Skip to main content
Message Font: Serif | Sans-Serif
 
No. of Recommendations: 0
Disclosure long on CERT for about a week. (mishedlo)
----------------------------------------------------------------------------That is positively prehistoric! Just kiddin'. Seriously, has anyone thought of an acronym that would help us remember the conditions necessary for gorillahood (like the example of CANSLIM). It would help gorilla seekers out on a safari a lot. :-) Stvfox
Print the post Back To Top
No. of Recommendations: 38
criteria:

Discontinuous innovation
Proprietary open architecture
Barriers to entry
Switching costs
Value chain
Tornado

mnemonic device:

Don't Pick BS Versus Truth

tekboy@godourlivesarepathetic.com
Print the post Back To Top
No. of Recommendations: 3
or I suppose one could use this one:

Dull Imaginations
Prefer Orangutans And
Bonobos To Elegant
Silverbacks Controlling
Valuable Collections of
Technology

tekboy@stop!stop!.com
Print the post Back To Top
No. of Recommendations: 0
Don't Pick BS Versus Truth. Sounds excellent to me and truly expresses the sentiment of this board. Thank you, Stvfox
Print the post Back To Top
No. of Recommendations: 1
I have not none full DD and I admit it.
However, I believe CERT has the patent on the next encryption software as the previous patents are about to expire.

Take a look at the companies hopping on the CERT bandwagon.

http://biz.yahoo.com/prnews/000628/certicom_t.html

Certicom is an encryption technology company specializing in security solutions for mobile computing and wireless data markets, including m- commerce. Major computing and communications companies, such as Palm, Inc., BellSouth Wireless Data, Motorola, Pitney Bowes, and QUALCOMM incorporate Certicom's technology into electronic commerce software, wireless messaging applications, and smart cards.

Is wireless encryption going to be both big and necessary? I believe so.

Is their encryption standard discontinuous - I believe it is.

Am I early - Yes I am.
Was I early with RMBS yes I was.
Print the post Back To Top
No. of Recommendations: 0
Okay. I wasn't going to take the bait, but I've changed my mind. Hope there isn't a hook in there.

Where can I find some technical info on CERT? White papers, that sort of thing?

I want to know what they have that someone else can't just come along and copy.

Got any links for me? :-)

-JasonX

P.S. - I was right on time with Rambus.
Print the post Back To Top
No. of Recommendations: 3
I wrote a longer reply, but the computer ate it.

http://www.certicom.com

Website like a marketing brocure. WHERE'S THE BEEF?

Broken link to 1999 annual report.

Tried to report it. They asked me to fill out a survey that makes the 2000 census long form look short. Takes 10-15 minutes if you fill in everything completely. Won't let you advance until every field is filled in completely. Makes me think these guys are idiots.

If I trusted everyone on the web, including these guys, with all this personal information, why would I need encryption in the first place?

When I submitted it, got a server error. At least the error message contained an email address, which was all I wanted in the first place.

All to report a broken link.

Shoddy for a software company. I'll reconsider when I am able to download their annual report.

-JasonX
Print the post Back To Top
No. of Recommendations: 1
I had no problems with their website
Following are a few of their links.
Think I am happy with CERT
P.S. Heard about this from Unclewest

JAVAONE CONFERENCE, SAN FRANCISCO, Calif. June 6, 2000 - Certicom (Nasdaq: CERT and TSE: CIC), a leading provider of mobile e-commerce security, today announced Sun Microsystems, Inc. will use its technology in a demo at JavaOne to seamlessly connect a Palm™ VII handheld with the Internet to extend Sun enterprise data access to mobile workers. Certicom's industry-leading ECC technology will provide advanced security for end-to-end communications between the Palm VII and backend systems. The demonstration is part of Sun's initiative to develop a solution that allows its workforce to securely access sensitive corporate data such as email, address book and expense report systems from mobile devices.

"It's clear that in today's global workforces, companies like Sun are providing their workforce with devices to provide access to critical corporate information. To accomplish this, trusted, end-to-end security is a key requirement to convince IS managers to deploy these solutions," said Curtis Sasaki, director, Product Marketing, Sun's Consumer Technologies. "We chose Certicom to participate in this cutting edge demo because they have recognized expertise with Palm security, as well as expertise in the mobile and enterprise security world."

