Trust This: Microsoft Tries To Secure Windows

Trusted computing isn't an oxymoron. Although very few business-technology executives have ever seen one, trusted and secure computer operating systems do exist. And if Microsoft has its way, there may be a little more trust on every desktop one day.

Businesses and government agencies have longed for an easy-to-use, trusted operating system that's extremely difficult for hackers to crack and limits the damage if they do break in. However, security managers say existing trusted operating systems such as Trusted Solaris and Hewlett-Packard's Virtual Vault are too expensive and often fail to run many applications properly.

Microsoft hopes to change that with an effort called Palladium, which is designed to bring a higher level of security to future versions of Windows. Palladium won't be a trusted operating system but an add-on to Windows.

"What's unique here is that Palladium won't change the existing Windows environment," says project manager Mario Juarez. Palladium will provide a fenced-off area in which applications can run and documents can be stored without being affected by viruses or hackers. In effect, Microsoft is creating an operating system that's part trusted and part Windows. "There will be a new space for protecting the run-time environment, and security for secure processing, the storing of secrets, and the safe isolation of memory," Juarez says. "Palladium will enable new kinds of security and integrity side by side with Windows."

Juarez says Palladium will create "chains of trust" between Palladium software, a PC's hardware, applications, and documents. Only "trusted" applications, specifically written to take advantage of Palladium's security features, will be permitted to access Palladium applications or documents. As a result, Juarez says, users will be assured that their applications and data won't be destroyed by viruses or their credit-card and personal information hijacked by fraudulent Web sites. In addition, content developers will produce movies, books, and music protected by Palladium.

Palladium won't affect the market for many years. Microsoft must work with hardware developers such as Intel to design the required hardware and convince application developers to start writing software that utilizes Palladium.

Return to main story, "Future Security"