PACE Fintech Solutions
In response to wider market demands for stronger security products, PACE decided to commericalise their own software & application security tools and techniques that have successfully been used internally as part of their secure Licensing Solutions.
The company is now bringing White-Box Cryptography (WBC) and Runtime Application Security Protection (RASP) solutions to Financial Services, Digital ID and other security critical sectors – securing cryptographic functions and code integrity in the ultimate “shift left”.
White-Box Works
White-Box Works is an in-app protection tool designed to protect keys and data. In cryptographic implementations transformed by White-Box Works, private keys, content keys, license store keys, and trusted constants such as public keys and proprietary algorithms are all executed within the boundaries of the software White-Box and are never visible in a decrypted state in the static application or in runtime memory. White-Box Works was designed to defeat sophisticated reverse engineering attacks, fault injection attacks, and advanced statistical analysis attacks (like Differential Computation Analysis).
White-Box Works is the newest thinking in the white-box space and was designed from a clean slate with the demanding requirements of securing performance-critical applications running in untrusted environments including Mobile Financial apps such as SoftPOS and HCE Mobile Wallets, Self-Serve Kiosk and Digital Identity solutions.
EMVco SBMP Certification
EMVCo is collectively owned by American Express, Discover, JCB, Mastercard, UnionPay, and Visa. EMVCo is the global technical body that facilitates the worldwide interoperability and acceptance of secure payment transactions. Since 2018, EMVco has standardised the security certification process for mobile payment solutions for their participating payment brands. Through the SBMP evaluation process, product providers can be granted a security evaluation certificate for their Software-Based Mobile Payment Protection Tools.
PACE Anti-Piracy Inc., is a global leader in the development of advanced software security products, and flexible, secure licensing management solutions.
Founded in the heart of Silicon Valley in 1985, PACE has provided software publishers, ISV’s, developers and distributors with high value, automated solutions for anti-piracy protection and secure software distribution. Over the last two decades, the sophistication of piracy attacks on software developers’ IP has resulted in PACE growing their capabilities, adopting new techniques and developing new technologies designed to continue to protect our customers’ businesses.
In the early months of the pandemic, PACE Inc made the decision to commericalise their new Application Protection and White Box Works technology, bringing these to a wider commercial market. In support of this, through a long-term connection to Scotland, and recognising the skills available, it was decided to create a subsidiary in Glasgow. PACE Anti-Piracy Europe Limited was created in July 2021 and a uniquely skilled Software Security team has been formed to develop new IP and technology. This is already being marketed globally on its own merits but also as an integral part of the overall PACE Anti-Piracy License architecture.
PACE’s products and services are trusted by thousands of software developers around the world supporting millions of end users. PACE AP is a privately held company based in Silicon Valley, California with subsidiary offices in Scotland and England. PACE is the parent company of JUCE (www.juce.com) a cross-platform software development framework,and is the steward of the Audio Developers Conference (ADC; www.audio.dev).
