November 5, 2017
Exponent, Inc.'s mobile security group has released research conducted under contract with the US Department of Homeland Security (DHS) Science and Technology Directorate (S&T) and the Kantara Initiative Inc. The research leverages next generation standards and specifications to bring secure, privacy-enhanced authentication to the mobile ecosystem.
The demonstration app developed securely derives a credential from a trusted identity, such as a smart card-based ID provided by a vetting authority. The derived credential can then be used over the mobile's Near Field Communication interface for physical access and authentication operations including full-privacy mobile-to-mobile identity authentication. The source code resulting from this project is available as royalty-free open source here.