Samsung KNOX provides a layered security solution and a new Android-based solution designed from the ground up with security in mind to address the perception of the current open source Android platform. Samsung KNOX retains full compatibility with Android and the Google ecosystem while integrating fundamental security and management enhancements. All of these advantages make Samsung KNOX the perfect choice for both regulated and general enterprise environments. It includes the following features:
- Trusted Boot Ensures that the device boots only from an authorized kernel, and not from a hacked or rooted kernel
- TrustZone-based Integrity Measurement Architecture (TIMA). Verifies the integrity of the kernel on a continuous basis
- Security Enhancements for Android Uses Mandatory Access Control to protect device resources and data from unauthorized access
- Dual Persona Provides a secure environment within your device. You can continue to use your usual Android environment, and still have access to a protected space
Isolate Your Private and Corporate Data
KNOX secures apps and data inside its container as follows:
- Separates the data file systems used by the personal space and the KNOX container
- Encrypts all data inside the KNOX container
- Ensures that apps outside the KNOX container cannot access apps and data in the container.
- Ensures that apps in the container cannot access apps and data outside the container
Samsung KNOX incorporates key technologies patented by the National Security Agency (NSA) and leverages hardware-level features to provide enhanced security to protect the operating system and applications. In addition, Samsung KNOX has been submitted to the US Government and Department of Defense (DoD) for compliance with initiatives, requirements and standards for mobile device security to enable its use in government and other highly regulated enterprise environments.
Restrictions Capabilities
The look and feel of the personal space and KNOX container are similar. However, for security and technical reasons, there are some differences when you are using apps in the KNOX container:
- Cannot copy and paste text or images from the container into the personal space
- Cannot access container data like browser bookmarks, browsing history, call logs, Splanner events, and so on, from the personal space
- Cannot move files from the container to the personal space
- Cannot use the multi-window function for the browser in the container
- Cannot use Google Text-to-Speech, and cannot install the Google Search bar widget
- You can use Air view but not Air gesture or Air command in the container