Mobile-chip designers to incorporate better security
Published: 30 Jun 2004 09:10 BST
Chipmaker Texas Instruments and chip designer ARM are working together to beef up security for handhelds following the emergence of the first virus to target cellphones.
The two companies, both dominant suppliers and designers of cellphone chips, are "burying the security into the hardware" where it's tougher to get at, Dave Steer, ARM director of segment marketing, said in an interview on Tuesday.
Cellphones are typically secured by software that encrypts subscriber identity or the unique ID number of the phone. But increasingly savvy cellphone hackers have turned these once tight security measures into loopholes.
Because ID numbers are used as security gates for cellphone services, they can compromise customer accounts if they fall into the wrong hands. Cellphone hacking is a problem in Europe, for example, where thieves steal phones, change the phone identification number, then resell them after filling them up with pre-paid phone minutes.
In theory, consumers should be able to call up their operator, add the phone to a list of stolen equipment and have it deactivated. But that process breaks down when people can "crack these things and change these numbers," Steer said.
A hardware approach means hackers have to reprogram chips, which is much harder than untangling encryption, according to a TI representative.
The companies' announcement follows reports of Cabir, the first-ever cellphone virus, which surfaced approximately two weeks ago. The virus apparently uses the Bluetooth short-range wireless feature of smart phones that run the Symbian operating system to detect other Symbian phones. It then transfers itself to the new host as a package file.
Cabir poses little threat because the user of a targeted phone has to approve a download from an unknown source. But future viruses for cellphones won't be as timid, Steer said.







