Abstract

The development of electronic signature in mobile devices is an essential issue for the advance and expansion of the mobile electronic commerce since it provides security and trust in the system. E-signatures provide security for the transactions with authenticity and integrity characteristics that make non-repudiation of the transactions possible. In recent years, different technologies and infrastructures have been developed with the aim of implementing mobile signature processes. Some are based on the SIM card. Others work over the middleware of the mobile device and cryptographic providers. Finally, there are already some frameworks which are independent of specific mobile device technologies and make mobile signatures available to application providers. Therefore, there is a great range of possibilities. In this paper we review the different solutions to date to provide electronic signature in mobile devices (SMS signature, SATK, WIM, USAT-i, SATSA, Mobile signature service, etc). We will comment on the most important goals of each solution and analyse the advantages and disadvantages. From this analysis we will obtain a global view of the current and future tendencies of mobile signature and thus help to provide mobile signature solutions.

Highlights

  • Nowadays, the use of mobile handsets is widespread

  • The use of e-signature in e-commerce solutions is a mature and broadly extended technology. When we move this e-commerce to the mobile world, the m-commerce, we discover that the provision of this technology is not mature enough, despite the fact that this technology does suppose important benefits for the users and application providers, and, as it is analyzed in [14], [30], it could represent important revenues to Mobile Operators and Certification Service Providers

  • In this paper we have presented the state-of-art of the most important solutions related to the provision of e-signature in mobile devices

Read more

Summary

Introduction

The use of mobile handsets is widespread. according to some information provided by operators or organizations such as the ITU [20], mobile handsets have reached a significant penetration rate in many countries such as Luxemburg (164%), Italy (128%), Hong Kong (117%), Spain (109%), Chile (74%), Argentina (64%), and so on. Some of the devices that satisfy these requirements are some cryptographic smart cards [10] that meet to the EAL 4+ specification [11] In this directive it is established that advanced electronic signatures which are based on a qualified certificate (named qualified signatures) and which are created by a secure-signature-creation device can be regarded as legally equivalent to handwritten signatures. The survey describes them and analyzes them from the security point of view as well as examining whether the solution evaluated can be considered equivalent to a handwritten signature, that is, if it is a qualified signature as was previously defined This survey will allow us to know what the most mature technologies are and develop non-repudiation-based applications or services to the mobile commerce. We conclude the paper and we introduce some open issues

Comparison criteria
Classification of the electronic signature solutions
Technologies based on SIM card
SAT - USAT
USAT-i
Technologies based on handheld
Windows Mobile OS
Symbian OS
Java ME
Hybrid Technologies
Independent-handheld solutions
Server-based Signatures
Mobile Signature Service
Comparisons
Findings
Conclusions
Full Text
Published version (Free)

Talk to us

Join us for a 30 min session where you can share your feedback and ask us any queries you have

Schedule a call