PhoneID is a framework for user authentication using a mobile phone. A J2ME enabled mobile phone would store user secrets such as passwords. The phone would send passwords to host PC for Windows login and website login, automatically through Bluetooth. PhoneID encrypts the secrets both on the phone and on the host, making the data secure even when one of the two is stolen or compromised.
PhoneID has the following components
MIDlet – J2ME applet lives on mobile phone, carries out phone side encryption
Service – Java service runs on host computer, communicates with MIDlet via Bluetooth, carries out host side encryption
CLib – Library exposes C++ API for applications. It communicates with Service via TCP/IP.
JavaLib – Library exposes Java API for applications. It communicates with Service via TCP/IP.
Config – Configuration tool lets users modify data on MIDlet.
pGINA Plugin – Plugin for pGINA (open source GINA replacement). It lets pGINA obtain username and password from MIDlet.
Browser Plugin – Plugin for Internet Explorer. It lets a user fill username and password on a homepage from MIDlet.
