prpl Foundation Announces Formation of Security Working Group to Define Open Framework Addressing Next-Generation Security Requirements of Future Connected Devices
The formation of the Security PEG follows months of intensive planning by a subset of prpl members dedicated to defining an open security framework for deploying secured and authenticated virtualized services in the IoT and related emerging markets.
SANTA CLARA, CA – The prpl Foundation, an open-source non-profit foundation focused on enabling next-generation datacenter-to-device portable software and virtualized architectures, today announced the formal organization of its Security PEG (prpl Engineering Group). The formation of the Security PEG follows months of intensive planning by a subset of prpl members dedicated to defining an open security framework for deploying secured and authenticated virtualized services in the IoT and related emerging markets.
Founding members of the Security PEG include Broadcom, CUPP Computing, Elliptic Technologies, Ikanos, Imagination Technologies, Imperas Software, Ingenic, Kernkonzept, Lantiq (recently acquired by Intel, subject to customary regulatory approvals), Qualcomm Atheros, Inc., a subsidiary of Qualcomm Incorporated, Seltech, and others. Each company will contribute members to the Security PEG and its ongoing development efforts.
“There is keen interest from companies in a variety of vertical segments in the concept of using hardware-assisted virtualization to provide multiple independent secure domains that are isolated from one another for security, reliability, and ease-of development and deployment purposes,” said Art Swift, president of the prpl Foundation.
The new Security PEG will define a security roadmap to get from today’s software-virtualized solutions to full hardware supported virtualization, enabling multi-domain security across processors (CPUs, GPUs, NPUs), heterogeneous SoCs and systems built on these technologies including connected devices, routers and hubs. In addition, the Security PEG will define necessary open APIs (application programming interfaces) for various levels of the security stack.
“Secure deployment of multi-domain virtualized services on heterogeneous SoC platforms such as those using our MIPS CPUs and PowerVR GPUs and other processors will become critically important in the IoT, consumer multimedia and other emerging markets," says Tony King Smith, EVP-Marketing, Imagination Technologies."Existing two-zone security solutions will not be sufficient; multi-zone deployments will become essential and commonplace. Companies need a foundation of certainty on which to build their applications and services that is future-proof and tackles the real-world issues. prpl provides the perfect forum for collaboration to achieve a portable, scalable solution for all stakeholders.”
Swift said there are “several use cases” that could see immediate benefit from multi-domain virtualization-based security, including:
Isolating the broadcast stack from the Android UI and over-the-top streamed content in home gateways and set top boxes
Provisioning secure services for home IoT, to enable ease of development and deployment of cloud- and end-point implementations
Hardware-assisted isolation of multiple secure data types (health, payments, multimedia content, profiles) in rich operating systems such as Linux and Android in smartphones, tablets, wearables, automobiles, set-top boxes, and IPTV
Any system involving highly integrated system-on-chip (SoC) designs that require advanced virtualization technologies
The formation of the prpl Security PEG closely follows the formation of the prplWrt PEG, which is committed to a close collaboration between users, hardware manufacturers, semiconductor companies, and the broader OpenWrt ecosystem to create technology enhancements that support a robust, flexible open source platform suitable for mission critical, highly reliable products using a wide variety of hardware platforms.
prpl (pronounced “Purple”) is an open-source, non-profit foundation focused on enabling next-generation datacenter-to-device portable software and virtualized architectures.
prpl represents leaders in the technology industry investing in innovation in efficiency, portability and compatibility for the good of a broad community of developers, businesses and consumers.