Post on 25-Dec-2015
© 2001 SPYRUS, Inc.
USB TokensUSB TokensThe Reader-less Smart CardThe Reader-less Smart Card
Bill BialickBill Bialick
SPYRUSSPYRUS
2© 2001 SPYRUS, Inc.
USBUSB
The Universal Serial Bus was originally developed in 1995 by a number of leaders in the PC industry including Intel and Microsoft.
The major goal of USB was to define an external expansion bus which makes adding peripherals to a PC as easy as hooking up a "telephone to a wall-jack." The program's driving goals were ease of use and low cost.
Highlights: PC host controller hardware and software Robust connectors and cable assemblies Peripheral friendly master-slave protocols Expansion via multi-port hubs
3© 2001 SPYRUS, Inc.
Market ForecastsMarket Forecasts
According to market researcher Dataquest (San Jose, Calif.), the microprocessor and memory based smart card market will grow from 544 million units in 1995 to 3.4 billion units by 2001. (Dataquest, 408-468-8206)
A market study released in March 1998 by research firm Dataquest Inc., projected that 100 percent of PC shipments in 2001 will be USB-compatible units, and that the installed base of USB-compatible PCs will exceed 500 million by then. That represents nearly 300 percent growth over the 1998 figure of 136 million USB-equipped PCs, according to Dataquest.
According to Andrew Prophet Research and Consulting (http://www.apresearch.com), last year over 4.5 million PCs were shipped with a PC Card slot. In 1999, just three years from now, there will be more than 29 million platforms shipped with PC Card slots, representing 88% of all portable computing devices. Over 20 million cards will ship this year, and over 33 million cards will be shipped in 1997.
4© 2001 SPYRUS, Inc.
Smart CardSmart Card
According to market researcher Dataquest (San Jose, Calif.), the microprocessor and memory based smart card market will grow from 544 million units in 1995 to 3.4 billion units by 2001.
According to the market-research firm Dataquest (San Jose, Calif.), 90 percent of worldwide integrated-chip-card shipments went to Europe in 1995, while only 2 percent headed to the Americas. By the year 2001, Europe is expected to account for only 40 percent of these shipments, while Asia will command 25 percent and the Americas 20 percent.
Until 2004, ISO 7618 IC smart cards will remain one of several hardware token types used for secure access within enterprises and on bounded extranets (0.8 probability). (Gartner Group 9/17/99)
5© 2001 SPYRUS, Inc.
USBUSB
A market study released in March 1998 by research firm Dataquest Inc., projected that 100 percent of PC shipments in 2001 will be USB-compatible units, and that the installed base of USB-compatible PCs will exceed 500 million by then. That represents nearly 300 percent growth over the 1998 figure of 136 million USB-equipped PCs, according to Dataquest.
In 2002, nearly 400 million PC peripherals supporting the Universal Serial Bus (USB) will represent a market of more than $1 billion, according to market-research company In-Stat. "USB will be the primary connection for human-interface ICs and peripherals," says Scott Hudson, senior analyst for Cahners In-Stat Group's PC Technology Service. "Because you can integrate USB technology into microcontrollers and other ICs, new competition with potential market shift will occur."
6© 2001 SPYRUS, Inc.
USB Pros and ConsUSB Pros and Cons
Pros No IRQ or memory window constraints Supports up to 127 devices Faster
USB 1.1 (12 Mbits/s) USB 2.0 (480 Mbits/s)
Parallel and Serial devices being removed from newer notebooks
Cons No Microsoft support for Windows NT Very limited support for Windows 95 Connectors are often on the back of the PC
7© 2001 SPYRUS, Inc.
The Need for SpeedThe Need for Speed
Serial port: 115kbits/s (.115Mbits/s)Standard parallel port: 115kBYTES/s (.115MBYTES/s)USB 1.1: 12Mbits/s (1.5MBYTES/s)ECP/EPP parallel port: 3MBYTES/sIDE: 3.3-16.7MBYTES/sSCSI-1: 5MBYTES/sSCSI-2 (Fast SCSI, Fast Narrow SCSI): 10MBYTES/sFast Wide SCSI (Wide SCSI): 20MBYTES/sUltra SCSI (SCSI-3, Fast-20, Ultra Narrow): 20MBYTES/sUltraIDE: 33MBYTES/sWide Ultra SCSI (Fast Wide 20): 40MBYTES/sUltra2 SCSI: 40MBYTES/sIEEE-1394: 100-400Mbits/s (12.5--50MBYTES/s)USB 2.0: 480Mbits/sWide Ultra2 SCSI: 80MBYTES/sUltra3 SCSI: 80MBYTES/sWide Ultra3 SCSI: 160MBYTES/sFC-AL Fiber Channel: 100-400MBYTES/s
8© 2001 SPYRUS, Inc.
USB Crypto TokensUSB Crypto Tokens
New type of USB deviceHybrid of smart card and USB deviceDirect connect
USB devices are typically connected via a cable Board mounted USB connectors are not USB
certified yet Often requires an A-to-A extension cable
Not approved by USB organization
9© 2001 SPYRUS, Inc.
Example Device: Rosetta USBExample Device: Rosetta USB
USB 1.1 interface
Internal LED forvisual status
Sturdy key-ring holeFIPS 140-1 Level 3 Design
10© 2001 SPYRUS, Inc.
Drive for USB TokensDrive for USB Tokens
Lower deployment costsNo reader requiredEasier install
More functionality possible than smart card
Durability More rugged if unit encapsulated
11© 2001 SPYRUS, Inc.
Rosetta USB FeaturesRosetta USB Features
Uses same SPYCOS chip as Rosetta Smart CardHigh Assurance
FIPS 140-1 Certified
Algorithm Agile RSA, DSA, DES, 3DES, etc.
Standards Support
12© 2001 SPYRUS, Inc.
High AssuranceHigh Assurance
FIPS 140-1 Level 2 Certified ITSEC E4 High certified processor DPA Resistant
Prevents exploitation of private keys through timing or power analysis
NSA tested SPYCOS chip for 6 weeks
13© 2001 SPYRUS, Inc.
Middleware is necessary to provide the glue between an application and the tokenPKCS#11 Support
Netscape Browser and Mail
CSP Support IE 5, Outlook 98+, Win 2000 Smart Card Logon
Plug and Play?Plug and Play?
SPEX/ Library
PKCS#11 CSP
SWF
APPLICATION
14© 2001 SPYRUS, Inc.
SummarySummary
USB Security Tokens Offer:High Assurance
FIPS 140-1 ITSEC Common Criteria
Lower Deployment CostsMore DurableInteroperable