IBM has unveiled the IBM Z, a next generation transaction system capable of running more than 12 billion encrypted transactions per day and making it possible to encrypt data associated with any application, cloud service or database all the time.
IBM Z’s new data encryption capabilities are designed to address the global epidemic of data breaches, a major factor in the $8 trillion cybercrime impact on the global economy by 2022 Of the more than nine billion data records lost or stolen since 2013, only four percent were encrypted, making the majority of such data vulnerable to organized cybercrime rings, state actors and employees misusing access to sensitive information.
In the most significant re-positioning of mainframe technology in more than a decade, when the platform embraced Linux and open source software, IBM Z now dramatically expands the protective cryptographic umbrella of the world’s most advanced encryption technology and key protection. The system’s advanced cryptographic capability now extends across any data, networks, external devices or entire applications – such as the IBM Cloud Blockchain service – with no application changes and no impact on business service level agreements.
“The vast majority of stolen or leaked data today is in the open and easy to use because encryption has been very difficult and expensive to do at scale,” said Ross Mauri, General Manager, IBM Z. “We have created a data protection engine for the cloud era to have a significant and immediate impact on global data security.”
Technology Breakthrough: Industry-First Pervasive Encryption for the Cloud Era
A recent study found that extensive use of encryption is a top factor in reducing the business impact and cost of a data breach. To put that in context, the IBM X-Force Threat Intelligence Index reported that more than four billion records were leaked in 2016 (a 556 percent increase from 2015).
However, encryption is often largely absent in corporate and cloud data centers because current solutions for data encryption in x86 environments can dramatically degrade performance (and thus user experience), and can be too complex and expensive to manage. As a result, only about two percent of corporate data is encrypted today, while more than 80 percent of mobile device data is encrypted.
IBM Z pervasive encryption reflects a call to action on data protection articulated by Chief Information Security Officers and data security experts worldwide, and more than 150 IBM clients around the world who participated and provided feedback in IBM Z’s system design over three years.
As a result of this collaboration, IBM Z brings significant advances in cryptography technology, building on a proven encryption platform that safeguards the world’s banking, healthcare, government and retail systems. IBM Z pervasive encryption delivers breakthroughs including:
· Pervasive encryption of data – all the time. IBM Z makes it possible, for the first time, for organizations to pervasively encrypt data associated with an entire application, cloud service or database in flight or at rest with one click. The standard practice today is to encrypt small chunks of data at a time, and invest significant labor to select and manage individual fields. This bulk encryption at cloud scale is made possible by a massive 7x increase in cryptographic performance over the previous generation z13 – driven by a 4x increase in silicon dedicated to cryptographic algorithms. This is 18x faster compared to x86 systems (that today only focus on limited slices of data) and at just five percent of the cost compared to x86-based solutions.
· Tamper-responding encryption keys. A top concern for organizations is protection of encryption keys. In large organizations, hackers often target encryption keys, which are routinely exposed in memory as they are used. Only IBM Z can protect millions of keys (as well as the process of accessing, generating and recycling them) in “tamper responding” hardware that causes keys to be invalidated at any sign of intrusion and can then be reconstituted in safety. The IBM Z key management system is designed to meet Federal Information Processing Standards (FIPS) Level 4 standards, where the norm for high security in the industry is Level 2. This IBM Z capability can be extended beyond the mainframe to other devices, such as storage systems and servers in the cloud. In addition, IBM Secure Service Container protects against insider threats from contractors and privileged users, provides automatic encryption of data and code in-flight and at-rest, and tamper-resistance during installation and runtime.
· Encrypted APIs. IBM z/OS Connect technologies can make it easy for cloud developers to discover and call any IBM Z application or data from a cloud service, or for IBM Z developers to call any cloud service. IBM Z now allows organizations to encrypt these APIs – the digital glue that links services, applications and systems – nearly 3x faster compared to alternatives based on x86 systems.
“The pervasive encryption that is built into, and is designed to extend beyond, the new IBM Z really makes this the first system with an all-encompassing solution to the security threats and breaches we’ve been witnessing in the past 24 months,” said Peter Rutten, analyst at IDC’s Servers and Compute Platforms Group.
