« ALEA Home | Email msg. | Reply to msg. | Post new | Board info. Previous | Home | Next

Re: SE (Secure Element) and TEE (Trusted Execution Environment) **

By: Cactus Flower in ALEA | Recommend this post (0)
Sat, 10 Mar 12 7:06 PM | 64 view(s)
Boardmark this board | The Trust Matrix
Msg. 06801 of 54959
(This msg. is a reply to 06800 by Cactus Flower)

Jump:
Jump to board:
Jump to msg. #

Along similar lines, something I posted on snackman's board:

http://www.wavedd.com/viewtopic.php?f=4&t=812&start=1100

[cactus note: the dating is approximate]

Hi dreamer,

As usual, I'm presenting an alternative scenario. There's a technological argument. There's a political one. I am not saying the one the MNOs have been pursuing is better. Just that their political power should be acknowledged. When I first started talking about the opportunity in the mobile market (around the year 2000-2001), it became apparent that the mobile phone service providers were in competition with the smart card solutions offered by the financial community. It was at that time I realised that a phone makes a much more powerful solution to exactly the problems that smart cards try to solve. A phone works with a signal. It is a communications device. It is portable. Wave and the financial industry were saying a keyboard and/or a smart card reader could solve important problems. But as I said to awk at the time, you don't need such a large pocket for a phone.

It took a decade for these two industries to find a pathway forwards, and there are still tensions within the industry over the NFC architecture.

So the question is, will the elegant MTM chip model end up being adopted. I can see some of the handset makers would like it to be. I see that global platform has done some work. There's some real money in motion. I think your argument is strengthening. But I think it needs someone to push it the last yard - towards actual adoption. And that someone would be at the end of the supply chain. Someone like DoD.

I just don't think it will be adopted because it is technologically elegant. There's politics and a division of the financial spoils in the secure element design. MTMs disintermediate a bunch of incumbents. These guys have snouts and they want their troughs in place. The MTM design - if it captures the flow of data - turns the MNOs into bitstream providers, which is their nightmare. So it requires force.

Hey, if anyone has tanks to put on Verizon's lawn, it is the US department of defense.

So my point was simply to challenge the method by which you suppose a change will occur. I think it will be done outside the control of the MNOs. The DoD has reasons why it may insist.

Your post: "I'm not going to argue which system is better for all things security in the mobile payment space, I'll leave that to the market. I stated my opinion.

For me and for now I'm glad to see the Trusted Execution Environment make the latest GlobalPlatform paper. We know a tremendous amount of effort has gone into preparing that Secure world of TrustZone and all the players involved. The fact that Trusted Logic and MobiCore are already showing MTM's running as Trusted Applications in TrustZone and in MobiCores case they are running Trustlets in their TEE, well everything awk saw (and of course Wave, barge) is starting to come together.

Now I'm starting to wonder WHO brings Interoperability between the TEE's, could that be the beginning of the Trust Assurance Network (TAN). I think I read somewhere that Wave had such a concept!

Alea, I'm just putting all the pieces of the puzzle out there with everyone else trying to get a grasp on what is possibly coming. To me the future for Wave and it's products looks bright, when I look at the trend of the SP not so bright, go figure Laughing "




» You can also:
- - - - -
The above is a reply to the following message:
Re: SE (Secure Element) and TEE (Trusted Execution Environment) **
By: Cactus Flower
in ALEA
Sat, 10 Mar 12 6:11 PM
Msg. 06800 of 54959

Hi awk,

I don't disagree with you on technological elegance. But I think there's a reason why the incumbents along the mobile phone and payment supply chain created the camel that they did. It's to do with control of the income flow: or more specifically, control of the applications that drive the information which defines the flow of income through the supply chain, and that specify everything from who gets onto the mobile network to whether credit is available for a merchant transaction done in a shop.

I much prefer the internet/trust innovation model in which anyone can participate so long as they adhere to common protocols and the interoperability imperative.

But from the point of view of the consumer mobile service market, this idea is not incumbent. The mobile networks have always been proprietary domains. Whereas a standards-based trust network opens the market to competition.

So the supply side needs turning. Which means I think there's a critical mass issue here. And to get over this hump, the opportunity will proceed from the broad "enterprise" space, rather than from individual users. Cartels are too powerful to submit to such a thing as demand if they perceive demand as against their interest. So I think to achieve change requires something more than the power of simplicity or the wants of the market.

Somehow, you have to force the supply side to bend.

The good news is that the power of folks on the security side of the equation is also not inconsiderable. And indeed, if the US government is willing to wield its authority, it has a trump power within its sovereign area, and probably beyond it. So I think the area to watch is the same place as we ended up watching on the PC side - it is standards from folks like NIST and mandates from folks like the DoD and orders from large companies which gradually turn the phone market around. And perhaps to begin with they will say - all DoD tabs and phones must have the hardware in them.

And doesn't Wave's deal with Samsung suggest that process is beginning? And indeed, isn't the work done within GlobalPlatform a substantial foundation upon which to build?


« ALEA Home | Email msg. | Reply to msg. | Post new | Board info. Previous | Home | Next