Formal Analysis of the Estonian Mobile-ID Protocol

In this paper, we report the results of the formal analysis performed on the Estonian Mobile-ID protocol (deployed since 2008), allowing citizens and permanent residents of Estonia to authenticate themselves and issue digital signatures with the help of a signature-capable SIM-card inside their mobile phone. We analyze the resiliency of the protocol to network attacks under various threat models (compromised infrastructure, client application, etc., confusing user interface) and give suggestions for improvement.

• Type: Conference
• Year: 2009
• Where: NORDSEC
• Authors: Peeter Laud, Meelis Roos
• Keywords: Estonian Mobile-ID Protocol, Formal Analysis, NORDSEC 2009, Various Threat Models