IBM Z, deeply integrated with IBM Security software, automates and dramatically streamline security and compliance processes. For example, auditors are expected to manually inspect and validate the security of databases, applications and systems. Organizations can now immediately demonstrate that data within of scope of compliance is protected and the keys are secure. This can significantly reduce the mounting complexity and cost of compliance for auditors. The system also provides an audit trail showing if and when permissioned insiders accessed data.
New: Predictable and Transparent Container Pricing
IBM also announced three groundbreaking new Container Pricing models for IBM Z, providing clients greatly simplified software pricing that combines flexible deployment with competitive economics vs. public clouds and on-premises x86 environments:
· New microservices and applications that enable clients to maximize the value from security-rich on-premises enterprise systems in real time. Clients can now co-locate applications to optimize qualities of services that are priced competitively with public cloud and on-premises platforms.
• Application development and test with the freedom to triple capacity of all development environments on z/OS to support latest DevOps tooling and processes. Clients can triple capacity with no increase in monthly license charge.
• Payment systems pricing based on the business metric of payments volume a bank processes, not the available capacity. This gives clients much greater flexibility to innovate affordably in a competitive environment, particularly in the fast-growing Instant Payment segment.
These precedent-setting Container Pricing options are designed to give clients the predictability and transparency they require for their business. The pricing models are scalable both within and across logical partitions (LPARs) and deliver greatly enhanced metering, capping and billing capabilities. Container Pricing for IBM Z is planned to be available by year-end 2017 and enabled in z/OS V2.2 and z/OS V2.3.
The Most Powerful Transaction System for the Cloud Era
IBM Z builds on the capabilities of the world’s most powerful transaction engine at the center of global commerce today supporting:
· 87 percent of all credit card transactions and nearly $8 trillion payments a year.
· 29 billion ATM transactions each year, worth nearly $5 billion per day.
· Four billion passenger flights each year.
· More than 30 billion transactions per day – more than the number of Google searches every day.
· 68 percent of the world’s production workloads at only six percent of the total IT cost.
Banks and others in the financial services industry process thousands of transactions per second to keep the world’s financial systems running. The mainframe is more critical than ever for reliably handling high volumes of transaction data.
Ninety-two of the world’s top 100 banks rely on the IBM mainframe because of its ability to efficiently process huge volumes of transactions. To help financial services organizations more effectively compete in the cloud era, enormous amounts of sensitive data produced by transactions can now be better protected against fraud and cybercrime, analyzed, and monetized using IBM Z – without causing disruption of day-to-day operations. For banks, this means encryption at the click of a button — even while applications are running — and the ability to migrate data from unencrypted to encrypted with no impact to service level agreements.
The IBM Z, the next generation of IBM’s industry-leading CMOS mainframe technology, features the industry’s fastest microprocessor, running at 5.2GHz, and a new scalable system structure that delivers up to a 35 percent capacity increase for traditional workloads and up to a 35 percent capacity increase for Linux workloads compared to the previous generation IBM z13. The system can support:
· More than 12 billion encrypted transactions per day on a single system.
· The world’s largest MongoDB instance with 2.5x faster NodeJS performance than x86-based platforms.
· Two million Docker Containers.
· 1,000 concurrent NoSQL databases.
Other new capabilities announced today include:
· Three times the memory of the z13 for faster response times, greater throughput and accelerated analytics performance. With 32TB of memory, IBM Z offers one of the largest memory footprints in the industry.
· Three times faster I/O and accelerated transaction processing compared to the z13 to drive growth in data, transaction throughput and lower response time.
· The ability to run Java workloads 50 percent faster than x86 alternatives.
· Industry-leading Storage Area Network response time with zHyperLink, delivering 10x latency reduction compared to the z13 and cutting application response time in half – enabling businesses to do much more work such as real-time analytics or interact with Internet of Things (IoT) devices and cloud applications within the same transaction, without changing a single line of application code..
As part of today’s announcement, IBM also previewed new z/OS software that provides foundational capabilities for private cloud service delivery, enabling a transformation from an IT cost center to a value-generating service provider. When available, these capabilities will include the support of workflow extensions for IBM Cloud Provisioning and Management for z/OS and real-time SMF analytics infrastructure support.
