Click here to learn
about this Sponsor:
Home  |  News  |  Articles  |  Polls  |  Forum

Keywords: Match:
Linux-based mobile desktop packs crypto punch
Nov. 16, 2005

[Updated Nov. 18] -- Realm Systems used Certicom's embedded VPN (virtual private network) stack in a Linux-based gadget aimed at providing roaming workers with secure access to sensitive data. The Mobile Personal Server (MPS) uses Certicom's Security Builder IPSec stack, and will ship in Q1, 2006. The device targets mobile government, financial, and medical workers requiring secure access to sensitive data when away from their desks.

Realm's MPS (pictured above) is a complete, though tiny, Linux-based computer with its own PowerPC processor, DRAM, and internal Flash memory, but packaged in a USB dongle form-factor. It is powered via USB (along with a backup battery), and has a built-in biometric sensor. When plugged in, it comandeers the interface hardware of host PCs running Linux or Windows.

Black Dog
The MPS works in a similar fashion to Realm's loss-leader priced, biometrically protected Black Dog product, confirms Marcom Director Steve Dawson. The Black Dog was delivered this summer, targeting open source developers. A cash-rich coding and bughunting contest for Black Dog software is scheduled to end in January, about the time the MPS ships.

The BlackDog works by using Windows autorun or Linux's hot plug agent to launch an X server on the host PC when the device is plugged in. An Ethernet-over-USB network is then created, over which applications (including a desktop) on the device can be accessed using the PC's display, keyboard, and mouse.

The Black Dog is a standalone device, but the MPS is designed to work in conjunction with Realm's enterprise "Management Router" (MR), as part of the company's "Mobile Enterprise Platform" (MEP). According to Dawson, the MPS "scans the host PC's network/Internet connection, then uses it to gain access to the MR, [creating] a VPN directly from the MPS to the MR; so there's no worry about malware or attacks from an untrusted PC."

The complete MEP system -- including the MR and MPS devices -- thus allows mobile workers to carry encrypted, network-enabled desktop computing sessions with them, instantly resuming and suspending from any handy host PC, according to Realm. A single MR will support several hundred MPS devices, Dawson stated.

Security by Certicom

Realm says it chose Certicom because it is an industry-proven, standards based solution. Additionally, Realm says its implementation is compatible with OpenVPN, an open source VPN solution.

Certicom's Security Builder IPSec client is part of the Certicom Security Architecture (CSA), a full embedded security stack available with modules validated under FIPS 140-2 (federal information processing standards). Versions of Realm's MPS devices compliant with FIPS 140-2 will be offered, according to Dawson.

Certicom's CSA stack is based on "elliptical curve cryptography" (ECC), said to reduce key sizes, CPU requirements, and footprint compared with alternatives. A primer on ECC can be found here.


Certicom's CSA has a modular architecture

Realm's CEO, Rick White, commented, "Thanks to Certicom's technology our platform can securely manage, distribute, and secure data and applications to authenticated mobile workers."

Realm Systems is a small startup with about 75 employees. It obtained initial funding of $10M in December of last year. In a series B round, it has to date raised $8M in a bridge, a company spokesperson stated.

Availability

Realm Systems's MEP is expected to ship in Q1, 2006, priced at about $10K for the MR and between $400 and $600 for the MPS, depending on processor, memory, and other options.

Certicom's CSA product launched in March of this year.



[Errors corrected on Nov. 17 in this story include the number of Realm employees, the MPS's autorun capabilities, and the device's VPN network access capabilities. ]

[Errors corrected on Nov. 18 include Mac OS X support status, the number of remote clients supported, the relationship of Black Dog and MPS, Realm's reasons for choosing Certicom, and the status of Realm's B funding round.]



Related Stories:


(Click here for further information)


7 Advantages of D2D Backup
For decades, tape has been the backup medium of choice. But, now, disk-to-disk (D2D) backup is gaining in favor. Learn why you should make the move in this whitepaper.

4 Legal Reasons to Control Internet Access
The Internet is obviously a valuable resource for many organizations. However, many are exposed to legal liability concerns because they fail to control Internet access. Learn if you're safe in this white paper.

