Personal security environment on Palm PDA

  • Authors:
  • M. Freundenthal;S. Heiberg;J. Willemson

  • Affiliations:
  • -;-;-

  • Venue:
  • ACSAC '00 Proceedings of the 16th Annual Computer Security Applications Conference
  • Year:
  • 2000

Quantified Score

Hi-index 0.00

Visualization

Abstract

Digital signature schemes are based on the assumption that the signing key is kept in secret. Ensuring that this assumption holds is one of the most crucial problems for all current digital signature applications. This paper describes the solution developed and prototyped by the authors - using a mobile computing device with a smart-card reader for creating digital signatures. We give an overview of several common settings for digital signature applications and the problems they have, also describing several frameworks for mobile security applications. A discussion about the choice of devices, design issues, concrete solutions and their security concerns follows. We conclude that although nothing can prevent careless private key handling, careful management is easier and more convenient when using our solution.