Presentation made for the yearly German IT security conference Mindshare 2016. The main message is hos to get rid of passwords with the usage of a smart card and the a smart card reader connected to your tablet. In this case a Apple iPad with iOS running. The smart card reader is Tactivo from Precise Biometrics and the smart card is a standard JCOP NXP PKI card with a PKCS#15 profile created with cv sc/interface from Cryptovision. The certificate is a standard x509 NemID employee certificated issued by the Danish CA Nets-DanID.

1. © jun 2016 | liga.com
Bjarke Alling | CEO
Brian O. Bentzen | iOS developer
Cryptovision Mindshare June 30 - 2016
Kill passwords on the tablets

2. © jun 2016 | liga.com

3. © jun 2016 | liga.com

4. © jun 2016 | liga.com
DIGITISATION

5. © jun 2016 | liga.com
A. Current method of manually typing user name and
password is technically outdated
B. The development in user complexity and numbers of
IT systems is exponentially growing
The password challenge

6. © jun 2016 | liga.com
Usage
Signing
Encryption
Authentication
Maintenance
Revoke
Renew
Re-issue
Issuing
National ID
Global ID
Local ID
Full life cycle
management of
emplyees
digital signature
and their
digital identities

7. © jun 2016 | liga.com
Level 1
Level 2
Level 3
Travel itinerary

8. © jun 2016 | liga.com
 Standards
 Custom apps
 Rapid change
 Different needs
 Consumerization
 Multiple platforms
 Multiple form factors

9. © jun 2016 | liga.com
The SDK allows iOS
programmers easy access to
certificates and encryption keys
on smartcards through a
smartcard reader
Mobile SDK

10. © jun 2016 | liga.com
Componenets in the SDK iOS App
Mobile SDK
PKCS#11
Hardware
• SmartSignatur library + browser
• OpenSSL library
• cv Cryptovision PKCS#11 library
• Precise Biometrics / Tactivo library
• Sample PHP web server code

11. © jun 2016 | liga.com
Generates signature for data using current private key.
There are a number of available signature schemes (Signing algorithms)
(NSData*)sign:(NSData*)data digestType: (SigningAlgorithm)
type pinCode: (NSString*) pinCode;

12. © jun 2016 | liga.comsmartsignatur.eu/mobilesdk

13. © jun 2016 | liga.com
Free trial version available

14. © jun 2016 | liga.com
Traditional solutions
 OTP token
 MicroSD card
 Bluetooth/NFC token
 Cover with std. smart card
Next generation solutions
 Mobile phone
 Fingerprint + Remote signature
 Central certificate server
 BYOS – bring your own security
 Interim soft-key certificates
combined National ID service

15. © jun 2016 | liga.com
Complete solution build on open
standards and many vendors

16. © jun 2016 | liga.com
• Classic analog login methods is outdated
• User experiance needs simplification when complixity is growing
• Integrated and automated administration is necessary for success
• Stepwise implementation on top of existing infrastructure
• Mobility requires new security frameworks to be secure and efficient
• Download free trial from Apple iTunes AppStore

17. © jun 2016 | liga.com
Bjarke Alling
Funder & CEO
+45 40 13 91 05 | ba@liga.com
Brian Overgaard Bentzen
iOS developer
+45 31 72 57 91 | bob@liga.com
twitter.com/smartsignatur
smartsignatur.eu/newsletter
linkedin.com/company/smartsignatur