Next-Generation Secure Computing Base (NGSCB)*

Abstract

In June 2002, Microsoft released information regarding its new initiative named as "Palladium". Palladium is a system which combines
hardware and software controls to create a "trusted" computing platform. In doing so, Palladium would establish an unprecedented level of control over users and their computers. It could place Microsoft as the gatekeeper of authentication and identification. Apart from this, it is also provide systems embedded in both software and hardware would control access to content, thereby creating ubiquitous Digital Rights Management schemes that can track users and control use of media. Microsoft believes to have elements of this system in place in the year 2004. Later, Microsoft called it NEXT-GENERATION SECURE COMPUTING BASE. Here Microsoft is try building a trustworthy computing environment to help customers realize their full potential. From the start of this initiative, Microsoft's vision has been to create new security technology for the Microsoft Windows platform that uses a unique hardware and software design to give people new kinds of security and privacy protections in an interconnected world1. The vision of Microsoft has not changed. Their original approach was to create a new secure computing base that would run parallel to the regular environment of windows. This environment would provide features such as sealed storage, strong process isolation, secure path to and from the user and attestation. This approach would have required that the applications be rewritten to take advantage of the new secure computing base. In this paper we will be discussing the design goals and implementation of ‘NGSCB’. Later we will see the advantages and criticism of it.