MOBILE SECURITY

1
MOBILE SECURITY
Mobile Commerce
2
Security management

• Authentication
• Access control
• Confidentiality
• Integrity
• Non-repudiation

3
Security management - Active Attack
Message M
Transmitter
Receiver
Public channel
Message M is substituted to message M
4
Security management Passive Attack
Message M
Transmitter
Receiver
Public channel
Passive attack
Message M listening
5
Security management- Ciphering systems general
principle
Unprotected transmission channel
C
E
R
D
M Plain text
r Ck(M) cryptogram
M Dk(r)
K
K
Decrypted message
C encryption
E transmitter
K, K key
D decryption
R receiver
M message
6
Security management - Signature and ciphering
with a public-key system
Transmitter A Transmits and signs M
M is the message in clear
Encryption using Da
S is the message enciphered by the key Da
S Da(M) Signature and authentication
User B receives the pair (M, S) after computed
SDb(C) and MEa(S)
CEb(S) Encryption for privacy
Only B can convert C to M and identify A
Receiver B
Receives C
7
Other security management

• Using smart Cards as secure
• access to Outlook Web Access
• Common Logon Between
• Websites of Associated
• Companies or Departments