Research on Web and Mobile Technology

Contact Us

Your Name (required)

Your Email (required)

Subject

Your Message

Recent Papers

A Possible-Worlds Semantics for Kolmogorov’s Axiomatization of Probability Theory
Traveler Authentication at Airports
Fundamental Security Flaws in the 3-D Secure 2 Cardholder Authentication Specification
An Omission-Tolerant Cryptographic Checksum
Frictionless Web Payments with Cryptographic Cardholder Authentication, authors' version of a paper presented at HCI International 2019. Publisher's version available in the Late Breaking Papers volume of the proceedings
Using Near-Field Communication for Remote Identity Proofing
Backing Rich Credentials with a Blockchain PKI
Rich Credentials for Remote Identity Proofing
Identity-Based Protocol Design Patterns for Machine-to-Machine Secure Channels (Paper presented at M2MSec 2014)
Interpreting the EMV Tokenisation Specification
An Example of a Derived Credentials Architecture
It Is Time To Redesign Transport Layer Security
Privacy Postures of Authentication Technologies
A Comprehensive Approach to Cryptographic and Biometric Authentication from a Mobile Perspective

Frictionless Web Payments with Cryptographic Cardholder Authentication, with speaker notes; presented at HCI International 2019; updated August 1, 2019
The Rise of Cryptographic Authentication, presentation at SJSU, April 5, 2018, updated April 9
Storing Cryptographic Keys in Persistent Browser Storage, presentation at ICMC2017, revised after the conference
New Techniques for Remote Identity Proofing, presentation at CSUS on February 22, 2017
Presentation on Remote Identity Proofing at IIW 23
Five Techniques for Remote Identity Proofing, presentation to Government agencies at the conclusion of this project
Revocable Biometrics, slides for discussion at IIW XXII
Slides of presentation at ICMC 2015, revised after the conference
Faster Implementation of Modular Exponentiation in JavaScript: PDF; PowerPoint
Video interview of F. Corella (GlobalPlatform TEE Conf. 2014)
Virtual Tamper Resistance for a TEE (GlobalPlatform TEE Conf. 2014)
ID-Based Design Patterns for M2M Secure Channels (M2MSec 2014)
It’s Time to Replace SSL/TLS (U. of Utah 2014)
Privacy Postures of Authentication Technologies (ID360 2013)
Key Management Challenges of Derived Credentials and Techniques for Addressing Them (NIST Key Management W. 2012)

Search for:

A Survey of Existing and Proposed TLS Visibility Solutions
A Two-Version Visibility Solution for TLS 1.2 and TLS 1.3 based on a Handshake-Agnostic Middlebox
Extending the TLS 1.3 Visibility Solution to Include PSK and 0-RTT
Protocol-Level Details of the TLS 1.3 Visibility Solution
Reconciling Forward Secrecy with Network Traffic Visibility in Enterprise Deployments of TLS 1.3