IBM has unveiled a new innovative solution, known as IBM Hyper Protect Offline Signing Orchestrator (OSO), which serves as a cold storage solution for digital assets. This new product was launched in partnership with Metaco, a digital asset manager and a Ripple subsidiary, as well as several tier-1 banks. The primary aim of this solution is to mitigate the common weaknesses associated with conventional cold storage solutions.
Understanding the Limitations of Traditional Cold Storage
The typical cold storage solutions come with their own set of limitations. These include the risk of privileged administrator access, operational costs, errors, and scalability issues. The root cause of these limitations? Human interaction. The IBM OSO is designed to tackle these challenges head-on.
How Does IBM’s OSO Address These Challenges?
IBM’s OSO operates similarly to a time-release safe. It can be programmed to conduct transactions from the cold storage to the blockchain and vice versa, at specific times or only through a multi-body governance scheme’s authorization. This approach effectively mitigates the risks of insider attacks, including physical access, administrative manipulation, and coercion attacks.
Even if a malicious actor were to gain access to the system, they could only initiate a transaction during approved times and would have to wait for the transaction’s approval for execution. This adds an extra layer of security to the system.
Enhancing Security with Air-Gapped Storage
One of the standout features of the IBM OSO is its air-gapped storage container. When assets are stored in an air-gapped container, they are not connected to the internet or any device that can connect to the internet. This significantly reduces the risk of remote attacks while the assets are at rest.
Unlike traditional air-gapped paradigms, where administrators need to physically carry storage devices to offline hardware for transaction signing, OSO eliminates this manual process. It implements a policy engine that can broker communication between two different applications without connecting to both simultaneously. This feature, coupled with IBM’s Confidential Computing service, ensures there is no direct external network connectivity, thereby minimizing human error and remote access risks.
As we move towards a digital future, the need for secure cold storage solutions for digital assets is more critical than ever. Tools like IBM’s OSO and platforms like cryptoview.io are leading the charge in creating a safer digital asset ecosystem.