The JavaOne demonstration will feature secure enterprise applications written in Java, running on a Palm VII handheld that can communicate with back-end systems running inside of Sun's firewall. The demo applications are being provided by Bonita Software and will run on Java 2 Platform, Micro Edition on the Palm VII.

"We are very pleased to be working with Sun Microsystems on their enterprise-mobile connectivity initiative," said Richard Depew, Certicom's executive vice president, field operations. "Certicom specializes in enabling secure mobile computing solutions for today's corporate enterprise by providing strong, end-to-end security that protects sensitive enterprise information as it travels over wireless links."

The demonstration will also be showcased in Sun Microsystems' Pavilion booth #840 and in the Certicom exhibitor booth #1220 at the JavaOne Conference, June 6 - June 9, 2000 at the Moscone Center. Also of note, JavaOne's "Birds of a Feather" session #1653 will feature Certicom chief technology officer, Tim Dierks, in a panel entitled "Developing Applications for Wireless Devices" to be held on Tuesday, June 6 at 7:00PM at the Marriott Hotel, Yerba Buena Ballroom, Salon 12/13.
About Elliptic Curve Cryptography
Developed for a broad range of computing platforms and maximum interoperability, Certicom's Elliptic Curve Cryptography (ECC) technology enables strong, high performance security for many pieces of the computing infrastructure, including the new generation of small form-factor products such as handheld computers, pagers, cell phones and smart cards. Certicom's patented implementation of ECC technology provides a more efficient alternative to conventional public key cryptographic algorithms in many mobile and wireless environments, allowing for faster processing speed, reduced bandwidth usage and decreased battery requirements. These advantages make Certicom's ECC-based security technology particularly well suited to mobile devices that incorporate less powerful processors, such as handheld computing devices, Internet-enabled phones and two-way pagers.


ATLANTA, GA and HAYWARD, Calif., June 20, 2000 – XcelleNet, Inc., a leading provider of management solutions for the mobile enterprise, today announced it has formed an alliance with Certicom (Nasdaq: CERT and TSE: CIC), a leading provider of mobile e-commerce security, to include Certicom's industry leading encryption technology in its Afaria™ product line. Mobile devices, such as laptops, smart phones, handhelds and interactive pagers, are rapidly gaining popularity within the enterprise, becoming a key component of any mobile e-commerce infrastructure. The partnership with Certicom enables XcelleNet to expand is current security features to include Certicom's industry-leading Elliptic Curve Cryptography (ECC) technology and Secure Socket Layer protocol security (SSL Plus), critical requirements for the secure exchange of information between corporate enterprises and mobile users.

XcelleNet's Afaria offers the most complete suite of mobile device management capabilities in a single product including software distribution, backup, inventory, file transfer and event management, all delivered through a single session design. Afaria provides IT managers with the only complete offering to centrally and securely manage mobile business solutions across a company's entire mobile population, including laptops and mobile devices based on Windows, Palm OS, PocketPC or RIM Blackberry platforms.

"We are very pleased to be adding Certicom's security capabilities to our proven mobile management technology," said Joan E. Herbig, CEO of XcelleNet. "Given the deployment of more and more business critical applications out to mobile devices, rigorous security features are essential to any mobile management infrastructure. Through our partnership with Certicom, we can now provide prospects and our 2,500 customers the protection required in today's operating environment."


Controlling Mobile Device Security

Certicom's patented implementation of ECC technology provides a more efficient alternative to conventional public key cryptographic algorithms in many mobile and wireless environments, allowing for faster processing speed, reduced bandwidth usage and decreased battery requirements. These advantages make Certicom's ECC-based security technology particularly well suited to mobile devices that incorporate less powerful processors, such as handheld computing devices, smart phones and interactive pagers.

"XcelleNet has a strong history of providing management solutions to mobile users," said Richard Depew, Certicom's executive vice president, field operations. "We are pleased to team up with XcelleNet in order to provide their customers that run very large mobile implementations with the security infrastructure needed in the fast-growing market of mobile devices."


