Secure PDAs
An anonymous reader writes "This article at LinuxDevices.com introduces a unique Linux-based 'secure PDA' co-developed by IBM and Consumer Direct Link, Inc. (CDL). The Paron MPC combines the functions of a PDA, Bluetooth wireless access, cellular telephone, and biometric fingerprint recognition, along with a security-oriented hardware/software architecture. The device is claimed to be the world's first handheld wireless device with built-in biometric user authentication. The Paron is based on an Intel StrongARM SA-1110 processor and uses a Linux 2.4.x kernel and provides a GUI environment and PDA app suite based on Trolltech's Qtopia and Opera's browser much like the Sharp Zaurus."
We currently run biometric clocks for our timecard authorization, but in deploying this technology there is nothing terribly secure about it. For instance, a quick google will show you all the methods of defeating the fingerprint scan, and once a thief has this device, it's not much trouble to "dust" the last fingerprint, and create a good scan with illustrator. So remember, gotta wipe the sensor everytime!
"This isn't a study in computer science, its a study in human behavior"
HP/Compaq has been touting fingerprint security on it's upcoming High-end iPAQ for a few months now...
"Draco dormiens nunquam titillandus."
The press release mentions the potential to work with NSA (although they wrote National Security Administration not Agency) for other applications of this device. While this is possible, the device would only work for Unclassified applications unless very substatially modified. Also, NSA is already working with RIM to develop a secure BlackBerry for UNCLASS applications.
From their web site: GSM/GPRS (900/1800 and 900/1900). Last time I checked, GSM 1900 was available in most of North America, and GSM 900 in Korea. Who else uses CDMA?
If you read the specs, it says it uses an encrypted VPN over the Bluetooth air interface. So they're not relying on Bluetooth's native "security".
fnord.