Wednesday, September 2, 2009

VIA Launches ACE Connects (ACE-CNX)


VIA’s Eden, C7 and Nano processors have an advanced cryptographic engine built right into the die of the processor. ACE-CNX, pronounced ACE Connects, is a new service that connects developers with experts within VIA, to help developers build successful secure applications using the ACE security engine provided with VIA’s CPUs.

VIA have justed announced their Security Solution Service, now known as ACE-CNX. The service will be available through the VIA Embedded Platform Division (VEPD) and like an engineering fee for new board designs, the cost will depend on the project and will be considered on a case by case basis. Customers would work with VIA’s software engineers to develop a solution specifically tailored to their needs.

With ACE-CNX, VIA engineers and the developers would work together to define the hardware setup and what they want to achieve, and then VIA would provide a tailor-made SDK (software development kit) for the company to work with. ACE-CNX would then have VIA work with the company until the solution is finalized.

To understand why the ACE-CNX solution is important, let me first explain how VIA’s embedded security works. Ordinarily, security measures don’t take effect until after the operating system has loaded. With VIA’s solution, key system files can be verified before booting starts, ensuring the integrity of files before the operating system loads. It’s all about booting securely, and then using an operating system and applications securely. In VIA’s solution, the security red tape all happens between the CPU and the memory and with the software element removed, this drastically reduces the complexity of keeping things secure.

ACE-CNX itself is not software and it’s not hardware, it’s a service where VIA helps its customers to exploit this unique security engine in the VIA Eden, C7 and Nano processors.

In case you’re confused, as I certainly was when I started to research this blog, I’ll provide a few hypothetical examples of why a company might decide to sign up for the ACE-CNX service. In all cases, the company in question is developing a product with features that require excellent security and this might include:

Communication: Traditionally, to set up secure communication, you need to set up a VPN tunnel. With VIA, instead, it’s end to end.

Digital signage: Content being displayed on digital signage can be securely remote managed.

Secure file sharing: Large organizations can secure file access between notebooks, desktops and servers.

This is by no means an exhaustive list of the practical circumstances where the ACE-CNX service would help VIA customers. And it doesn’t matter what the infrastructure is, so long as it includes a VIA Eden, C7 or Nano processor; it can be a custom board, EPIA board, VB series board, etc.

In all cases, the goal is to make best use of the AES algorithm and utilize the opcodes in VIA processors to encrypt data and thereby keep that data secure. Rather than struggle to keep data secure by software, VIA’s solution keeps information safe using the circuitry in the computer itself. ACE-CNX is the service that forms a partnership between VIA and their customer to make it happen for a particular product and application.

We’d like to thank Patty Wu, Steven Wang. Peter Li, Stewart Hatson and Timothy Brown from VIA for their time in providing information for this blog post.

No comments:

Post a Comment