Comarch MobilePKI

Comarch MobilePKI is a solution that supports authentication and authorization using mobile technology. It enables full use of Public Key Infrastructure (PKI) on mobile phones using SIM cards.

Comarch MobilePKI authentication and authorization rests on a java application installed on a SIM card (with the full option with cryptoprocessor). The application converts the mobile phone into a mobile cryptographic card that contains a public and private key and does not require a card reader for signature submission. SMSs are used to communicate with the transaction system for key generation, activation and signature submission.

Comarch MobilePKI Authorization and Authentication

Using this authentication and authorization method requires no additional mobile phone operator services. The only change required is to substitute the common SIM card for a SIM with a crypto processor. It is also possible to come to an agreement with the mobile phone operator to add Comarch MobileID to the SIM card.

System Features

• Telephone communication – access to the bank’s transaction system via SMS
• Compatible with STK GSM 11.14 standard
• Uses 1024 bit RSA keys
• Generates keys using an application located on a SIM card (in the case of a cryptographic card the application is located on the card)
• Option to use many key pairs
• Private key protected by PIN
• SIM cards can be unblocked by SMS
• Easy installation

Download:

• Comarch IT Security - leaflet