Cellcrypt for BlackBerry Secures Cellular Voice Conversation

Cellcrypt has released what it says is the very first BlackBerry voice encryption product that enables organizations to secure users' voice traffic. But it's only available for the Bold 9000...and it sure isn't cheap.

The BlackBerry platform is known for its impressive security safeguards; Research In Motion's (RIM) BlackBerry Enterprise Server (BES) is literally designed from the ground up to meet enterprise security needs, and its various international security certifications attest to its effectiveness. However, there's one component of the BlackBerry ecosystem that's largely unguarded from potential threats: phone calls, i.e., voice traffic.

RIM's Manager of BlackBerry Developer Relations, Mike Kirkup, had this to say when asked if BlackBerry voice traffic is secure:

"I wish I could say it was. We just use normal voice channels."

That means that even though the data stored on your BlackBerry is protected, along with your e-mail and other messaging, you could potentially be opening yourself up to trouble every time you make a voice call.

And according to Cellcrypt CEO Simon Bransfield-Garth, exploits meant to tap into BlackBerry voice transmissions are entirely plausible--though they're also rare at this point. That's where Cellcrypt Mobile for the BlackBerry Bold comes in.

Cellcrypt, which is the first product of its kind for BlackBerry according to both Kirkup and Bransfield-Garth, aims to fill in the missing piece of the BlackBerry-security-puzzle by encrypting voice communications. The product is meant for use in government, pharmaceutical, legal and finance sectors, but any senior level business executive--or anyone else--who frequently discusses sensitive matters via BlackBerry could benefit.

Cellcrypt has been available for Nokia and Windows Mobile devices for six months. And organizations can already purchase special, "secure" devices that protect phone calls through contractors like General Dynamics, maker of the Sectera Edge. But such devices are bulky and awkward, and more importantly they stand out among other more common handhelds, like BlackBerrys. Businesspeople traveling in sensitive areas often wish to remain inconspicuous and to draw as little attention as possible to themselves. Cellcrypt provides the piece of mind that conversations are secure without modifying a device's appearance.

The application can be turned on and off at will by users, and calls using Cellcrypt are initiated through its own contact list so there's never any confusion about whether or not calls are protected. It works on any IP-enabled network, including 2G (GPRS, EDGE, 1xRTT), 3G (UMTS, HSDPA, EV-DO) and Wi-Fi, according to the company.

However, it can reduce your BlackBerry battery life by about 10 percent when in use, and call recipients must also employ Cellcrypt to ensure secure conversations, according to Bransfield-Garth. There's also currently no way for administrators to ensure that users are employing Cellcrypt; it's entirely in the user's hands to turn on Cellcrypt and initiate calls via the app. And it only works on RIM's BlackBerry Bold 9000 device.

The company is currently in the process of obtaining the U.S. government's FIPS140-2 certification for the new BlackBerry app, and Bransfield-Garth expects it to be awarded some time in the third quarter of the year.

Cellcrypt for BlackBerry currently goes for roughly US$1,000 per user for a year of service.

More information on Cellcrypt Mobile for BlackBerry is available on the company's website.

Join the CSO newsletter!

Error: Please check your email address.

Tags Blackberrysecurity

Show Comments

Featured Whitepapers

Editor's Recommendations

Solution Centres

Stories by Al Sacco

Latest Videos

  • 150x50

    CSO Webinar: The Human Factor - Your people are your biggest security weakness

    ​Speakers: David Lacey, Researcher and former CISO Royal Mail David Turner - Global Risk Management Expert Mark Guntrip - Group Manager, Email Protection, Proofpoint

    Play Video

  • 150x50

    CSO Webinar: Current ransomware defences are failing – but machine learning can drive a more proactive solution

    Speakers • Ty Miller, Director, Threat Intelligence • Mark Gregory, Leader, Network Engineering Research Group, RMIT • Jeff Lanza, Retired FBI Agent (USA) • Andy Solterbeck, VP Asia Pacific, Cylance • David Braue, CSO MC/Moderator What to expect: ​Hear from industry experts on the local and global ransomware threat landscape. Explore a new approach to dealing with ransomware using machine-learning techniques and by thinking about the problem in a fundamentally different way. Apply techniques for gathering insight into ransomware behaviour and find out what elements must go into a truly effective ransomware defence. Get a first-hand look at how ransomware actually works in practice, and how machine-learning techniques can pick up on its activities long before your employees do.

    Play Video

  • 150x50

    CSO Webinar: Get real about metadata to avoid a false sense of security

    Speakers: • Anthony Caruana – CSO MC and moderator • Ian Farquhar, Worldwide Virtual Security Team Lead, Gigamon • John Lindsay, Former CTO, iiNet • Skeeve Stevens, Futurist, Future Sumo • David Vaile - Vice chair of APF, Co-Convenor of the Cyberspace Law And Policy Community, UNSW Law Faculty This webinar covers: - A 101 on metadata - what it is and how to use it - Insight into a typical attack, what happens and what we would find when looking into the metadata - How to collect metadata, use this to detect attacks and get greater insight into how you can use this to protect your organisation - Learn how much raw data and metadata to retain and how long for - Get a reality check on how you're using your metadata and if this is enough to secure your organisation

    Play Video

  • 150x50

    CSO Webinar: How banking trojans work and how you can stop them

    CSO Webinar: How banking trojans work and how you can stop them Featuring: • John Baird, Director of Global Technology Production, Deutsche Bank • Samantha Macleod, GM Cyber Security, ME Bank • Sherrod DeGrippo, Director of Emerging Threats, Proofpoint (USA)

    Play Video

  • 150x50

    IDG Live Webinar:The right collaboration strategy will help your business take flight

    Speakers - Mike Harris, Engineering Services Manager, Jetstar - Christopher Johnson, IT Director APAC, 20th Century Fox - Brent Maxwell, Director of Information Systems, THE ICONIC - IDG MC/Moderator Anthony Caruana

    Play Video

More videos

Blog Posts

Market Place