Mobile Feature Pack to Upgrade Security
Here's the scenario: Your scatterbrained Human Resources director has once
again left his PDA in a cab. On his PDA is salary information, Social Security
numbers and other highly sensitive information for every single employee in
your organization. Imagining an unscrupulous cabbie or passenger abusing that
information has you in a cold sweat.
According to Microsoft, if you have the Messaging and Security Feature Pack
for Windows Mobile 5.0, this nightmare can be avoided. The ability to remotely
wipe the hard drive of a device that's in danger of being compromised is one
of the enhancements to its mobile operating system, due out this fall.
The feature pack works with Exchange Server 2003 Service Pack 2, due around
the same time. It's part of Microsoft's effort to win over users of mobile devices
like the RIM BlackBerry, using similar "push" technology to move data to PDAs,
cell phones and other handheld units. (Microsoft has confirmed that the feature
pack will not be backwards compatible, so it won't be available to environments
running previous versions of Exchange.)
Microsoft touted some other enhancements of the feature pack, including the
ability to look up global address information on a wireless device, and manage
and enforce corporate IT policy over the air. John Starkweather, a senior product
manager for Windows Mobile, said there's a huge untapped market for the advantages
offered by the feature pack. There are between 130 million and 140 million Exchange
users worldwide, he estimated. By contrast, only about 20 million people use
mobile e-mail in any form.
Although that number is relatively small, it appears the market has embraced
the promise of mobile computing; Starkweather said there are currently about
40 OEMs building Windows Mobile devices today. One advantage they have over
non-Windows mobile developers is the simplicity of the system. Windows Mobile
uses a direct IP connection from Exchange to the device, cutting out middleware
and other servers used in a multi-tiered environment like BlackBerry. The data
sent between the device and Exchange is encrypted for security. That simplicity,
Microsoft hopes, will also lead to reduced hardware and software costs.
Cutting out the extra layers seems to speed up communications; a Microsoft
demo showed a PDA synching with Exchange and pulling down e-mail, calendar,
contact and other information in just seconds.
At its TechEd announcement of the feature pack, though, the focus was clearly
on the security aspects of the update, in recognition of the public and IT's
continuing wariness of Microsoft's track record on security when it comes to
new products. The biggest security threat with mobile devices, Starkweather
said, is "someone leaving the device somewhere."
But another common security threat is not an issue for Microsoft mobile devices—at
least so far. Starkweather said there has never been a successful attack on
a mobile phone using a Windows OS.
Keith Ward is the editor in chief of Virtualization Review.