Fraunhofer-Gesellschaft

Publica

Hier finden Sie wissenschaftliche Publikationen aus den Fraunhofer-Instituten.

TrustID: Trustworthy identities for untrusted mobile devices

 
: Horsch, Julian; Böttinger, Konstantin; Weiß, Michael; Wessel, Sascha; Stumpf, Frederic

:
Postprint urn:nbn:de:0011-n-3016691 (524 KByte PDF)
MD5 Fingerprint: 79a5a01cb94758fc810a7ee9401a7043
© ACM This is the author's version of the work. It is posted here by permission of ACM for your personal use. Not for redistribution.
Erstellt am: 9.7.2020


CODASPY 2014, 4th ACM Conference on Data and Application Security and Privacy. Proceedings : March 3-5, 2014. San Antonio, Texas
New York: ACM, 2014
ISBN: 978-1-4503-2278-2
S.281-288
Conference on Data and Application Security and Privacy (CODASPY) <4, 2014, San Antonio/Tex.>
Englisch
Konferenzbeitrag, Elektronische Publikation
Fraunhofer AISEC ()
identity derivation; Smartphone; mobile security; Combined PIN Entry; secure element; Identity Provider; android; nPA

Abstract
Identity theft has deep impacts in today's mobile ubiquitous environments. At the same time, digital identities are usually still protected by simple passwords or other insuficient security mechanisms. In this paper, we present the TrustID architecture and protocols to improve this situation. Our architecture utilizes a Secure Element (SE) to store multiple context-specific identities securely in a mobile device, e.g., a smartphone. We introduce protocols for securely deriving identities from a strong root identity into the SE inside the smartphone as well as for using the newly derived IDs. Both protocols do not require a trustworthy smartphone operating system or a Trusted Execution Environment. In order to achieve this, our concept includes a secure combined PIN entry mechanism for user authentication, which prevents attacks even on a malicious device. To show the feasibility of our approach, we implemented a prototype running on a Samsung Galaxy SIII smartphone utilizing a microSD card SE. The German identity card nPA is used as root identity to derive context-specific identities.

: http://publica.fraunhofer.de/dokumente/N-301669.html