Download fulltext - DiVA Portal

Problem Description
The objectives of the diploma are:
- To describe relevant standards concerning the topic and provide an assessment and
recommendation of which standards should be used.
- To survey and describe available technologies for strong authentication on a mobile phone. The
survey should include the initiative for open authentication (www.openauthentication.org) which
also develops reference architecture and specifications for strong authentication on mobile
phones
- To survey and describe how a mobile phone can be supported in a Liberty-type Circle of Trust
- To describe how eGovernment Services can be made available in a mobile environment in a
secure way, using Liberty ID-WSF
- To develop a proof-of-concept (PoC).
Requirements for the proof-of-concept:
- The PoC shall be a working prototype demonstrating the use of a mobile phone for accessing an
eGovernment register service
- The PoC shall demonstrate the interaction between a Liberty-enabled Web Service Provider, a
Liberty-enabled Web Service Consumer (the mobile phone) and a Liberty-enabled Identity
Provider.
- The register service "Lånekassen" (State Education Loan Fund) will be used for demonstration
purposes
- As the information is non-sensitive, there will be no need for strong authentication. However, the
thesis shall also include a design of how strong authentication can be supported by the mobile
phone. The recommended solution shall be described at a high architectural level.
- If the proof-of-concept cannot be implemented due to lack of time or for other reasons, the
thesis should include a technical design which shows how a proof-of-concept could be
implemented
- If there are technical considerations which make it impossible to implement the proof-ofconcept, these considerations should be documented and discussed in the thesis
Assignment given: 18. January 2006
Supervisor: Torbjørn Skramstad, IDI