On September 12th, the 5th "Trusted Execution Environment (TEE) Seminar" hosted by GlobalPlatform was held in Beijing. As a non-profit industry association, GlobalPlatform has more than 100 member organizations who have developed a technical specification for the Trusted Execution Environment (TEE). These technical specifications, which are recognized as international standards, have eliminated the uncertainty caused by different standards in the industry, supported stable and coordinated development, and laid the cornerstone for digital services and equipment to be trusted.
Trusted execution environment is an important part of the identity system. It is like the enchantment on Mount Lu, making isolation and protection of sensitive data possible. Based on the identity authentication standard IFAA built under the TEE environment, it has also entered the public eye.
The Internet of Things era is coming, security issues are highlighted
In the era of the Internet of Things, mobile phone one-button temperature control, travel record miles, shopping fingerprint payment, has long been nothing new; however, while enjoying convenience, it also opened the Pandora's Box of the security world, resulting in privacy Protection, property security, transaction security, and even personal safety issues should not be underestimated.
With the access of massive devices to the network, the number of IoT nodes has soared, the industry chain has been lengthy, industry standards have been missing, and manufacturers and users have low security awareness. The resulting security vulnerabilities are exploding. Imagine that when your curtains are automatically opened and the surveillance camera silently turns to you, vehicle navigation is no longer under your control... We have every reason to believe that future criminals have the ability to invade your life through the Internet, causing immeasurable loss.
The essence of risk control is to determine who is doing what on the device; the starting point of security defense is identity authentication - how to prove that Li Gui is not Li Wei, the first level to protect user security.
Three generations of identity authentication technology, forensic Li Guifei Li Wei
At the conference, Feng Chunpei, Director of IFAA, Senior Technical Director of Ant Financial, Feng Wenpei, Secretary General of IFAA and Director of Ant Financial Services Yang Wenbo attended the conference and delivered a speech at the scene to share the current development of identity authentication technology.
The development of identity authentication technology has gone through three phases: account-based identification, hardware-based identification, and biometric-based identification. Based on account-based identity authentication, in the face of collisions, SMS passwords and many other attacks, the rate of interruption is high. Hardware-based identity authentication, higher security, but not convenient to carry. Undoubtedly, the biometric-based recognition technology greatly optimizes the user experience and becomes the main direction of market development. Although biometrics are convenient, the vectors that occur in biometric identification, if not safe enough, pose a very serious safety problem. After all, it is easy to change the password, and it is not easy to change fingerprints and other biological features. In 2015, Apple just launched fingerprint recognition. Android manufacturers want to grab the nodes. As soon as the results are released, the user's fingerprints are extracted and hanged on the Internet. Finally, the results of both users and manufacturers are lost. Such cases are everywhere in the security field.
As Yang Wenbo said, “A simple fingerprint recognition from hardware, chip, sensor to operating system, to the application layer of the fingerprint, the cloud, in fact, the entire link is very long, ... taking the fingerprint chip as an example, each has Their own interfaces and standards, when the upper and lower layers are docked, the fragmentation is very serious. The security risks come from here.
Industry development calls for standards, and ecological cooperation to build a safe cornerstone
With the increase of application scenarios and the increasing diversity of mobile terminal identification technologies, a more efficient industry standard for biometrics is needed in the industry to meet the differentiated needs of different models and services, and to greatly reduce technology development and adaptation. The difficulty of the match. Based on this industry background, IFAA came into being in June 2015, aiming to integrate upstream and downstream partners in the industry chain, including application vendors, OEMs, chip manufacturers, security solution vendors, algorithm vendors, and national inspection structures. Standard; from the entire hardware layer to the operating system, to the application layer to propose a full-link security solution. This model of exerting ecological power, achieving standard unification, and secure collaboration is also advocated by GP. With the advent of the era of brushing the face, the strength of the industry and the continuous improvement of safety are the wishes of IFAA and other security practitioners. There are no opponents in the security field, only teammates.
Speaking of the development of biometrics in the future, Feng Chunpei said with a smile, "When we use fingerprint recognition, the fingerprints of farmers' hands are almost ineffective. When we use human faces, you will find masks worn in Beijing in winter. The face is not necessarily able to brush the past. If you do the iris, many beautiful women wear beautiful eyes, and they don't have to pass. Every kind of biometrics has advantages and disadvantages." In the future, biometrics will combine the advantages and disadvantages of human face and iris, presenting multi-modality and diversification. Users do nothing, and they don’t need to know whether they are faces or irises.
As of the first half of 2017, there are more than 220 models, 500 million devices support IFAA standards, and 133 member units, in the form of working groups, widely promote technical cooperation. This year, IFAA plans to participate in the innovation and development of standard technologies with more than 100 eco-partners, and further take international steps, especially in India and Southeast Asia.
Looking forward to the Internet of Things era, only the trustworthy connection of the Internet of Everything is established, and trust is freely transmitted between people and smart devices, so that people can enjoy the smart and connected life with peace of mind!
Editor in charge: Kebang
Picnic Blanket,Picnic Rug,Picnic Mat,Outdoor Blanket
Ningbo Fineweather International Trade Co., Ltd. , https://www.fwsbag.com