News Focus
News Focus
icon url

Wildman262

11/04/08 5:58 PM

#172463 RE: Wildman262 #172462

We are now up to 275M TPMs shipped according to SKS and Wave has managed a pathetic turn on rate so far....of way less than 1%. When it changes, the growth can still be explosive for Wave. Geez a lousy 1% is only 2.75M TPMs and the CONSERVATIVE 3% turn on rate SKS was giving investors is 8.25M. $50 on that is $400M...

It's great that SKS is taking the time to pound CNET and try to get some ink for TPMs. However, I hope they are pounding harder with the IT people.


To eliminate the risk to Trojans all that needs to be done is to have the banks enable support for the Trusted Platform Module. TPMs have been shipped on over 275 million PCs and the volume is still increasing. This technology would allow for a secure bonding between that PC and the bank that is based on highly reliable technology. The PC industry has provided the cabaility but it is now time for the Financial services industry to join the parade. Once a PC is bonded to the service provider ,the consumer will have a secure channel to conduct business. The secure authentication is based on secret keys held in hardware that are specifically created for that individual account. The user gets a better experieince and the bank has a high level of assurance that the user is who they say they are. It is impossible for a trojan to Steal the secret keys held in the TPM as the hardware would have to be compromised wich is not possible with software. Ask your financial institution when they will begin supporting the TPM and ask your employer as well. There is no reason to continue to rely on Username and Password. With over 140 companies supporting the TPM as an insdustry standard hardware component, it is a great vendor neutral Standards based solution to security.

Steven Sprague
Wave Systems Corp.
In reply to: "1 Trojan + 3 years = 500,000 online financial accounts"
October 31, 2008
4 replies

It would seem that the world of bank security would be advanced farther and faster If the banks would begin leveraging the Trusted Platform Module that is in over 250 Million PCs and now also shipping as part of intels New chipsets. We as consumers have learned to bond our cars to our garage door our Portable phones to their base stations I am sure we can learn to bond our Laptops to our bank accounts and our email. The embedded security that is part of the PC is vendor Neutral, Very powerfull and will eventually be on every PC built. It is being deployed to secure corporate networks and data we need to demand that the banks support security that is and will be on everyone's PC.

Steven Sprague
Wave Systems Corp.
In reply to: "Banking security on a USB stick"
October 30, 2008
0 replies
Change takes time but is very possible if goverment and Industry can work together. The switch to HDTV would be a poster child for this. Who would have believed we could have done it.

Cyber security could use a big project that would get all of us involved. I would propose the following policy change.

"Require all federal Taxes filed electronically be signed by ID keys secured by hardware by 2014"


The technology to acoomplish this is very well understood and will be free for the Users. (smartcards, USB tokens and TPMs could be used. The TPM provides an industry standard, Industry funded initiative to put hardware security in every users hand. With over 250 million TPMs out there this is already underway.
As a result of this all users will have to get a digital ID for business with the federal goverment. This will include small business, Large business and Individuals. The infrastructure would get built to get digital ids for federal use but could easily issue other IDs for other purposes. It would also help us poor users figure out how to manage these things.
Goverment would benefit from a significant reduction in the cost to verify and process business transactions with tax payers
Goverment would potentially significantly reduce the ability to Hack the taxes.
Users would get an easier to manage method of authenticating to goverment for the request of services and completion of transactions.
Users would get a foundation for a tamper resistant Identity to do business with goverment and unlike a personal ID card a digital identity has many fewer negatives.

This is a simple concept but one that could dramatically change how we do business on the WEB and help us to secure the future of computing.

Steven Sprague
CEO
Wave Systems Corp
In reply to: "Note to McCain, Obama: Don't forget information security"
October 21, 2008
0 replies
Jon,

Now all we need to see is Symantec leveraging the TPM for strong authentication to their service managment platform and then they will have the tools to securely deliver virtual services in a fraud reduced manor making it easier and safer for customers to manage. In the same way that the Mobile carrieres have leveraged client side security to offer great services with good convinience by having client side hardware identity. The PC SaaS vendors can now acheive the same model with the over 250 million PCs with TPMs (trusted Platform Modules)

Steven Sprague
Wave Systems Corp.
In reply to: "Symantec's work behind the cloud-based services curtain"
October 21, 2008
0 replies
the big challenge will be security so that instant on does not require another authentication scheme and data protection scheme. Full Disk Encryption hard drives may be critical to acheiving this as they are instant on and at a hardware level.

steven sprague
In reply to: "Microsoft mulls 'Instant On' for Windows"
October 16, 2008
0 replies
There is an enourmous opportunity for Goverment to support the Trusted platform module as part of the authentication to PII. The TPM which is now on over more than 250 million PCs world wide cost the goverment nothing to deploy but will hold compatible credentials to the current smart card schemes. This technology which is already manadated by DOD for all contractor computers sing July of 2007 provides an industry standard method for Storing authentication keys and is already in the hands of most Local State and federal workers and contractors. TPM is a key technology to realizing a strong authentication Scheme and Goverment should solidly require the use of this technology.

Steven Sprague
In reply to: "Feds propose consolidation of personal info in databases"
October 8, 2008
0 replies
the new Dell E series has a Wireless card reader that will support the new Mifare cards. In addition, You can use old subway tokens in lieu of passwords to log yourself in. Mifare may have it's issues but it makes a cool second factor token for access control to your laptop.

steven sprague
In reply to: "D-Day for RFID-based transit card systems"
October 7, 2008
0 replies
It is time to start adressing the problem. Dell Laptops are now available with Encrypted Drives. The encryption is done in hardware and has no performance impact. It is independent of your operating system and will not affect any applications and it is factory installed and easy to set up. Make sure Your IT department orders your next laptop with an encrypting drive. This is an easy and simple step. just like requiring Seatbelts and airbags be built in.

Steven Sprague
Wave Systems Corp.
In reply to: "Data breaches best 2007 record"
October 7, 2008
0 replies
Both companies should look to the Trusted Platform Module on the PC to secure the users access to the services they subscribe to. The TPM is now on 250 million PCs and brings the kind of access control that we enjoy on Cell phones and set top boxes to The PC model. Subscibe to a service and your PC is given a secret Key held in hardware that will automatically log you on next time your PC needs to communicate with the service. So the user is still in control but there is no need for a password every time to access a service. Service based computing is an incredible opportunity but we need all of the parts Billing and Access Control.

Steven Sprague
CEO
Wave Systems Corp.
In reply to: "If the economy tanks, will subscriptions become a panacea?"
October 7, 2008
0 replies
Dell PCs can be ordered with an Encrypted hard drive option wich is easy for a single use to configure and extremely secure. The new business Laptops support this as an option. Everyone with sensitive data on their machine should make sure that their New Machines have Encrypted Drives Today the drives are built by Seagate and other drive manufactures have announce similar product. It's time to stop losing data.

Steven Sprague
Wave Systems Corp.
Written on a Dell Latitude 630 with a Seagate FDE (full disk encryption) drive
In reply to: "Laptop stolen from regional GOP headquarters"