Giesecke & Devrient and ARM Protect Mobile Applications From Data Theft

MUNICH, GERMANY AND CAMBRIDGE, UK – February 3, 2010 – ARM, and the specialist for security technology Giesecke & Devrient (G&D) today announced a strategic partnership for the development of highly-secure mobile phone platforms. Through the combination of ARM®TrustZone® technology, which creates a protected area in advanced systems-on-chip, and the highly-secure Mobicore operating system developed by G&D, sensitive applications such as electronic payment and online banking via mobile phone will be efficiently protected from security threats. As a first step the two companies will develop a joint prototype.

“We will be working with ARM to develop the security architecture for the next generation of mobile phones. This will enable people to access highly valuable services with convenience and security,” explains Dr. Kai Grassie, head of the New Business division at G&D.

“ARM TrustZone technology is already an integral part of the ARM Cortex™-A series processors which are currently being deployed in smartphones by many of the industry’s leading handset manufacturers,” said Ian Drew, executive vice president, Marketing, ARM. “This collaboration with G&D will enable us to make rapid progress towards enabling secure transactions in next-generation mobile devices.”

Acceptance of mobile applications such as banking, ticketing and payment solutions rests on the security of device and background systems involved. For this reason, both companies have been working on innovative security concepts.

The interplay of TrustZone and Mobicore ensures that if online services require security-sensitive functions such as entry of user name and password or data output on a display, these functions are transferred to the Mobicore high-security operating system running in the TrustZone protected area of an ARM application processor. As the security-sensitive functions are executed, Mobicore maintains control of the secure area of a system-on-chip. Users can therefore be certain that the data they have entered, such as their username and password, cannot be manipulated by malware on the phone during a payment transaction.

ARM is also creating a range of training and architectural service packages based around a TrustZone / MobiCore reference system which will help reduce time-to-market for secure embedded system development. ARM will release its first secure system training course based around hardware system integration and the TrustZone API next month. This will be followed by an ARM Active Assist on-site design review service package, a secure systems development training package based on Mobicore, the release of the TrustZone Address Space Controller to secure multiple regions in off-chip memory and the TrustZone reference system later in the year.

ARM and G&D will present their joint concepts at the Mobile World Congress from February 15 to 18, 2010, in Barcelona.

About ARM

ARM designs the technology that lies at the heart of advanced digital products, from wireless, networking and consumer entertainment solutions to imaging, automotive, security and storage devices. ARM’s comprehensive product offering includes 32-bit RISC microprocessors, graphics processors, video engines, enabling software, cell libraries, embedded memories, high-speed connectivity products, peripherals and development tools. Combined with comprehensive design services, training, support and maintenance, and the company’s broad Partner community, they provide a total system solution that offers a fast, reliable path to market for leading electronics companies. More information on ARM is available at http://www.arm.com.

About Giesecke & Devrient

Giesecke & Devrient (G&D) is a leading international technology provider headquartered in Munich, Germany . With a headcount of around 10,000 employees, the Group generated sales of EUR 1.7 billion in fiscal 2008. Founded in 1852, G&D is a global market leader and pioneering innovator in banknote production and processing, smart card solutions for telecommunications and electronic payment, and security documents and identification systems. Over 49 subsidiaries and joint ventures across 30 countries ensure customer proximity worldwide. For more information, visit our website at: www.gi-de.com.