Single sign-on

1
Single sign-on

• Secure password store
• Mats Byfuglien

2
The task

• Create a mobile solution for automated SSO
• Mobile with Java MIDlet
• USB device with Bluetooth support configured as
  an external keyboard
• Security analysis
• Usability analysis

3
Research questions

1. Does other alternative SSO solutions exist, if so
   - how are their security and usability?
2. How will different storage methods affect
   functionality and security of the solution?
3. What methods exist for transferring passwords
   securely between the mobile device and the
   computer, and how secure are they?
4. How secure is the prototype developed in this
   thesis?
5. How user friendly is the prototype developed in
   this thesis?

4
State of the art SSO solutions

• Personal SSO solutions
• Virtual Safe
• Auto complete logon forms
• Web-based SSO solutions
• Microsoft Passport
• Mobile SSO solution
• No support for automated logons
• Business solutions
• Kerberos
• Expensive, complex to configure

5
Methods

• Literature study
• Other SSO solutions
• Evaluate each system on security and usability
• Crypto Algorithms
• Performance
• APIs available
• Protocol analysis
• Possible attacks
• Implementing the prototype
• Security and usability analysis
• Test group
• Survey
• Interview
• Compare prototype with SSO solutions from
  literature study

6
Plan of progress

• Literature study
• Beg. January beg. February
• Planning and designing the solution
• Beg February mid. February
• Implementation and testing
• Mid February beg April
• Security and usability analysis
• Mid April beg. May
• Write report
• Beg. May end June

7
Risk analysis