Rapidly Resolve J2EE Application Problems
Whether you are in the process of building J2EE applications or have J2EE applications already running in production, you must ensure that they deliver the expected ROI. Learn how in this white paper.

Load Testing 2.0 for Web 2.0
There are many unknowns in stress testing Web 2.0 applications. Find out how to test the performance of Web 2.0 in this white paper.

Build Better Games Online
For the game infrastructure providers, life is complex. Making money from games has become more complicated. Why? Find out in this white paper.

Building a Virtual Infrastructure from Servers to Storage
This white paper discusses the virtual storage solutions that reduce cost, increase storage utilization, and address the challenges of backing up and restoring Server environments.

Gaining Faster Wireless Connections with WiMAX
Welcome to what is quickly becoming the hyperconnected world where anything that would benefit from being connected to the network will be connected. Learn more in this white paper.

Is Your Desktop a Security Threat?
The new wave of sophisticated crimeware not only targets specific companies, but also targets desktops and laptops as backdoor entryways into those business’ operations and resources. Learn how to stay safe in this white paper.

Increasing SAN Reliability by 100 Percent
Storage area networks (SAN) are a strong part of storage plans. Learn how to increase your reliability and uptime by 100 percent in this case study.

 


Got a HOT tip?   please tell us!
Free weekly newsletter
Enter your email...
Click here for a profile of each sponsor:
PLATINUM SPONSORS
GOLD SPONSORS
(Become a sponsor)

ADVERTISEMENT
(Advertise here)

Check out the latest Linux powered...

mobile phones!

other cool
gadgets
HOWTOs: from DevShed & IBM DeveloperWorks:



BREAKING NEWS

• Balanced XIP and the AXFS filesystem
• ARM-based controller has StackableUSB expansion
• Intel multi-core threading library supports Sun Studio
• Multi-protocol wireless mesh gateway runs Debian
• Embedded Linux is doomed. DOOOMED!
• Article explores Linux hot-patching utility
• Sun demo's RIA tools on Android
• Panel PCs support PoE, Linux
• New Palms on horizon?
• Embedded track added to Linux conference
• Ubuntu ported to a PDA
• Linux-friendly SBC hosts dual quad-core Xeons
• Embedded Linux SQL database adds Java, C# bindings
• Lightweight, embedded graphics framework rev'd
• Shock resistant automation computer runs Linux


Most popular stories -- past 30 days:
• Ubuntu ported to ARM
• Linux still top embedded OS
• Linux gains new architecture support
• Linux 2.6.25 release bolsters ARM
• Linux-based diskless notebook costs under $300
• Low-cost MP3 player gains fancy Linux port
• Dutch UMPC runs Ubuntu Linux
• Mini-notebook boasts Linux, near-fullsize keyboard
• PC/104 module runs x86 Linux on 1.85 Watts
• Low-cost Linux-based NAS device supports RAID 1
• Free router distro gains wild WiFi features


Linux-Watch headlines:
• Running a small business on desktop Linux
• Sun launches OpenSolaris
• Via tiptoes toward openness
• Linux certification comes to Italy
• Installing Ubuntu Hardy Heron as a web hosting server
• Black Duck Buys Koders
• Open source conference co-locates with Ubuntu show
• Ubuntu 8.04 ready to challenge Windows
• KDE Linux reaches 52 million Brazilian kids
• Free x86-based Linux router distro rev'd


Also visit our sister site:


Sign up for LinuxDevices.com's...

news feed

Home  |  News  |  Articles  |  Polls  |  Forum  |  About  |  Contact
 
Use of this site is governed by our Terms of Service and Privacy Policy. Except where otherwise specified, the contents of this site are copyright © 1999-2008 Ziff Davis Enterprise Holdings Inc. All Rights Reserved. Reproduction in whole or in part in any form or medium without express written permission of Ziff Davis Enterprise is prohibited. Linux is a registered trademark of Linus Torvalds. All other marks are the property of their respective owners.