Register for free to join our community of investors and share your ideas. You will also get access to streaming quotes, interactive charts, trades, portfolio, live options flow and more tools.
Register for free to join our community of investors and share your ideas. You will also get access to streaming quotes, interactive charts, trades, portfolio, live options flow and more tools.
Doma
I believe that the first opportunity for Embassy 2100 chip will be as a secure input function...SCR or SCR-embedded keyboard.
I believe licensing of Embassy OS would be fantastic for Wave's name, and I agree that revenue might be limited to small per chip fee (could be quite atrractive with large volume) as you may be correct that application developers will balk at the prospect of paying Wave a fee to register with Wave's Embassy TAN...on the other hand could such a fee be passed along to the user for Wave's TAN management? I would expect the end user to pay for TAN management.
For sure, immediate-term revenue growth will be from Wave's Premium Services and Attestation Server licenses.
Doma
Maybe Intel will eventually put our TPM on the motherboard! LOL!
http://www.wave.com/about/datasheets/03-000138_TPM.pdf
I know Embassy 2100 is too big for the MB in it's current form, is a few bucks too much until TC gains traction, and is too functional until TC gains traction.
Seriously I do find it interesting that Wave actually presents Embassy as a "TPM". The presentation is very unspecific, but there must be a message there.
awk
You write:
"LaGrande clearly provides the hardware for Microsoft's upcoming "Longhorn" secure operating system. While 2100 will never be on the motherboard it is probably not far fetched to assume that some kind of Embassy OS will be integrated into LaGrande."
Here is Wave's current datasheet on the "Embassy TPM":
http://www.wave.com/about/datasheets/03-000138_TPM.pdf
Illustrated on the datasheet on a daughterboard? Too large for the motherboard?
Datasheet does not say Embassy TPM is the 2100 chip, but I assume it is.
doma/awk...thanks. I thought I saw TPMs on daughterboards.
awk
You write:
"LaGrande clearly provides the hardware for Microsoft's upcoming "Longhorn" secure operating system. While 2100 will never be on the motherboard it is probably not far fetched to assume that some kind of Embassy OS will be integrated into LaGrande."
TPM resides on a daughterboard right? I think for a long time we thought the TPM was on a motherboard slot.
So what would be the advantage of putting a security co-processor into the TPM to operate in the TCG Software Stack environment?
TIA
Thanks doma/rachelelise/barge for responding to my post. I have been offline for several days and was unable to respond sooner.
Doma
I remain unclear on how the TCG Software Stack is the equal to an Embassy security co-processor...perhaps the interoperability provided by the TSS will be equal to that provided by the Embassy OS. I do like awk's angle that the Embassy OS is likely to find a place in the keyboard in secure input role, and will thus interface with a TPM platform.
Doma
Re: TCG charging app developers fees to run applets:
I don't see that the TCG charges fees for anything except memberships/subscriptions to TCG. The TCG is essentially a standards group that is also promoting TC. It should be up to service providers to charge applet fees for managing applets.
Don't you think programmability in TPMs is inevitable? How can this be accomplished by sidestepping Embassy IP? Perhaps there is a way, but how and by whom?
I would hope that adoption of the Embassy OS in TPMs will strengthen Wave's TAN management role by fostering the interoperability of trusted apps between trusted domains. Besides strenghtening Wave's TAN role and name the licensing of the Embassy OS would provide some residual licensing revenue?
All thoughts appreciated.
Regards,
R2
Does this mean a keyboard?
"These included addressing hacker tactics such as keystroke detectors and memory dumps."
http://www.cbronline.com/cbrnews/cb8e827354883c7c80256da40018cb77
While Otellini was vague on when mutlicore computing would hit the desktop, he did set some milestones for the roll out of LaGrande, the vendor's hardware-based security technology. Otellini ran a demonstration of the technology, highlighting ways in which it should enhance security. These included addressing hacker tactics such as keystroke detectors and memory dumps. He said Intel was working with a number of partners on the technology, Microsoft key amongst them, and expected to bring it to market in the next two to three years.
Having security software built into the CPU has raised privacy concerns, and Otellini sought to defuse these. He said customers would be able to buy systems with the technology disabled, and would have the choice to opt in and opt out of LeGrande.
Otellini also unveiled a new technology dubbed Vanderpool, which the company said will allow PCs to operate like mainframes. Vanderpool will allow multiple operating systems to be run on a single PC. Intel said this virtualization-like technology will increase the robustness of PCs, as well as offering increased security. Vanderpool looks like it will be running behind LeGrande, with Otellini saying the technology will appear in the next five years.
Right scorpio. Good to have Sun aboard. Isn't Sun an old Wave ally?
Regards,
R2
dabears, thanks for your post w/links. e/
Wildman P.S.
