SBIR Phase II: EO: Security Microchip for Mobile Devices

SBIR 第二阶段：EO：移动设备安全微芯片

• 批准号: 0750040
• 负责人: Kristopher Carver
• 金额: $ 50万
• 依托单位: BlueRISC Labs
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2008
• 资助国家: 美国
• 起止时间: 2008-02-01 至 2012-01-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0750040&HistoricalAwards=false
• 关键词: SBIR; Phase; II; EO; Security

This Small Business Innovation Research Phase II research project has as its objective the development and demonstration of a hardware-based security platform for the protection of applications and confidential data in mobile phones. The end-product components consist of an ultra-low-power security chip protected against attacks, by means of a unique compilation-driven instruction set obfuscation technology, built-in cryptographic acceleration support, and secure storage, a mobile security firmware supporting the Trusted Platform Module (TPM) specification of the Trusted Computing Group industry consortium and a unique mobile application protection technology with secure software plug-ins, and associated development tools to facilitate the use of our technology, including a security-focused compiler. By focusing on ultra-low-power approaches, this solution can be used by battery-powered applications and will not greatly reduce the time between recharges.The broader impact of this activity is that it addresses key technical obstacles that are a barrier to expanding the use of mobile phones in financial transactions and enterprise applications. Currently, mobile phones do not have the amount of built-in security that would lead to the widespread use on them of electronic wallets, for example, or to allowing users to securely execute mobile enterprise applications.

这个小型企业创新研究第二阶段研究项目的目标是开发和演示一个基于硬件的安全平台，用于保护移动的电话中的应用程序和机密数据。最终产品组件包括一个通过独特的编译驱动指令集混淆技术、内置加密加速支持和安全存储来防止攻击的超低功耗安全芯片、一个支持可信计算集团行业联盟的可信平台模块（TPM）规范的移动的安全固件以及一个带有安全软件插件的独特移动的应用程序保护技术，和相关的开发工具，以促进我们的技术的使用，包括一个以安全为重点的编译器。通过专注于超低功耗方法，该解决方案可用于电池供电的应用，并且不会大幅缩短充电间隔时间。该活动的更广泛影响是，它解决了阻碍移动的电话在金融交易和企业应用中扩大使用的关键技术障碍。当前，移动的电话不具有例如将导致在其上广泛使用电子钱包或允许用户安全地执行移动的企业应用的内置安全性的量。