Sagewire Logo

Telephonic Credentials

5 Message(s) by 4 Author(s) originally posted in java programmer


From: Roedy Green Date:   Thursday, October 25, 2007
I think it'd be nice if I could prove to someone on the other end
of the phone I am me, and demand they prove they are who they claim to
be.

It could be done by letting a modem kick in for a second to exchange
challenge phrases to be encrypted by identification certificate that
might include name, address, phone number, expiry date, company.

Then if some charity I donate to phone me, I can be sure it is them.

There are so many scams out there.

It might also be done by each of us contacting an Internet server.

Has anyone heard of such projects?
--
Roedy Green Canadian Mind Products
The JAVA Glossary
http://mindprod.com


From: Daniel Pitts Date:   Thursday, October 25, 2007
wrote in message :
I think it'd be nice if I could prove to someone on the other end
of the phone I am me, and demand they prove they are who they claim to
be.
It could be done by letting a modem kick in for a second to exchange
challenge phrases to be encrypted by identification certificate that
might include name, address, phone number, expiry date, company.
Then if some charity I donate to phone me, I can be sure it is them.
There are so many scams out there.
It might also be done by each of us contacting an Internet server.
Has anyone heard of such projects?


I do not know about phone based security, but I know that the concept is
used in PGP and GPG.

Basically, you can ask the person to cryptographically sign something.
For instance, if they have a private key , and you've a public key
(which you know is theirs), ask them to encrypt a simple,
random-each-time value. Then verify that the trusted public key can
decrypt that value. This verifies that the caller has access to the
private key that matches the public key you tested.

Of course, you still have to be sure that the public key is the public
key of the entity you believe it is.

Actually, you can do the other way around too. Encrypt something with
the public key, ask them to decrypt it and tell you want it was.--
Daniel Pitts' Tech Blog: <http://virtualinfinity.net/wordpress/>


From: Greg R. Broderick Date:   Thursday, October 25, 2007
wrote in message in


I think it'd be nice if I could prove to someone on the other end
of the phone I am me, and demand they prove they are who they claim to
be.



http://en.wikipedia.org/wiki/Automatic_number_identification

Already there.

--
---------------------------------------------------------------------
Greg R. Broderick usenet200710@xxxxxxxxxxx

A. Top posters.
Q. What is the most annoying thing on Usenet?
---------------------------------------------------------------------


From: Lew Date:   Friday, October 26, 2007
wrote in message:
wrote in message in

I think it'd be nice if I could prove to someone on the other end
of the phone I am me, and demand they prove they are who they claim to
be.
http://en.wikipedia.org/wiki/Automatic_number_identification
Already there.



That does not speak to identifying the participant, at least not until phone
numbers represent the unique subcutaneous transponder for each individual.

--
Lew


From: Roedy Green Date:   Friday, October 26, 2007
wrote in message,
quoted or indirectly quoted someone who said :

That does not speak to identifying the participant, at least not until phone
numbers represent the unique subcutaneous transponder for each individual.



I elaborate on the project and how you might implement it at
http://mindprod.com/project/telid.html
--
Roedy Green Canadian Mind Products
The JAVA Glossary
http://mindprod.com



Next Message: Partner needed



Programming | Sports | Autos

copyright 2006
Valid XHTML 1.0 Transitional