Security Co-processor

National Semiconductor's SafeKeeper security co-processor is a basic building block for securing data, authenticating users and checking the status of a system's hardware. The PC21100 trusted platform module (TPM) is the first of several co-processors with enhanced security functionality that supports version 1.1 of the Trusted Computing Platform Alliance (TCPA) security specification.

The co-processor provides protected storage of cryptographic and sensitive data, authenticates a host computing device by verifying its identity to other computing devices, and supplies metrics that provide a reliable and trusted network environment. It acts as a root of trust, a dependable block that can report the security status of the rest of the system. Since it is hardware-based, it is not vulnerable to attacks like conventional software-only solutions.

The TPM is the most basic building block of the TCPA security specification. It is not accessible by the host CPU except through formalised methods and is secured by industry standard cryptographic techniques. It consists of a processor, memory, peripherals, cryptographic accelerators and embedded firmware to implement the TCPA security function. It resides on the LPC bus and includes embedded RISC core technology, flash memory for secured information storage and a cryptographic accelerator that supports the core. It also generates cryptographic key pairs, one public and another private, that form the basis of encryption algorithms like RSA, and it holds the private key confidential and is able to hash data without burdening the host processor.

In addition, the TPM integrates a variety of system functions, enabling implementation of a highly secure system. The availability of an ultra thin (0.8 mm) LLP package along with power management also make it suitable for portable applications. Included with the device is a software suite that includes embedded firmware, BIOS drivers and a host stack. The TCPA compliant family of security co-processors help protect information from unauthorised users, stop unwanted intervention or observation, reduce virus attacks, add reliability for transactions and communications, and increase privacy.