Bringing Secure, Privacy-Enhanced Authentication to the Mobile Ecosystem

November 5, 2017

Exponent, Inc.'s mobile security group has released research conducted under contract with the US Department of Homeland Security (DHS) Science and Technology Directorate (S&T) and the Kantara Initiative Inc. The research leverages next generation standards and specifications to bring secure, privacy-enhanced authentication to the mobile ecosystem.

The demonstration app developed securely derives a credential from a trusted identity, such as a smart card-based ID provided by a vetting authority. The derived credential can then be used over the mobile's Near Field Communication interface for physical access and authentication operations including full-privacy mobile-to-mobile identity authentication. The source code resulting from this project is available as royalty-free open source here.