I am sure you already know, but for clarification to other interested readers, Wave's Attestation Credential Manager (ACM) and Key Transfer Manager (KTM) are distinguished from the first three servives in the Embassy Trust Suite in that they are server-side applications (Wave has the servers and server technology, including the attestation server) as opposed to client-side applications.
The first three members (client-side services) of the eTS portfolio :
http://www.ceocast.com/company.cfm?cid=314&n=015300
Document Manager Vault – Used for document encryption, decryption and client-side storage for important corporate documents. Documents are securely stored and easily accessible to the authorized user. The easy-to-use vault, utilizing a Microsoft Office interface, protects against unauthorized access from network snoopers and hackers.
Private Information Manager – Uses the TPM to securely and efficiently store user information, such as user names, passwords and other personal information. The PIM intelligently retrieves login information for logging in to web sites.
Smart Signature – This digital signature and document storage capability includes signing keys generated by the TPM. Smart Signature is an Adobe Acrobat plug-in solution that is ideal for contracts or any other customized document or form requiring signature. Included is a platform registration capability for storing and recovering trusted platform registration information.
Wildman
The debut of Wave's Premium Services to feature:
http://www.ceocast.com/company.cfm?cid=314
Attestation Credential Manager – The ACM provides capabilities for any application to ensure that it is transacting with a trusted platform. It issues TPM identity credentials and certified credentials to provide attestation to a third party that a platform is trusted, and revocation checking ensures that the credentials are valid.
Key Transfer Manager – This capability provides backup and restore, migration and maintenance options to the TPM environment. The Key Transfer Manager addresses application data backup for events such as hard drive failures and accidental deletion.
What are some of the first applications that we will see enterprise sharing across their TPM platforms?...e-mail, document sharing, digital signings etc.? Whatever applications, Wave's ACM will provide the necessary identity credentials capabilities. How much more fundamental can it get!
Wave's KTM, another fundamental utility, will provide backup and recovery services for TPMs.
It will be most intertesting to see other of Wave's services as they are unveiled.
We will be ready for TPM 1.2/NGSCB/LaGrande!
Cheers,
R2
barge, thanks for the great eetimesUk find (and thanks vacationhouse), which turned out to be highly germane to our current discussion!
I neglected to mention in my comments about TPMs and LaGrande/Longhorn, that LaGrande/Longhorn will help drive the secure/trusted computing iniative. Clearly this is the case, but I do think we will see some promising initial deployment with the 1.1 version TPMs...of course the TCG is counting on that.
The eetimesUK article suggests that huge deployment will not happen until 1.2 TPM, which is likely true but I think Wave can still get some pretty decent business out of the 1.1s.
Regards,
R2
thanks bowWave. e/
svenm, your e-mail to SKS ring a bell. I agree that the industry needs to be educated by Wave which in now happening. If Embassy does become licensed by TCG TPM vendors that would assure Wave's role as the TAN provider. I remain unclear how Versign would feel about that. I know Verisign is not a TAN provider, but their role as a digital certificate provider in an Embassy world would have to be assured or they would not be very happy.
Regards,
R2
alea
Wave's Premium Services need LaGrande (and Longhorn) to become useful?
Not as I understand the situation.
If TPMs are widely adopted in advance of Lagrande/NGSCB deployment then TC moves in advance of LaGrande/NGSCB. If TPMs are poorly received in advance of a more secure Windows OS (enabled by LaGrande) then TC will be delayed, and that will not be good...I do not think that will happen.
One has to be encouraged by the fairly wide deployment of early IBM TPMs.
I repeat:
LaGrande and TPMs are two fifferent technologies. Somebody please correct me if I am underinformed.
Trusted Computing does not directly address viruses/worms per se...TC is about secure communications and transactions between trusted parties and involves creating trusted entities on the client end. LaGrande hopes to integrate a more secure CPU (the host computer's hardware) into the PC which would complement/enable an updated more secure Windows architecture.
I don't see how the slow deployment of software applications that would work in a LaGrande/Longhorn environment will necessarily slow the deployment of TPMs. If TPMs become widely deployed next year it will be the advancement of TPM functionality as embodied in successive TPM versions that will drive TC and Wave's success.
go-kite-surf
I believe TPMs can be designed/built to accomodate the Embassy OS at minimal additional cost. First we need to gain traction in the TPM deployment. If the rollout is successful users will be screaming for more functionality, the kind of functionality that can only be delivered by Embassy programmablity. All IMO.
R2
barge, are not LaGrande and TPM technology two different animals?
LaGrande sounds like it is about securing the host computer's OS while the TPM provides a "vault" apart from the host computer's domain. So LaGrande aspires to secure the host's OS from viruses/worms while the TPM platform enables Trusted Computing, essentially a PKI process.
dabears4/awk, nice work on patents! e/
bdooley, I think dabears4 is correct that MSFT will not be able to duplicate Embassy (with NGSCB) without infringing on Wave IP including those patents which we acquired when we acquired N*ABLE Technologies in 1999!