IBM Global Financing can help credit-qualified clients acquire the new IBM Z, lower their total cost of ownership, and accelerate return on investment. IBM Global Financing offerings for IBM mainframe solutions are available from IBM and IBM Business Partners, and provide flexible terms and conditions that can be customized to align cost to project benefits or other client needs.
Samsung S10 in lock-step with its rivals?
Tonight Samsung will kick off the next round in the smartphone wars with the S10 range, writes ARTHUR GOLDSTUCK.
When Samsung unveils the new S10 smartphone at an event in San Francisco today, it will mark the beginning of the 2019 round of World War S. That stands for smartphone wars, although Samsung would like it to be all about the S.
Ever since the launch of the Samsung Galaxy S4 in 2013, Samsung has held both technology and thought leadership in the handset world. Back then, Apple’s iPhone 5 was the last device from the American manufacturer that could lay claim to being the best smartphone in the world. With the 2013 launch of the iPhone 5s, Apple entered an era of incremental improvement, playing catch-up, and succumbing to market trends driven by its competitors.
Six years later, Samsung is fighting off the same threat. Its Chinese rival, Huawei, suddenly wrested away leadership in the past year, with the P20 Pro and Mate 20 Pro regarded as at last equal to the Samsung Galaxy S9 Plus and Galaxy Note 9 – if not superior. Certainly, from a cost perspective, Huawei took the lead with its more competitive prices, and therefore more value for money.
Huawei also succeeded where Apple failed: introducing more economical versions of its flagship phones. The iPhone 5c, SE and XR have all been disappointments in the sales department, mainly because the price difference was not massive enough to attract lower-income users. In contrast, the Lite editions of the Huawei P9, P10 and P20 have been huge successes, especially in South Africa.
Today, for the first time in half a decade, Samsung goes into battle on a field laid out by its competitors. It is expected to launch the Galaxy S10 Plus, S10 and S10 e, with the latter being the Samsung answer to the strategy of the iPhone XR and Huawei P20 Lite.
Does this mean Samsung is now in lock-step with its rivals, focused on matching their strategies rather than running ahead of them?
It may seem that way, but Samsung has a few tricks up its electronic sleeve. For example, it is possible it will use the S10 launch to announce its coming range of foldable phones, expected to be called the Galaxy X, Galaxy F, Galaxy Fold or Galaxy Flex. It previewed the technology at a developer conference in San Francisco last November, and this will be the ideal moment to reclaim technology leadership by going into production with foldables – even if the S10 range itself does not shoot out the lights.
However, the S10 handsets will look very different to their predecessors. First, before switching on the phone, they will be notable by the introduction of what is being called the punch-hole display, which breaks away from the current trend of having a notch at the top of the phone to house front-facing cameras and speakers. Instead, the punch-hole is a single round cut-out that will contain the front camera. It is the key element of Samsung’s “Infinity O” display – the O represents the punchhole – which will be the first truly edge-to-edge display, on the sides and top.
The S10 range will use the new Samsung user interface, One UI, also unveiled at the developer conference. It replaces the previous “skin”, unimaginatively called the Samsung Experience, to introduce a strong new interface brand.
One UI went live on the Note 8 last month, giving us a foretaste, and giving Samsung a chance to iron out the bugs in the field. It is a less cluttered interface, addressing one of the biggest complaints about most manufacturer skins. Only Nokia and Google Pixel handsets offer pure Android in the local market, but One UI is Samsung’s best compromise yet.
It introduces a new interaction area, in the bottom half, reachable with the thumb, with a viewing area at the top, allowing the user to work one-handed on the bottom area while still having apps or related content visible above. One UI also improves gesture navigation – the phone picks up hand movements without being touched – and notification management.
The S10 range will be the first phones to feature the latest Qualcomm Snapdragon 855 chip, at least for the South African and American markets. That makes it 5G compatible, for when this next generation of mobile broadband becomes available in these markets.
