like this could power a new generation of "smart radios;" extended functionality radios for the military, emergency services or civilian uses. They could power unmanned aerial vehicles, your self-driving car or your high-end eco-friendly smart-meter-enabled home appliances. So what does it take to make a classified smartphone? The first ingredient is Intel Inside. ®

New hybrid storage solutions

More from The Register

next story
Apple iPhone 6: Missing sapphire glass screen FAIL explained
They just cannae do it in time, says analyst
Half a BILLION in the making: Bungie's Destiny reviewed
It feels very familiar - but it's still good
Oh noes, fanbois! iPhone 6 Plus shipments 'DELAYED' in the UK
Is EMBIGGENED Apple mobile REALLY that popular?
Apple's big bang: iPhone 6, ANOTHER iPhone 6 Plus and WATCH OUT
Let's >sigh< see what Cupertino has been up to for the past year
Huawei ditches new Windows Phone mobe plans, blames poor sales
Giganto mobe firm slams door shut on Microsoft. OH DEAR
Phones 4u website DIES as wounded mobe retailer struggles to stay above water
Founder blames 'ruthless network partners' for implosion
Apple's SNEAKY plan: COPY ANDROID. Hello iPhone 6, Watch
Sizes, prices and all – but not for the wrist-o-puter
Get your Indian Landfill Android One handsets - they're only SIXTY QUID
Cheap and deafening mobes for the subcontinental masses
prev story

Whitepapers

Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.
Top 5 reasons to deploy VMware with Tegile
Data demand and the rise of virtualization is challenging IT teams to deliver storage performance, scalability and capacity that can keep up, while maximizing efficiency.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
Secure remote control for conventional and virtual desktops
Balancing user privacy and privileged access, in accordance with compliance frameworks and legislation. Evaluating any potential remote control choice.