Wave Systems Corp. (fka WAVXQ)

[dude_danny]

TPM news spreading in China...

The credible computation leads the entire profession.
Author: Yang A ZhaoSource: Chinese computer newspaperChief-editor: Wang Dan [ 2005-08-01 11:41 ]

http://translate.google.com/translate?hl=en&sl=zh-CN&u=http://biz.chinabyte.com/365/2052865....

The recommendation reading newest renewal continues to read the correlation subject edition newly does reading rank discussion this article discusses this article correlation product
[ Leads reads ] the computer profession thinks TPM (Trusted Platform Module, credible platform module) is one kind of essential security module, it may cause the computer to exempt virus's harm.

　　　　　　数码精品，购物零风险 同方笔记本新品体验
　　　　　　“90天”征服女人！ 性感女鞋挡不住的诱惑
At present, the entire PC industry all joined Trusted the Computing work team, most plans at first all were propose by Microsoft, however started from the year before last, Intel walked in the front row. The computer profession thinks TPM (Trusted Platform Module, credible platform module) is one kind of essential security module, it may cause the computer to exempt virus's harm. All includes V chip on like each television which one uses in to inspect same, most enterprises' PC machine all should include one TPM chip, uses in to save adds the dense key and the foundation numeral signature. But, Microsoft postponed the TPM promoted plan.

The last month, Intel promoted AMT (Active Management Technology, active management technology), the IT department used this kind of technology even may carry on the control to the close machine computer. Next year, Microsoft's Longhorn will increase Secure Startup, this will be one kind based on the TPM method, might prevent the loading not essential procedure. To 2007, Intel and AMD CUP all will contain the hardware hypothesized technology, this kind of technology will establish the safety zone periphery the not safe application, finally will contain the Windows operating system.

The TPM appearance reason is because is not reliable based on the software security dense key. Looks from certain aspects, the dense key must increase to the memory or the memory on the hard disk, this makes them to be very easy to receive viral, Trojans and other malicious procedures attacks. The corresponding solution is downloads the encryption and the decipher and concentrates it on the TPM chip. Cooperates besides the processor except the secret cipher, TPM also includes founds the dense key the random number generator, as well as uses in the dense key to save above the chip dodges saves. Theoretically looks like, this kind of security dense key may resist any software attack, because explains their only method is the chip physics separation. Only has works as when the secret cipher, the fingerprint or the examination other methods are correct, TPM only then can confirm some user and carry on the decipher. But, it also may carry on the confirmation to certain procedures, namely it may according to carry on the encryption by some method logarithm and cause it not to be possible mutually to use.

TPM uses in when signs one's name, function is more formidable. Is called in one kind " proves " in the process, it may examine the PC machine hardware and the software condition, confirms one special procedure whether moves. The long term plan is uses in the network it turns on the control, this and the existing some software system structures are similar, but it will be safer.

Although had TPM the PC machine appearance already has three years long time, but most applied still maintains at the theory stage. But, IBM, HP and other some PC merchant product TPM has taken in Windows XP the document and the folder encryption substitution plan, or carries on the encryption to the secret cipher visits the network resources.

But, used TPM or the encryption software user very are still few, its part of reason was because this technology did not have prepare, the early chip speed was obvious slowly to Pentium or the Athlon chip, moreover one year ago promoted many chips do not conform to now standard TPM 1.2. The newest edition includes some improvements, the most important improvement is it may carry on the backup on another TPM to some personal dense keys. (Dense key itself already carried on the encryption in the transmission process, therefore also could not read out these dense keys through software.

Although Microsoft already started to develop Palladium, but the now does not have any product to be published. The estimate promotes in 2007 new version Windows in product Longhorn will include to the local TPM support, but will plan the most characteristics will not all have contained in Palladium. Later, Palladium will change the name is NGSCB (Next Generation Secure Computing Base, next generation of safe computation foundation), and the plan will surmount TPM in two main aspects, namely procedure isolation and I/O encryption. Encryption I/O will need the new hardware and turns on through Nexus, Nexus will be one kind the operating system which together will move with Windows.

dude_danny