SmaSa - Smartcard-based Security Anchors for Android

Project Description:

The aim of the project is the development of methods and software components for the use of safety anchors especially for the operating system Android. Since no TPMs are installed in mobile terminals, an additional smart card in the format of an SD card should serve as an anchor.

If it should show in the course of the project that individual security components can not be implemented on this card, special hardware or software concepts such as the ARM TrustZone or Java Card are alternatives. Based on these technologies, secure booting for Android devices with authentication of the user before the actual boot process is implemented (pre-boot authentication). Without a successful login, the entire device - all applications, all data and the operating system - remains encrypted.

As an additional extension, it will be possible to verify the integrity of the smartphone using the remote attestation. The mobile phone is checked by a central entity (mobile device management component) on the company side. The project thus makes it possible to use smart card-based security applications on Android as well, opening up new fields of application for this technology.