They will also be the first phones to feature Wi-Fi 6, the next generation of the Wi-Fi mobile wireless standard. It will perform better in congested areas, and data transfer will be up to 40% faster than the previous generation.
The phones will be the first to use ultrasound for fingerprint detection. If Samsung gets it right, this will make it the fastest in-screen fingerprint sensor on the market, and allows for a little leeway if one pushes the finger down slightly outside the fingerprint reader surface. It does mean, however, that screen protectors will have to be redesigned to avoid blocking the detection.
Not enough firsts? There are a few more.
Most notably, it will be the first phone range to feature 1 Terabyte (TB) storage – that’s a thousand Gigabytes (GB) – at least for the top-of-the-range devices. Samsung last month announced that it would be the first manufacturer to make 1TB built-in onboard flash storage. Today, it will deploy this massive advantage as it once again weaponises its technology in the fight for smartphone domination.
- Arthur Goldstuck is founder of World Wide Worx and editor-in-chief of Gadget.co.za. Follow him on Twitter and Instagram on @art2gee
IoT set to improve authentication
By Sherry Zameer, Senior Vice President, Internet of Things Solutions for CISMEA region at Gemalto
As it rapidly approaches maturity, the Internet of Things (IoT) is set to continue a transformational trajectory, introducing new efficiencies in multiple fields by allowing measurement and analysis on a scale that has never been possible before. From agriculture to logistics, from retail to hospitality, from traffic to health, from the home to the office, the applications for monitoring ”things” are limited only by the imagination.
And South African (and African) businesses are showing abundant imagination in their practical deployments of IoT solutions in multiple settings, creating a better tomorrow through almost universal measurement and the introduction of new levels of convenience – including how to access locations, devices and services securely.
Any company, whether South African or international, should bear in mind that understanding consumer expectations can be the key to unlocking the full potential of IoT devices and related smart services.
According to Gemalto’s latest Connected Living study, improving the way consumers authenticate themselves to services is one of the most anticipated benefits of IoT, highlighting a desire for a more seamless and secure IoT experience.
Consumers are interested in advanced ways of authenticating themselves through automatic (based on behavioral patterns) or biometric techniques, lessening the need to have to intervene manually, all in the name of a much more streamlined authentication process. Smartphone manufacturers like Apple and Samsung have already placed fingerprint and facial recognition high on the agenda. There is also a widespread positive sentiment towards IoT’s potential for improving the quality of home life through connected, smart appliances.
Personalised services is something else that wins consumers over. In fact, a fluid, personalised and unified experience with continuity of services, together with security and privacy, is critical for the successful implementation of any technology.
And those types of services are today quite possible. With everything being connected – from small gadgets to digital solutions for large enterprises – IoT is no longer just a buzzword. That much is clear in a piece from Vodacom IoT managing executive Deon Liebenberg. Writing for IOL Online, Liebenberg provides insight into the sheer range of applications for IoT: the 20 use cases he cites range from the obvious, like transport and logistics, to the connected home and wearables; he even suggests tagging pets with IoT transmitters, for those who always need to know the whereabouts of the family cat.
Low-cost tags fitted to cats, dogs, lamp posts, shipping containers or other items are just one part of the puzzle, however. There are other two pieces; arguably the most complex part is the availability of communication networks in areas where there aren’t any WiFi networks, or indeed, anything else.
And that’s where the bigger takeaway from Liebenberg’s piece and other IoT trends articles becomes apparent. The communication networks are there, as are those tags: dedicated IoT networks (like LoraWAN, SigFox and narrowband IoT) are all available in South Africa.
So, too, is the third and final essential component. Software which is able to process the data generated by the tag and transmitted over the IoT network and into the internet. In this regard, there’s no shortage of solutions available from cloud providers like AWS and Azure; electronics giant Siemens, too, is in on the action, having recently launched a new cloud-based IoT operating system to develop applications and services for process industries, including oil and gas and water management.
This combination means it is quite possible right now to enable just about any use case. Business owners, who will know best how IoT can add value in their organisation, can now see their ideas becoming reality. Most crucial of all, IoT solutions delivering new levels of efficiency and convenience are not only possible, they are able to be offered with the simple and effective security that will drive consumer acceptance.