Telephonic Credentials
5 Message(s) by 4 Author(s) originally posted in java programmer
| From: Roedy Green |
Date: Thursday, October 25, 2007
|
I think it'd be nice if I could prove to someone on the other end
of the phone I am me, and demand they prove they are who they claim to
be.
It could be done by letting a
modem kick in for a second to exchange
challenge phrases to be encrypted by identification certificate that
might
include name, address, phone number, expiry date, company.
Then if some charity I donate to phone me, I can be sure it is them.
There are so many scams out there.
It might also be done by each of us contacting an
Internet server.
Has anyone heard of such projects?
--
Roedy
Green Canadian Mind Products
The JAVA Glossary
http://mindprod.com
| From: Daniel Pitts |
Date: Thursday, October 25, 2007
|
wrote in
message :
I think it'd be nice if I could prove to someone on the other end
of the phone I am me, and demand they prove they are who they claim to
be.
It could be done by letting a modem kick in for a second to exchange
challenge phrases to be encrypted by identification certificate that
might include name, address, phone number, expiry date, company.
Then if some charity I donate to phone me, I can be sure it is them.
There are so many scams out there.
It might also be done by each of us contacting an Internet server.
Has anyone heard of such projects?
I do not know about phone based security, but I know that the concept is
used in
PGP and GPG.
Basically, you can ask the person to cryptographically sign something.
For instance, if they have a private
key , and you've a public key
(which you know is theirs), ask them to encrypt a simple,
random-each-time value. Then verify that the trusted public key can
decrypt that value. This verifies that the caller has access to the
private key that matches the public key you tested.
Of course, you still have to be sure that the public key is the public
key of the entity you believe it is.
Actually, you can do the other way around too. Encrypt something with
the public key, ask them to decrypt it and tell you want it was.--
Daniel Pitts' Tech Blog:
<http://virtualinfinity.net/wordpress/>
| From: Greg R. Broderick |
Date: Thursday, October 25, 2007
|
wrote in message in
I think it'd be nice if I could prove to someone on the other end
of the phone I am me, and demand they prove they are who they claim to
be.
http://en.wikipedia.org/wiki/Automatic_number_identification
Already there.
--
---------------------------------------------------------------------
Greg R. Broderick usenet200710@xxxxxxxxxxx
A. Top posters.
Q. What is the most annoying thing on Usenet?
---------------------------------------------------------------------
| From: Lew |
Date: Friday, October 26, 2007
|
wrote in message:
wrote in message in
I think it'd be nice if I could prove to someone on the other end
of the phone I am me, and demand they prove they are who they claim to
be.
http://en.wikipedia.org/wiki/Automatic_number_identification
Already there.
That does not speak to identifying the participant, at least not until phone
numbers represent the unique subcutaneous transponder for each individual.
--
Lew
| From: Roedy Green |
Date: Friday, October 26, 2007
|
wrote in message,
quoted or indirectly quoted someone who said :
That does not speak to identifying the participant, at least not until phone
numbers represent the unique subcutaneous transponder for each individual.
I elaborate on the project and how you might implement it at
http://mindprod.com/project/telid.html
--
Roedy Green Canadian Mind Products
The JAVA Glossary
http://mindprod.com
Next Message: Partner needed