IBM teams with BlackBerry and Samsung to offer governments a secure Android tablet

The SecuTablet is a modified Galaxy Tab S 10.5 bundled with security management software and a hardware encryption module

galaxy tab s

IBM is entering the tablet market -- sort of. The company plans to sell a modified Samsung Android tablet this summer with extra security capabilities, aimed at government users.

The SecuTablet was developed by IBM and Secusmart, which BlackBerry acquired last year, for a German government department. It is a 16GB, LTE-equipped Samsung Galaxy Tab S 10.5 bundled with some software from IBM and Secusmart's special MicroSD card, which uses cryptographic chips to protect data in motion and at rest.

Samsung's Knox secure boot technology ensures that the OS on the tablet has not been tampered with, while IBM's contribution to the security chain is to "wrap" certain apps in an additional layer of code that intercepts and encrypts key data flows using the Secusmart hardware.

Secusmart managing director Hans-Christoph Quelle hopes that before year-end the German federal IT security agency, BSI, will grant the Knox-Secusmart combination a security rating corresponding to NATO Restricted.

"The project was started long before BlackBerry acquired Secusmart," said Quelle, now a senior vice president at BlackBerry.

The acquisition raised questions at the highest level within BlackBerry, IBM, and the German government department about whether to continue, he said, particularly with IBM's recent announcement of an alliance with Apple to deliver enterprise apps.

The tablet project survived the acquisition, not least because, with its smartphone market share shrinking, BlackBerry is keen to sell its security services across as many platforms as possible. BlackBerry announced plans last November to extend support for its management software to Samsung devices, and at Mobile World Congress in Barcelona last month it said it would release versions of Secusmart's Secusuite voice and data encryption system and its own WorkLife management tool for Samsung Knox devices.

Organizations deploying the SecuTablet will be able to set policies controlling what apps can run on the devices, and whether those apps must be wrapped, said IBM Germany spokesman Stefan Hefter. The wrapping process -- in which an app is downloaded from a public app store, bundled with additional libraries that encrypt its network traffic and intercept Android "intents" for actions such as cutting or pasting data, then uploaded to a private app store -- ensures that corporate data can be protected at rest, in motion, and in use, he said.

For instance, it can prevent data from a secure email being copied and pasted into the Facebook app running on the same device -- yet allow it to be pasted into a secure collaboration environment, or any other app forming part of the same "federation," he said.

Secusmart will sell the device in Germany, while IBM will sell it elsewhere. Although initially developed for government use, Quelle hopes IBM's enterprise customers will also be interested.

Naturally, this level of security doesn't come cheap: An unmodified Samsung Galaxy Tab S 10.5 retails for around $500, but the SecuTablet will cost around €2,250 ($2,380), including the Secusmart MicroSD encryption card, the necessary app-wrapping and management software, and a year's maintenance contract, he said.

To comment on this article and other InfoWorld content, visit InfoWorld's LinkedIn page, Facebook page and Twitter stream.
From CIO: 8 Free Online Courses to Grow Your Tech Skills
Notice to our Readers
We're now using social media to take your comments and feedback. Learn more about this here.