1. Securing Applications With Firmware (Going Beyond TCPA Platform Security) Dr. Robert W. Baldwin Bob_Baldwin@phoenix.com Chief Scientist

2. 2 Outline  Who is Phoenix Technologies?  What is Phoenix doing in Security?  Current & Future Partners

3. 3 Phoenix Dominates PC BIOS  BIOS: Initialize & Manage PC Motherboard & Devices  Phoenix is 21 Years Old  80% PC Market Share  > 100 Million in 2001  Expanding to Set Top Box Internet Appliance Wireless Handheld  Prior Success With Power Management Plug n Play USB 100 Million PCs in 2001

4. 4 Phoenix Partners & Customers

5. 5 Phoenix FirstWare Opportunity  Motherboard Includes Protected Execution Environment  Past: Power Management USB, Plug n Play  Now: Firmware Smart Card for Each Application Application Integrity & Access Control RSA, AES, SHA1-HMAC World Wide Trust Infrastructure (PKI Initializes AES Smart Cards) Application Win OS StrongROM

6. 6 Phoenix FirstWare Opportunity  Bind Data (Cryptographic Seal & Unseal): to Specific Application on Specific Device App-Device Pair Registered with Enterprise or Merchant  Checks Signature on In-Memory Application Code Viruses, Tampering, Reverse Engineering App Data Application

7. 7 ProcessorChipsetI/O BIOSHidden NVRAMStrongROM H/W Motherboard ROM StrongROM RAM Buffer SMRAM Operating System Driver Runtime SMI FirstWare Architecture Root Key Device Key Application 2 Application Container 2 Application 1 Application Container 1 Pre-boot

8. 8 FirstWare Product Areas  Check the Virus Checker & OS Loader  One-Time Password Authentication  Convenient Two-Factor Challenge-Response VPN Client, RAS Dial-Up, SSL Web Access  Protect RSA Private Key & Certificate VPN Client Certificate, E-Mail, Purchasing Card  Software Licensing & Content DRM  Device Asset Control & Tracking

9. 9 Phoenix cryptographic engine + security keys Phoenix StrongROM on motherboard StrongROM secured computer FirstWare Deployment StrongClient secured computer New PC, Handheld, Set Top Legacy & Non-Phoenix Devices Application Includes StrongClient WDM

10. 10 Working With Security Partners  Chips Vendors  Motherboard & PC Makers  OS Vendors  Wireless & Handheld  Security App Vendors  Financial App Vendors  DRM Vendors  Trust Infrastructure Providers Phoenix FirstAuthority Device Security Server & SDK Phoenix FirstAuthority Server Family Device Authority Service Providers Phoenix FirstWare StrongROM & StrongCLIENT Device Manufacturers & System OEMs ISVs & IT Developers