Research Article
A Rich Client-Server Based Framework for Convenient Security and Management of Mobile Applications
@INPROCEEDINGS{10.1007/978-3-642-04434-2_3, author={Stephen Badan and Julien Probst and Markus Jaton and Damien Vionnet and Jean-Fr\^{e}d\^{e}ric Wagen and G\^{e}rald Litzistorf}, title={A Rich Client-Server Based Framework for Convenient Security and Management of Mobile Applications}, proceedings={Security and Privacy in Mobile Information and Communication Systems. First International ICST Conference, MobiSec 2009, Turin, Italy, June 3-5, 2009, Revised Selected Papers}, proceedings_a={MOBISEC}, year={2012}, month={5}, keywords={mobile security smartphone rich client client-server secure framework authentication transient authentication theft detection}, doi={10.1007/978-3-642-04434-2_3} }
- Stephen Badan
Julien Probst
Markus Jaton
Damien Vionnet
Jean-Frédéric Wagen
Gérald Litzistorf
Year: 2012
A Rich Client-Server Based Framework for Convenient Security and Management of Mobile Applications
MOBISEC
Springer
DOI: 10.1007/978-3-642-04434-2_3
Abstract
Contact lists, Emails, SMS or custom applications on a professional smartphone could hold very confidential or sensitive information. What could happen in case of theft or accidental loss of such devices? Such events could be detected by the separation between the smartphone and a Bluetooth companion device. This event should typically block the applications and delete personal and sensitive data. Here, a solution is proposed based on a secured framework application running on the mobile phone as a rich client connected to a security server. The framework offers strong and customizable authentication and secured connectivity. A security server manages all security issues. User applications are then loaded via the framework. User data can be secured, synchronized, pushed or pulled via the framework. This contribution proposes a convenient although secured environment based on a client-server architecture using external authentications. Several features of the proposed system are exposed and a practical demonstrator is described.