Cheers,
R2
Weby, thanks for a great post. e/
OT shrinkydink
I live in Vegas and planning on attending Comdex.
ramseyvegas@yahoo.com
lhf, industry-wide push, finally. e/
P.S. re: eTM Suite (eSign Transaction Management Suite)
eTM supports both
E M B A S S Y® Trusted Client Devices
and PCs equipped with TCPA security
hardware for stronger user
authentication and secure storage of
the user certificates and keys.
Copyright © 2003 Wave Systems Corp.
All rights reserved. EMBASSY® is a registered
trademark of Wave Systems Corp.
Part # 03-000145
SignOnline is a division of Wave Systems Corp.
SmartSignature/SmartSafe/SmartIdentity/SmartConnect datasheets are now available at our website:
http://www.wave.com/about/datasheets.html
I called Wave yesterday to correct a problem with this and it was taken care of pronto. For some reason, these first four datasheets were all coming up erroneously as the Wave/Infineon datasheet.
Enjoy!
awk P.S.
The client-side security hardware will become programmable...there is no way around it!
The conclusion of the Wave paper:
8. Conclusion
We have introduced two distinct architectures geared toward the same goal of
achieving containment of damage to the business of content and service providers while
protecting the privacy interests of consumers who participate in the system. These
conflicting requirements are best mediated by the introduction of programmable security
coprocessors on the consumer end and a Trust Server which can directly access these
devices and so offer permissioning of providers’ applications into them while still
maintaining user privacy. Users have a legitimate right to change their personas with
respect to activities conducted over the Internet in order to restrict the amount of valuable
information that others can glean, often with no commensurate benefit to the consumer.
The Trust Server can deny the permissioning of further services to users who are
suspected of noncompliant usage of such services in the analogous way individual
providers could handle their relationships with customers who are known to them. We
have shown that a considerable degree of defense against both insider attacks and
consumer fraud can be achieved by careful protocol design and the measured use of
hardware security resources on both the consumer and server end. The first of our two
methods is characterized by a strong PKI (public-key infrastructure) flavor which leans
toward making minimal use of Trust Server involvement in the process. The second
approach is capable of handling legacy infrastructures, although it is adaptable to hybrid
approaches which can individualize coprocessors with keying material which is able to
support both peer-to-peer PKI and coprocessor-to-Application Server shared-secret based
cryptography.
Great article awk. Thanks. e/
Thanks nelzoni. Your links provided this rebuttal on Ross Anderson et. al.
http://www.research.ibm.com/gsal/tcpa/tcpa_rebuttal.pdf
C2, I really think you are onto something with your DVI angle, but this is a job for Embassy...too complicated for TPMs! LOL!
R2
Nice find C2. Yet another Wave incubation waiting and now closer to hatching!
Regards,
R2
dabears4
I stand to be corrected on St Micro. I must say I did not research it...Wave told me that they did not yet have a TPM.
R2
eamonnshute
Wave has confirmed to me that CD-ROMS (ordered from Wave) are the starting point to be followed by downloads from Wave's website. Also confirmed is that Wave will be listed as a security service provider on the IBM website. I assume that there will be a link at IBM website to the Wave website to download.
I think the downloads are not yet available because first, Wave's Premium Services (Attestation Credential Manager and Key Transfer Manager) are still in beta and second, the newer TPMs (Endorsement Key-enabled) capable of utilizing these services are not yet available.
Why the ETS $39.99 package is available only as CD-ROM and not downloadable, I do not know, unless they are waiting for the Premium Services to be ready before they launch any downloads.
R2
Wildman262
Are we sure that the Intel bundling will be done on the TPM? I have never understood that it will be the TPM...of course NSM is already bundled and it seems unlikely Infineon or Atmel would bundle sans a Wave agreement with either of them.
Just to confirm...at the present time ST Micro has not announced a TPM.
Go-kite-surf, I agree that WAVX has the potential for high growth, and given that such growth occurs, and will not be held back by the limited movement of the Nasdaq.
Clearly today we are moving with the Nasdaq as we did last Thursday, but then again this could be buying in advance of news. I only thought that if WAVX was now more on the radar screen that we would be more likely to move with the market, which beats the heck out of languishing as an uncertain entity.
RWK haha!
I did not mean to imply that movement of NASD will hold WAVX back! LOL
WAVX will eventually become more "Nasdaq-driven". Since the NASD is up markedly today, we could be seeing that in the share price.
go-ks, nice overview of potential. e/
Doma
Wave is doing CD-ROMS first, downloads from Wave's website to follow. Also, Wave to be listed as service provider on IBM website. When downloads from Wave's website are available, I expect a link from IBM website to Wave downloads.