Mobile signature

The term first appeared in articles introducing mSign (short for Mobile Electronic Signature Consortium).

In 2001, mSign gained industry-wide coverage when it came apparent that Brokat (one of the founding companies) also obtained a process patent in Germany for using the mobile phone to generate digital signatures.

The most successful mobile signature solutions[buzzword] can be found in Turkey,[4] Lithuania,[5] Estonia[6] and Finland[7][8] with millions of users.

The choice of the registration procedure details during the definition of the attributes included in this digital certificate can be used to produce different levels of identity assurance.

Mobile Ink[9] unites high security and user-friendly access to digital services which require strong authentication and authorization.

[11][12] The platform allows simultaneous existence of multiple keys and associated identities with distinct registration procedures.

Part of the background was update of national laws allowing digital Person Identity Certificates (for Mobiilivarmenne use) to be issued also by other parties than official registration authorities via Police offices.

All of these were reviewed and approved by the Finnish Communication Regulatory Authority which tasks include the oversight of the identity registration services also at government registries.

At the beginning of 2018 Ukrainian cell operators are evaluating proposals and testing platforms from different local and foreign developers.

MPass Austria started mobile signature by 2003, as a technology of Bürgerkarte (which includes electronic signing with SmartCards).

Methics Oy is a privately held Finnish technology company with strong expertise on PKI and MSSP services.

[18] Schemes like one-time-password-generators and two-factor authentication do not completely solve man-in-the-middle attacks on open networks like the Internet.

[19] However, supporting the authentication on the Internet with a parallel closed network like mobile/GSM and a digital signature enabled SIM card is the most secure method today against this type of attack.

Delivery of in particular the sPUK codes creates considerable security information logistics problems, which can entirely be avoided with the use of on-board key generation.

[22] In introduction of the Finnish Mobiilivarmenne[23] service in 2010, only one out of three operators chose to use this on-board key generation capability with user interaction.

Also if a mobile phone version had issues with SIM Application Toolkit protocol, that became evident immediately during a registration process using on-board key generation.