Fujitsu eyes enterprise security with HTML5 app platform
- 24 January, 2013 21:53
- Comments
Engineers at Fujitsu Laboratories are developing an HTML 5-based platform for smartphones that designed to keep corporate data secure when accessed from employee-owned handsets.
The system, which Fujitsu plans to launch later this year, is one of a number that addresses this increasingly common problem: how to allow workers access to corporate IT systems while avoiding deliberate or inadvertent leaks of data from devices that are not totally under the company's control.
Fujitsu's system matches an app on the phone with a cloud-based server that delivers corporate apps such as email, sales databases and customer contacts, as HTML 5 applications.
The phone app senses whether it's in the workplace or not and therefore whether it has access to corporate data. The cloud apps are delivered over an encrypted connection to the handset, which runs them inside a secure application environment on the phone.
As soon as the employee leaves the workplace, the cloud connection is severed and the corporate apps are no longer accessible. And because they ran in the application environment, the phone doesn't contain any remnants of their use, such as cookies or temporary data files, said Kazuaki Nimura, a research manager at the smart platform laboratory of Fujitsu Laboratories.
At an event in Silicon Valley on Thursday, Nimura demonstrated the system running on both an iPhone and Android handset. Each mobile OS requires a native app to run the execution environment, but the HTML 5 cloud apps will run across all platforms.
In the demonstration, access to the corporate apps was enabled in the iPhone when it came within reach of a simulated company Wi-Fi signal, while the Android phone had the option of being switched on by either Wi-Fi detection or through a tap on an NFC (near field communication) card.
As soon as the phones detected the network or NFC card, they switched to work mode, which brought up a new home screen with different set of apps. While in work mode, access to personal apps could be determined by a company security policy, said Nimura.
In the demonstration, work mode also disabled the phone's camera.
When the phone lost the network connection or tapped on the NFC card, it was returned to its conventional home screen and stricter corporate security policies were removed.
The same system could also be used to deliver corporate apps to workers outside of the office, maintaining the security policies in place for access and use of the data.
Fujitsu hopes to release the technology as its Mobile Enterprise Application Platform later this year.
Martyn Williams covers mobile telecoms, Silicon Valley and general technology breaking news for The IDG News Service. Follow Martyn on Twitter at @martyn_williams. Martyn's e-mail address is martyn_williams@idg.com
Recommended
Join the CIO Australia group on LinkedIn. The group is open to CIOs, IT Directors, COOs, CTOs and senior IT managers.
- Bookmark this page
- Share this article
- Got more on this story? Email CIO
- Follow CIO on twitter
-
Larry Page wants to see your medical records
-
Dual-Persona Smartphones Not a BYOD Panacea
-
After two-year hiatus, EFF accepts bitcoin donations again
-
CIOs struggle to deliver timely mobile business apps: survey
-
Spiceworks' free management software gets integrated MDM
-
Deploying Flash in the Enterprise
Flash is quickly emerging as the preferred way to overcome the nagging performance limitations of hard disk drives. However, because flash comes at a significant price premium, outright replacement of HDDs with flash only makes sense in situations in which capacity requirements are relatively small and performance requirements are high. Learn how deployment approaches-including hybrid storage arrays, server flash, and all-flash arrays-that combine the performance of flash with the capacity of HDDs can be cost effective for a broad range of performance requirements. -
Detecting APT Activity with Network Traffic Analysis
Today’s successful targeted attacks use a combination of social engineering, malware, and backdoor activities. This research paper will discuss how advanced detection techniques can be used to identify malware command-and control (C&C) communications related to these attacks, illustrating how even the most high-profile and successful attacks of the past few years could have been discovered. -
Advanced Targeted Attacks
The new threat landscape has changed. Cybercriminals are aggressively pursuing valuable data assets, such as financial transaction information, product design blueprints, user credentials to sensitive systems, and other intellectual property. Simply put, the cyber offense has outpaced the defensive technologies used by most companies today. Find out more on how to protect against the next generation of cyber-attacks.
Get exclusive access to Invitation only events CIO, reports & analysis. 