About Certicom

Certicom is an encryption technology company specializing in security solutions for mobile computing and wireless data markets, including m-commerce. Major computing and communications companies such as Palm Inc., BellSouth Wireless Data, Motorola, Pitney Bowes, and QUALCOMM incorporate Certicom's technology into electronic commerce software, wireless messaging applications, and smart cards. Certicom is a leading source for a complete range of OEM security products and services, including cryptographic toolkits, custom implementations, and security integration services and consulting. Certicom's worldwide sales and marketing operations are based in Hayward, California, with cryptographic research and product development in Toronto, Canada. For more information, visit Certicom's Web site at http://www.certicom.com.


About XcelleNet

XcelleNet is a leading provider of management solutions for the mobile enterprise. The explosive growth of the mobile economy, and the race to implement Internet-enabled mobile applications has created a new challenge for IT: management of smart mobile devices, including laptop computers, handhelds, smartphones and interactive pagers. XcelleNet's Afaria family of solutions enables enterprises to manage these mobile devices and the business-critical applications on these devices. XcelleNet's RemoteWare ' is a world-class retail polling and management solution for remote PCs and Point of Sale devices. A pioneer in remote and mobile device management with 2,300 customers worldwide, XcelleNet serves a broad range of industries, including healthcare, insurance, retail, manufacturing and pharmaceutical. XcelleNet solutions reduce total cost of ownership, accelerate end-user productivity and enable the management of applications and content to a desired configuration from a central location. More information is available at http://www.XcelleNet.com.


HAYWARD, Calif., June 28, 2000 – Certicom (Nasdaq: CERT: TSE: CIC), a leading provider of mobile e-commerce security, and @Road,™ Inc., a leading Internet information services company that integrates GPS technology, wireless communications and the Internet to provide location-relevant solutions for businesses and consumers on the move, today announced a license agreement whereby @Road, Inc. will integrate Certicom's elliptic curve cryptography (ECC) technology into its location-specific, m-commerce Internet products and services.

Certicom's industry-leading ECC technology will help @Road ensure that subscriber information and transactions processed through the @Road wireless Internet network will remain secure. @Road will integrate Certicom's technology into its wireless-enabled iLM™ (Internet Location Manager) device and into its network servers to secure and protect the content of transmissions as they travel between the @Road network and the iLM devices located in @Road subscriber vehicles.

"Our subscribers rely on the @Road network to access and share proprietary information between their offices and their mobile workforce, so it is imperative that we provide a highly secure network environment," said Michael Walker, @Road vice president of engineering. "Certicom's trusted ECC technology provides the tight security and high processing speed required for the mission-critical, real-time and secure communications @Road subscribers demand."

@Road is a leading provider of location-relevant Web and wireless-enabled productivity enhancement solutions for business and consumers on the move. The company launched its first Internet-based m-commerce solution with the introduction of FleetASAPsm, a vehicle management solution accessed through the Internet. FleetASAP services include vehicle location to within 30 meters, computer-generated reports on time, mileage and stops, and other mobile resource management tools. @Road product initiatives are designed to leverage core technologies to provide service in supply chain management, mobile Web access for businesses and consumers, as well as providing applications-hosting and operations services.

"With the dramatic increase of wireless Internet communications between the enterprise and the mobile workforce, security remains a key issue for the user," said Richard Depew, Certicom executive vice president of field operations. "The addition of our trusted, full strength security in innovative solutions provided by companies like @Road enables the adoption of enterprise-wide mobile computing solutions by assuring that critical and sensitive corporate data will not be compromised."

About Elliptic Curve Cryptography

Developed for a broad range of computing platforms and maximum interoperability, Certicom's Elliptic Curve Cryptography (ECC) technology enables strong, high performance security for many pieces of the computing infrastructure, including the new generation of small form-factor products such as handheld computers, pagers, cell phones and smart cards. Certicom's patented implementation of ECC technology provides a more efficient alternative to conventional public key cryptographic algorithms in many mobile and wireless environments, allowing for faster processing speed, reduced bandwidth usage and decreased battery requirements. These advantages make Certicom's ECC-based security technology particularly well suited to mobile devices that incorporate less powerful processors, such as handheld computing devices, Internet-enabled phones and two-way pagers.

About @Road,™ Inc.

Based in Fremont, CA, @Road is a leading Internet information services company that integrates location technologies, wireless communications and the Internet to provide location-relevant solutions for businesses and consumers on the move. FleetASAP, powered by @Road, is the first of these solutions, offering vehicle management services through the Internet.


