| Linux ported to secure POS SoC |
Sep. 27, 2005
 A French fabless chip house has ported Linux to its flagship SoC (system-on-chip) for secure smartcard readers and PIN-entry pads used in point-of-sale (POS) applications. Innova-Card's MIPS32-based USIP Professional IC features on-chip memory, storage, and cypto, and is available with a Linux-based software stack, reference designs, and professional services. This SoC is packed with peripheral interfaces.
(Click for larger view of USIP development kit)
Innova is a three-year-old startup that has brought in 1.6M and 3.5M Euros, respectively, in its first two rounds of financing. The company was founded with the mission of creating chips for secure payment applications.
Innova-Card calls its USIP chip "the most secure and integrated SoC for smart card devices." The SoC is based on a MIPS32 4KSd CPU core clocked at 96MHz, and said to deliver 1.35 MIPS/MHz. The processor supports the Smart MIPS crytographic instruction set, and has 8KB each of instruction and data cache, a 5-stage pipeline, and 16-bit code compression via the MIPS16e ASE (application-specific extension).
The USIP integrates on-chip memory with lots of I/O
On-chip memory resources include 128KB of SRAM, 128KB of ROM meant for a HAL (hardware abstraction layer) and secure AES-authenticated bootloader, 256KB of Flash with "locked features," and 256KB of OTP (one-time programmable) storage. The USIP additionally supports 1.8V and 3.3V external memory, including up to four 32MB SRAM or Flash chips, plus up to 32MB of SDRAM. Data bound for external memory storage are encrypted on the fly using NIST FIPS-197 AES, Innova-Card says.
On-chip peripheral interfaces include three smart-card controllers, three channels of F/2F decoding for magnetic stripe readers, a thermal printer interface, battery-backed RTC (real-time clock), 12 x 12 matrix keyboard controller, an LCD interface, and a DMA controller. Additional I/O interfaces include USB OTG 2.0, UARTs, IrDA/UART, SPI master/slave, I2C master/slave, a parallel port, and a PS/2 keyboard/mouse port. The chip also provides 32 general purpose digital I/O lines, and has 2 PWMs (pulse-width modulators), four times/counters, six ADC inputs with 10-bit resolution, and a watchdog timer.
Innova-Card lists other security features in the USIP as follows:- Secure MMU (memory management unit)
- Unique chip serial number (USN)
- Firewall for USB access
- Protected storage area
- Physical countermeasures
- tamper protection
- internal sensors (voltage, frequency, temperature, active metal shield)
- external sensors
- True RNG (random number generator)
- AES crypto processor
- Secure bootloader
Innova-Card offers a development kit for its USIP chip (pictured at top-of-page) that includes MIPS's free SDE Lite IDE, along with a development board, HAL, and JTAG debugger. An application stack (diagram) that runs on "Linux, eCos, and a wide range of commercial RTOSes" is also available, as is a crypto library licensed under NDA. The company also offers reference designs and development services for EFT (electronic funds transfer) POS devices (diagram), PIN pads (diagram), and FINREAD devices (diagram) based on the USIP chip.
An editorial yesterday in CIO Insight highlights a growing need for more stringent security in POS devices, which are increasingly complex and interconnected (for example, check out this Linux-based multimedia POS device).
Related Stories:
(Click here for further information)
|
|
|
7 Advantages of D2D Backup
For decades, tape has been the backup medium of choice. But, now, disk-to-disk (D2D) backup is gaining in favor. Learn why you should make the move in this whitepaper.
4 Legal Reasons to Control Internet Access
The Internet is obviously a valuable resource for many organizations. However, many are exposed to legal liability concerns because they fail to control Internet access. Learn if you're safe in this white paper.
Rapidly Resolve J2EE Application Problems
Whether you are in the process of building J2EE applications or have J2EE applications already running in production, you must ensure that they deliver the expected ROI. Learn how in this white paper.
Load Testing 2.0 for Web 2.0
There are many unknowns in stress testing Web 2.0 applications. Find out how to test the performance of Web 2.0 in this white paper.
Build Better Games Online
For the game infrastructure providers, life is complex. Making money from games has become more complicated. Why? Find out in this white paper.
Building a Virtual Infrastructure from Servers to Storage
This white paper discusses the virtual storage solutions that reduce cost, increase storage utilization, and address the challenges of backing up and restoring Server environments.
Gaining Faster Wireless Connections with WiMAX
Welcome to what is quickly becoming the hyperconnected world where anything that would benefit from being connected to the network will be connected. Learn more in this white paper.
Is Your Desktop a Security Threat?
The new wave of sophisticated crimeware not only targets specific companies, but also targets desktops and laptops as backdoor entryways into those business’ operations and resources. Learn how to stay safe in this white paper.
Increasing SAN Reliability by 100 Percent
Storage area networks (SAN) are a strong part of storage plans. Learn how to increase your reliability and uptime by 100 percent in this case study.
|
|
|
|
|
news feed