Filip Jansson

Certificateless public key infrastructure and authentication methods for universal electronic identification protocols

Electronic identification is a subject which has becomes more relevant as of
recent, with the increase of digital services. A common problem with elec-
tronic identification is that most current solutions are on a national level, which
makes it complex for service providers operating on a international scale to
identify users. To solve this problem, an e-ID on a universal level could be
developed to reduce the complexity of cross-country identification. This the-
sis investigates two areas regarding the security architecture of an universal
electronic identification protocol.
An evaluation of certificateless public key infrastructure for inter-domain com-
munication in Java has been done by running benchmarks for important opera-
tions in the infrastructure on a proof of concept , as well as an implementability
and security analysis of the infrastructure. The results indicates that Certifi-
cateless public key infrastructure has good implementability and sufficient se-
curity for inter-domain communication, but is not efficient enough in Java to
be used in this context.
The second area of research has been authentication methods for a universal
inter-domain protocol. In this project an evaluation of a set of multi-factor au-
thentication schemes has been done using a benefit framework with weighting
for benefits which are more significant to a universal inter-domain protocol.
The scheme which received the highest scoring using this frame work was a
software token together with fingerprint authentication.