About Certicom


Certicom is an encryption technology company specializing in security solutions for mobile computing and wireless data markets, including m-commerce. Major computing and communications companies, such as Palm, Inc., BellSouth Wireless Data, Motorola, Pitney Bowes, and QUALCOMM incorporate Certicom's technology into electronic commerce software, wireless messaging applications, and smart cards. Certicom is a leading source for a wide range of OEM security products and services, including cryptographic toolkits, custom implementations, and security integration services and consulting. Certicom's worldwide sales and marketing operations are based in Hayward, California, with cryptographic research and product development in Toronto, Canada. For more information, visit Certicom's Web site at http://www.certicom.com.ATLANTA, GA and HAYWARD, Calif., June 20, 2000 – XcelleNet, Inc., a leading provider of management solutions for the mobile enterprise, today announced it has formed an alliance with Certicom (Nasdaq: CERT and TSE: CIC), a leading provider of mobile e-commerce security, to include Certicom's industry leading encryption technology in its Afaria™ product line. Mobile devices, such as laptops, smart phones, handhelds and interactive pagers, are rapidly gaining popularity within the enterprise, becoming a key component of any mobile e-commerce infrastructure. The partnership with Certicom enables XcelleNet to expand is current security features to include Certicom's industry-leading Elliptic Curve Cryptography (ECC) technology and Secure Socket Layer protocol security (SSL Plus), critical requirements for the secure exchange of information between corporate enterprises and mobile users.

XcelleNet's Afaria offers the most complete suite of mobile device management capabilities in a single product including software distribution, backup, inventory, file transfer and event management, all delivered through a single session design. Afaria provides IT managers with the only complete offering to centrally and securely manage mobile business solutions across a company's entire mobile population, including laptops and mobile devices based on Windows, Palm OS, PocketPC or RIM Blackberry platforms.

"We are very pleased to be adding Certicom's security capabilities to our proven mobile management technology," said Joan E. Herbig, CEO of XcelleNet. "Given the deployment of more and more business critical applications out to mobile devices, rigorous security features are essential to any mobile management infrastructure. Through our partnership with Certicom, we can now provide prospects and our 2,500 customers the protection required in today's operating environment."


Controlling Mobile Device Security

Certicom's patented implementation of ECC technology provides a more efficient alternative to conventional public key cryptographic algorithms in many mobile and wireless environments, allowing for faster processing speed, reduced bandwidth usage and decreased battery requirements. These advantages make Certicom's ECC-based security technology particularly well suited to mobile devices that incorporate less powerful processors, such as handheld computing devices, smart phones and interactive pagers.

"XcelleNet has a strong history of providing management solutions to mobile users," said Richard Depew, Certicom's executive vice president, field operations. "We are pleased to team up with XcelleNet in order to provide their customers that run very large mobile implementations with the security infrastructure needed in the fast-growing market of mobile devices."




Print the post Back To Top
No. of Recommendations: 0
Mishedlo...

I try to open their 1999 annual report and I get a file with the following content:

D:\My Documents\Clients\cert\AR99.pdf

I can download PDFs from other sites. Am I going to the wrong site?

http://www.certicom.com


Do they have any IP other than a patent on ECC? Multiple patents, maybe? Do they have the patent on the mathematical concept of ECC, or just a particular implementation? If so, why is that implementation so good that others could not develop similar algorithms that did not infringe? I am asking this because the entire value of this company seems to rest on the supposition that this patent gives them royalties on the "next big thing."

For a company like Rambus, who has 90-some patents ranging back to 1990, it isn't so hard to grasp that they have some valuable IP in there somewhere. Help me understand why this company with one patent is so valuable? Is there something that is going to keep them on top for a long time? Why is this stuff better than Public/Private with exchanged symmetric keys cryptography? There are a lot of companies that deal with cryptography out there. Have none of them looked at some version of ECC before?

Does ECC have a niche that other types of cryptography are unlikely to be useful in (like cell phones, for instance), and why?


Sorry for all the questions. The idea of the technology intrigues me, but I can't imagine how one patent for one kind of cryptography can be worth taking this company into a $100B market cap. I am listening, though, despite my adventures with the web site.

