Single sign-on Secure password store Mats Byfuglien

The task Create a mobile solution for automated SSO  Mobile with Java MIDlet  USB device with Bluetooth support configured as an external keyboard Security analysis Usability analysis

Research questions 1. Does other alternative SSO solutions exist, if so - how are their security and usability? 2. How will different storage methods affect functionality and security of the solution? 3. What methods exist for transferring passwords securely between the mobile deviceand the computer, and how secure are they? 4. How secure is the prototype developed in this thesis? 5. How user friendly is the prototype developed in this thesis?

State of the art – SSO solutions Personal SSO solutions  Virtual Safe  Auto complete logon forms Web-based SSO solutions  Microsoft Passport Mobile SSO solution  No support for automated logons Business solutions  Kerberos  Expensive, complex to configure

Methods Literature study  Other SSO solutions Evaluate each system on security and usability  Crypto Algorithms Performance API’s available  Protocol analysis Possible attacks Implementing the prototype Security and usability analysis  Test group  Survey  Interview Compare prototype with SSO solutions from literature study

Plan of progress Literature study  Beg. January – beg. February Planning and designing the solution  Beg February – mid. February Implementation and testing  Mid February – beg April Security and usability analysis  Mid April – beg. May Write report  Beg. May – end June

Risk analysis