Hier finden Sie wissenschaftliche Publikationen aus den Fraunhofer-Instituten.

TruWalletM: Secure web authentication on mobile platforms

: Bugiel, S.; Dmitrienko, A.; Kostiainen, K.; Sadeghi, A.-R.; Winandy, M.


Chen, L.; Yung, M.:
Trusted systems. Second international conference, INTRUST 2010. Revised selected papers : Beijing, China, December 13 - 15, 2010
Berlin: Springer, 2011 (Lecture Notes in Computer Science 6802)
ISBN: 978-3-642-25283-9
ISBN: 978-3-642-25282-2 (print)
ISSN: 0302-9743
International Conference on Trusted Systems (INTRUST) <2, 2010, Beijing>
Conference Paper
Fraunhofer SIT ()

Mobile phones are increasingly used as general purpose computing devices with permanent Internet connection. This imposes several threats as the phone operating system (OS) is typically derived from desktop counterparts and, hence, inherits the same or similar security shortcomings. In particular, the protection of login credentials when accessing web services becomes crucial under phishing and malware attacks. On the other hand many modern mobile phones provide hardware-supported security mechanisms currently unused by most phone OSs. In this paper, we show how to use these mechanisms, in particular trusted execution environments, to protect the user's login credentials. We present the design and implementation proposal (based on Nokia N900 mobile platform) of TruWalletM, a wallet-like password manager and authentication agent towards the protection of login credentials on a mobile phone without the need to trust the whole OS software. We preserve compatibility to exis ting standard web authentication mechanisms.