-JasonX
Print the post Back To Top
No. of Recommendations: 0
Certicom's patented implementation of ECC technology provides a more efficient alternative to conventional public key cryptographic algorithms in many mobile and wireless environments, allowing for faster processing speed, reduced bandwidth usage and decreased battery requirements. These advantages make Certicom's ECC-based security technology particularly well suited to mobile devices that incorporate less powerful processors, such as handheld computing devices, smart phones and interactive pagers.

Point me to a whitepaper that tells me how this ECC stuff works, and how it compares to Public/Private and Symmetric key encryption. I gotta know why people want it, and why they are gonna want it more.

-JasonX
Print the post Back To Top
No. of Recommendations: 2
Jason, the primary benefit of ECC is that it provides a similar level of security when compared to RSA, the encryption technology of choice for most applications, while only using up a fraction of the code that RSA uses. This makes ECC very useful in resource-constrined devices such as PDAs and cell phones. Right now, Phone.com uses RSA for their WAP browsers, and based on my experiences related to logging into my Ameritrade account via my cell phone, the use of RSA does lead to a bit of a slowdown. Perhaps Moore's Law will change all of this in a couple of years. Of course, by then, more advanced, CPU-hogging applications will most likely also be out, requiring greater amounts of data to be encrypted.

I'm fairly sure that Certicom's ECC patent covers all variations of the encryption technology. Although Entrust recently came out with an ECC development toolkit, they first had to get a license from Certicom to be able to market it.

One other good thing about ECC is that keys based on it can be cross-referenced with an RSA-based root certificate. This is especially important considering that Verisign, which has a near-monopoly on the digital certificate market for servers, uses RSA.

As far as potential problems the company might have once the patent expires, I'm fairly sure that the majority of Certicom's revenues don't come from the mere licensing of its technology, but also the sale of developers' toolkits related to making ECC-enabled applications. The sale of toolkits is how RSA Security has continued to make a living even after the patents it had on the technology that bears its name ran out last year. To the best of my knowledge, Certicom has the leading ECC toolkit on the market, and thus is in a fiarly enviable position. However, I don't think the company's revenues will really start taking off until a couple of major WAP browser vendors begin using ECC within their products.

Hope this helps,
Eric
Print the post Back To Top
No. of Recommendations: 0
Interesting that Entrust came up on this board after the shave it took yesterday (50% off of the market cap is more like getting skinned). I picked up some of this company because of the lower price.

I think that Certicom and Entrust are both in a market which is heading towards tornado status. Can this market cross the chasm? I think so... but who else are the serious players. Right now the GAP is in the Verisign camp. Who really has the CAP going forward I think is still impossible to tell.

How big is the whole market expected to become at some point? I haven't seen any projections but with this open system of commmunication, security seems to be needed and the company with the right product will have a discontinuous innovation on their hands.

Right now my money is on ENTU but interested in hearing why they will not emerge as a gorilla when they achieve a high enough customer base. 600 and counting at the moment.

Keep us up to date.

Guin... just out bottom fishing these last few days.
Print the post Back To Top
No. of Recommendations: 0
Liked your questions and added a few more.
This is what I sent to Certicom.
Will post the reply.
================================================
Do you have any IP other than a patent on ECC? Multiple patents, maybe? How Many.

When were patents on ECC grannted?
Has patent been challenged in court and upheld?

Do you have the patent on the mathematical concept of ECC, or just a particular implementation? If the latter, why is your implementation so good that others could not develop similar algorithms that did not infringe?

Is there something that is going to keep you on top for a long time? Why is ECC better than Public/Private with exchanged symmetric keys cryptography?

There are a lot of companies that deal with cryptography out there. Have any of them looked at some version of ECC before?

Does ECC have a niche that other types of cryptography are unlikely to be useful in (like cell phones, for instance), and why?

You mentioned partners on your website.
What comapnies actually license your product.

Define your revenue stream for me. Is it license fees or product fee for each phone/device using ECC or both?

Compare ease of breaking ECC vs RSA or other common security protocols.




Print the post Back To Top
No. of Recommendations: 0
Mishedlo,

That is a good set of questions. If I can get something that explains the technology to me as well, and compares it with other encryption technologies, I might even invest! :-)

-JasonX
Print the post Back To Top