80 likes | 281 Views
Single sign-on. Secure password store Mats Byfuglien. The task. Create a mobile solution for automated SSO Mobile with Java MIDlet USB device with Bluetooth support configured as an external keyboard Security analysis Usability analysis. Research questions.
E N D
Single sign-on Secure password store Mats Byfuglien
The task • Create a mobile solution for automated SSO • Mobile with Java MIDlet • USB device with Bluetooth support configured as an external keyboard • Security analysis • Usability analysis
Research questions • Does other alternative SSO solutions exist, if so - how are their security and usability? • How will different storage methods affect functionality and security of the solution? • What methods exist for transferring passwords securely between the mobile device and the computer, and how secure are they? • How secure is the prototype developed in this thesis? • How user friendly is the prototype developed in this thesis?
State of the art – SSO solutions • Personal SSO solutions • Virtual Safe • Auto complete logon forms • Web-based SSO solutions • Microsoft Passport • Mobile SSO solution • No support for automated logons • Business solutions • Kerberos • Expensive, complex to configure
Methods • Literature study • Other SSO solutions • Evaluate each system on security and usability • Crypto Algorithms • Performance • API’s available • Protocol analysis • Possible attacks • Implementing the prototype • Security and usability analysis • Test group • Survey • Interview • Compare prototype with SSO solutions from literature study
Plan of progress • Literature study • Beg. January – beg. February • Planning and designing the solution • Beg February – mid. February • Implementation and testing • Mid February – beg April • Security and usability analysis • Mid April – beg. May • Write report • Beg. May – end June