EU approves push to get the unknown security in ARM chips into use
Chipmaker must promise to let others join the TEE party
The European Commission has approved the creation of a new secure-element company backed by ARM, Gemalto and Giesecke & Devrient, just as long as ARM promises to keep its hardware open.
The new company will develop and sell products running software from G&D and Gemalto on the TrustZone element embedded in ARM chips, complete with management software, but the EU required promises from ARM that it wouldn't unfairly lock out competitive offerings.
"ARM will provide the necessary hardware information to competitors at the same conditions as to the joint venture to enable them to develop alternative TEE [Trusted Execution Environment] solutions. Moreover, ARM will not design its IP in a way that would degrade the performance of alternative TEE solutions."
That restriction lasts eight years, after which all bets are off.
ARM will own 40 of cent of the new venture, which builds on the growing need for better security on smartphones and other mobile devices, with Gemalto and G&D splitting the remaining 60 per cent between them. However, as the two software companies currently have different business models for their code (Gemalto licenses while G&D gives it away, making money on the servers) the model to be adopted by the new venture is a still work in progress.
TrustZone is built into ARM's chip designs, which are licensed out to processor manufacturers which have put the technology into around 90 per cent of mobile phones, though very few have the software to take advantage of it. Neither can that software easily be downloaded, as downloaded software can't be trusted, but the facility can easily be utilised in new handsets where the software can be securely preloaded.
Such apps run with the TrustZone, isolating them from the operating system and malware which could be lurking there. The process is not as secure as putting the secure element in the SIM, according to the SIM manufacturers at least, but it’s a good deal more secure than the phone's architecture.
But despite the ubiquity of TrustZone, and its ability to secure the OS, verify downloads, authenticate users and prevent man-in-the-middle attacks, almost no one is using it, which is what's promoting this new collaboration. The three companies will promote a single trusted execution environment making it much easier for banks, and other people interested in secure tokens, to create applications, and competing with the operator-owned secure element in the SIM.
NFC Times has more details, and points out that GlobalPlatform has been busy creating a standard API for communicating with an embedded secure element which could be important as phones with Intel chips inside use that company's Secure Element instead.
So soon we won't have to trust our mobile phone OS at all, we'll just have to trust the Secure Element supplier instead, which is (probably) good news for all concerned. ®
I don't see being forced to trust anyone as particularly good news.
Who's security are we talking about ?
Is it the security of: the user; the smartphone manufacturer; the telco; the government or the record labels ?
The only valid one of the above is: the user.
I somehow doubt that this is the intention.
In choices we trust ...
Oh, you are forced to trust a lot of people already, they are just so ubiquitous you don't notice. Unless you live in a box.
You probably have some trust in your ISP (all those non-https sites you use). You trust merchants you spend money with online, or at least you trust their payment provider. You also probably trust the merchant with lots of personal details. You trust websites you give your password to (if you are like most of the world and use the same password for multiple sites, tut tut).
In most of these cases you have no "choice" other than to spend your money elsewhere. I suspect most security schemes fall in much the same boat, because as soon as you give "average users" choice over security they just start clicking "yes" to get the functionality they want. i.e. choice is only useful if the user understands the choice they are making.