Using a smartphone to access personalized Web services on a workstation

This paper presents a privacy-friendly and portable mobile authentication solution. It addresses several shortcomings of conventional methods such as passwords and smartcard solutions. It also meets the needs of an increasingly mobile user. Trust in the client computer is minimal and the authentication is entirely delegated to the smartphone, which makes it portable across diverse workstations. Our approach involves authentication using securely stored credentials on the smartphone. The client workstation does not need to be modified, whereas only minor changes to the Web server are required.status: publishe