Mobile device security is a hot topic these days as users are doing a lot more with their smartphones in terms of payments, bank transactions, and secure messages. Industries and individuals alike want to know how to keep their data safe and their personal information private when using mobile devices. Keeping tab on these requirements, Qualcomm Technologies worked to make the Snapdragon 820 the first, mobile system-on-a-chip (SoC) to receive FIPS 140-2 Level 2 HW certification.
What is FIPS 140-2 Level 2 Certification?
Cryptographic modules are responsible for cryptographic functions, such as encryption, digital signatures, and authentication methods. Information protected by the cryptographic module, including passwords, personal biometric information, mobile payments, and secure communications, is well guarded.
While FIPS 140-2 Level 1 certification focuses on a standard level of compliance, Level 2 concentrates on a tougher authentication implementation and physical protection of the plaintext cryptographic keys and critical security parameters within the module. To meet the requirement, modules need to have tamper-evident seals or pick-resistant locks that are designed to prevent clever hackers from stealing information.
These additional mechanisms are engineered to support an increased level of security that is needed for important and valuable personal data on a device. Data that began with the protection of simple passwords is now expanding to include protection of things like an individual’s fingerprint or iris.
What this means?
The U.S. FIPS Level 2 HW certification is an important component for OEMs that hope to achieve the global Common Criteria EAL2 and higher certification. Incorporating a module with multiple levels of FIPS 140-2 certification also enables OEMs to qualify for additional business opportunities, including government contracts that need to standardise purchases across numerous branches, automobile contracts that want to enhance overall security practices, and healthcare devices.
The certification will also help customers recognise products based on a higher level of security. And for end users, if your device has the 820 in it, would mean you are quite well protected.
