DEMO: OffPAD-Offline Personal Authenticating Device with Applications in Hospitals and e-Banking

Denis Migdal (1) , Christian Johansen (2) , Audun Jøsang (2)

1 Equipe SAFE - Laboratoire GREYC - UMR6072
2 UiO - University of Oslo

Identity and authentication solutions often lack usability and scalabil-ity, or do not provide high enough authentication assurance. The concept of Lucidman (Local User-Centric Identity Management) is an approach to providing scalable, secure and user friendly identity and authentication functionalities. In this context we demonstrate the use of an OffPAD (Of-fline Personal Authentication Device) as a trusted device to support different forms of authentication. The Lucidman/OffPAD approach consists of locating the identity management and authentication functionalities on the user side instead of on the server side or in the cloud. This demo aims to show how OffPAD strengthens authentication assurance, improves us-ability, minimizes trust requirements, and has the advantage that trusted online interaction can be achieved even in the presence of malware infection of client platforms. The trusted device OffPAD has been designed as a phone cover, therefore not requiring the user to carry an extra gadget. We focus on six demonstrators, three useful in e-banking and three in the hospital domain where nurses, doctors, or patients are authenticated and access is granted in various situations base on the OffPAD. A video for this demo will be available online.

Mots clés: usable authentication; secure hardware; phone cover; hospital authentication; e-banking; petname system; data authentication; local user-centric identity management

Domaines: Cryptographie et sécurité [cs.CR]

Denis Migdal, Christian Johansen, Audun Jøsang. DEMO: OffPAD-Offline Personal Authenticating Device with Applications in Hospitals and e-Banking. ACM CCS 2016, Oct 2016, Vienna, Austria. ⟨hal-01589899⟩