Research on Web and Mobile Technology

Contact Us

Your Name (required)

Your Email (required)

Subject

Your Message

Recent Papers

An Omission-Tolerant Cryptographic Checksum, also available as IACR ePrint Archive Report 2019/192
Frictionless Web Payments with Cryptographic Cardholder Authentication, to be presented at HCI International 2019
Using Near-Field Communication for Remote Identity Proofing
Backing Rich Credentials with a Blockchain PKI
Rich Credentials for Remote Identity Proofing
Identity-Based Protocol Design Patterns for Machine-to-Machine Secure Channels (Paper presented at M2MSec 2014)
Interpreting the EMV Tokenisation Specification
An Example of a Derived Credentials Architecture
It Is Time To Redesign Transport Layer Security
Privacy Postures of Authentication Technologies
A Comprehensive Approach to Cryptographic and Biometric Authentication from a Mobile Perspective

Frictionless Web Payments with Cryptographic Cardholder Authentication, with speaker notes; presented at HCI International 2019; updated August 1, 2019
The Rise of Cryptographic Authentication, presentation at SJSU, April 5, 2018, updated April 9
Storing Cryptographic Keys in Persistent Browser Storage, presentation at ICMC2017, revised after the conference
New Techniques for Remote Identity Proofing, presentation at CSUS on February 22, 2017
Presentation on Remote Identity Proofing at IIW 23
Five Techniques for Remote Identity Proofing, presentation to Government agencies at the conclusion of this project
Revocable Biometrics, slides for discussion at IIW XXII
Slides of presentation at ICMC 2015, revised after the conference
Faster Implementation of Modular Exponentiation in JavaScript: PDF; PowerPoint
Video interview of F. Corella (GlobalPlatform TEE Conf. 2014)
Virtual Tamper Resistance for a TEE (GlobalPlatform TEE Conf. 2014)
ID-Based Design Patterns for M2M Secure Channels (M2MSec 2014)
It’s Time to Replace SSL/TLS (U. of Utah 2014)
Privacy Postures of Authentication Technologies (ID360 2013)
Key Management Challenges of Derived Credentials and Techniques for Addressing Them (NIST Key Management W. 2012)

Search for:

Online Cardholder Authentication without Accessing the Card Issuer’s Site
A Formal Proof of Omission-Tolerant Integrity Protection
Mapping a Formal Definition of Collision Resistance to Existing Implementations of Hash Functions
Using an Omission-Tolerant Checksum for Selective Disclosure of Attributes Asserted by a Public Key Certificate
An Omission-Tolerant Cryptographic Checksum