P800/P802

 

White Paper, January 2003

MeT covers the following core functions:

Initiation

Providing the Personal Trusted Device (PTD) with key pairs for

 

authentication and signing.

Registration

Providing the PTD with certificates associated with its keys.

Secure Connection

Establish an encrypted link with the server in order to keep

 

information private.

User Authentication

Prove the identity of an individual or an application.

Digital Signatures

Authorise a contract by means of a user signing text (see example

 

below)

The P800 fulfils the compliance requirements for MeT version 1.0, (February 2001), according to the following MeT specifications:

Met Core Specification

MeT PTD Security Requirements

MeT CUE Consistent User Experience

More information on MeT may be found at http://www.mobiletransaction.org/

MeT Example

Whilst shopping around for a new television set, the user finds a good price from a store and decides to order immediately. The store requests a ‘signed text’ confirmation from the customer:

As with many online transactions, the user enters all the details and must then press OK to confirm the transaction.

The user is requested to sign the transaction using a suitable certificate.

The certificate has a related signature PIN. The user enters the PIN to confirm the transaction.

65