aptop bypasses the pre-OS authentication screen for the encryption application.
Intel® Anti-Theft Technology (Intel® AT) closes that window of vulnerability and enforces pre-OS encryption by requiring that the user re-authenticate when the system resumes from S3. The user must enter his or her credentials within a predefined period of time before regaining access to the decrypted files. This feature is available on laptops with 2nd generation Intel® Core™ processors with vPro™ technology.
New in Intel® AT: Use a 3Gnetwork for PC lock down, reactivation, and location beaconing
With Intel® Anti-Theft Technology (Intel® AT), IT administrators can now use encrypted SMS messages over a 3G network to send a poison pill, remotely unlock a recovered laptop, or tell the system to send location information back to the central server.
- Poison pill delivery via an encrypted SMS message over a 3Gnetwork. Intel AT includes a direct hardware link between Intel AT and the 3G module. IT administrators can now take advantage of 3G connections to remotely and rapidly disable a laptop regardless of the state of the OS.
- Remote reactivation via an encrypted SMS message over a 3Gnetwork. IT administrators can now rapidly and easily reactivate a laptop within minutes after the system is recovered.
- Automated or on-request location beaconing. Intel AT version 3.0 can send location information back to the central server via an SMS message over a 3G network (the 3G card must support GPS and Intel AT 3.0). Location information can be sent as latitude and longitude or as a relay of a MAC address. IT administrators can now request the system’s location information to help with asset recovery. Beaconing can also be automated so that, after the laptop enters stolen mode, location information is sent back to the central server on a pre-determined schedule. Beaconing can be enabled only when the laptop is in stolen state, which protects the user’s privacy while the system is in normal mode but allows tracking if the system is stolen. Some ISVs may allow users to choose whether to enable Intel AT-based GPS beaconing for stolen laptops to help with asset recovery.
IT administrators can now respond rapidly and remotely to suspicious circumstances by communicating with Intel AT over a 3G-based network, regardless of the state of the OS.
Enhance higher-level security solutions
Working together, OS-based applications, BIOS-level solutions, and intelligent hardware design can greatly increase the overall security of a mobile device. The combination can also create opportunities for creative data-protection solutions (Table 1).
Improve security and compliance, reduce corporate risk and lower costs
Businesses are under increasing social and regulatory pressure to comply with data-security regulations. In today’s economy, they are also under increasing financial pressure to centralise and automate security and minimise post-incident costs. To address typical vulnerabilities in security solutions, IT administrators must take a layered approach. This means integrating robust OS- and BIOS-based security solutions with automated, intelligent policy-based technologies built into the laptop’s hardware.
Such an approach provides IT with both high-level and low-level data protection, as well as local and remote protection of expensive assets and sensitive data. With greater overall protection, businesses can improve compliance, minimise the risk of a data breach, and lower post-incident costs.
Important information: This content has been prepared without taking account of the objectives, financial situation or needs of any particular individual. It does not constitute formal advice. For this reason, any individual should, before acting, consider the appropriateness of the information, having regard to the individual’s objectives, financial situation and needs and, if necessary, seek appropriate professional advice.
Published on: Tuesday, October 04, 2011