Replies to post #158769 on Wave Systems Corp. (fka WAVXQ)

[awk]

Wildman: Sort of...

EEE is an application built by the various NAC providers. Wave builds the SDK (Software Development Kit) that is sold to the NAC builders.

The NAC builders builds, with the aid of the SDK an application - the EEE - that is then deployed on the client. EEE runs on the client.

EEE is a service that Wave builds for the NAC folks for them to incorporate a solution to prevent the lying endpoint issue.

The EEE SDK provides all the libraries and components needed to use the TPM and TSS to perform integrity measurements of the client utilizing the capabilities of the TPM to do hashing, signing, storing, etc.

I am not yet clear on the economic model but will try to get a handle on this over the next few days. But yes, it appears that EEE is deployed by the NAC folks.

The one thing that is clear is that adoption of EEE by the NAC folks would be a huge driver for enterprises to turn on the TPMs

[go-kitesurf]

Wildman, regarding EEE:

This is a product that must reside on the client side PC in an enterprise, not the server. How it gets there is immaterial as long as software companies wishing to use it can access it via an API to "get" the integrity data from EEE.

So potential licensing could be with:

microsoft
juniper
cisco
dell
HP
etc

anyone that has something installed on the client, or wishes to install something on the client. It could be Symantec or Norton or AVG as well.

This presents an entirely new problem for Wave. They now must get this on the client machine via some distribution channel, then they must get companies to use EEE in collaboration with their software. There is no "common" interface for a client integrity tool, and likely the CAs, Ciscos, Nortons, MSFTs, etc all have different tools and would need to build their own interface to the EEE product.

There are some here that will lead you to believe that EEE is a shoe-in for mass deployment, this is not the case. This opens up a new industry for Wave, but at this time, we don't see much of a relationship with these players. And judging from how tight relationships with OEMs have delivered little value to shareholders, Wave has some work to do here. I wish them the best, and hopefully they can at least get on all the Dell PCs via their relationship there, but getting Juniper, et al to license and use it is another story. Lets see if Wave can finally get their products out there.

I haven't posted in a while and likely will post very rarely (only check the board now when I'm bored since most of the discussion here is about the future, about stupid crap like Google phones, consumer "tsunamis", or nonesense like government contracts on security that have nothing to do with Wave).