News

Giesecke & Devrient, ARM partner for mobile security apps

February 4, 2010

ARM, which designs technology for advanced digital products such as wireless, networking and consumer-entertainment solutions, and security technology Giesecke & Devrient have partnered to develop secure mobile-phone platforms.

According to a news release from Giesecke & Devrient, the combination of ARM TrustZone technology, which creates a protected area in advanced systems-on-chip, and G&D's MobiCore operating system, sensitive applications such as e-payments and online banking via mobile phones are protected from security threats.

The two companies have announced as a first step plans to develop a joint prototype.

"We will be working with ARM to develop the security architecture for the next generation of mobile phones," said Dr. Kai Grassie, head of the new business division at G&D. "This will enable people to access highly valuable services with convenience and security."

Acceptance of mobile applications such as banking, ticketing and payment solutions rests on the security of device and background systems involved. The interplay of TrustZone and MobiCore ensures that if online services require security-sensitive functions, such as entry of a username and password or data output on a display, those functions are transferred to the MobiCore operating system running in the TrustZone protected area of an ARM application processor. As the security-sensitive functions are executed, MobiCore maintains control of the secure area of a system-on-chip.

"ARM TrustZone technology is already an integral part of the ARM Cortex-A series processors, which are currently being deployed in smartphones by many of the industry's leading handset manufacturers," said Ian Drew, executive vice president of marketing at ARM. "This collaboration with G&D will enable us to make rapid progress towards enabling secure transactions in next-generation mobile devices."

ARM also is creating a range of training and architectural service packages based around a TrustZone/MobiCore reference system, which will help reduce time-to-market for secure embedded system development. ARM plans to release its first secure system training course based around hardware-system integration and the TrustZone API next month. That launch is expected to be followed by an ARM Active Assist on-site design review service package.

ARM and G&D will present their joint concepts Feb. 15-18 in Barcelona at the Mobile World Congress.