Title: Mobile Adaptive Authentication Manager (MAAM)
Abstract:
Our project focuses on the design and implementation of a Mobile Adaptive Authentication Manager (MAAM). This framework is designed to dynamically manage the type and level of authentication of mobile commerce transactions and services in near real-time, adapting the authentication depending on the context of that particular transaction together with the capabilities of both the end user and device.
The Mobile Adaptive Authentication Manager (MAAM) is an extension of The Human Chain’s existing Mobile eXecution Environment (MxE), a well proven flexible mobile application test, development and demonstration environment to provide a flexible tool for developers and service providers to test, develop and bring to market m-commerce solutions in a real time over the air (OTA) environment. More details can be found at: http://www.thehumanchain.com/mxe/MXE10XX%20Operational%20Overview%20V0.4%2015_08_2012.pdf
This unique new development of a multi factor authentication rules engine and mobile Software Development Kits (SDKs) will be used within the existing MxE framework to allow full end to end testing of simple, inclusive and complex multi factor authentication types helping drive the market for secure m-commerce solutions.
The new authentication rules engine and the SDKs will for the first time support mobile application developers and service providers who are designing and then want to test mobile client applications, wallets and solutions using mobile visual, audio and biometric authenticators focusing on end user security and inclusivity. This new framework/set of tools using industry standard languages, techniques and Application Programming Interfaces (APIs) will improve time to market and drive security feature development by providing enhancements to an existing framework facilitating a focus on improving end to end customer experience and enhance the use of mobile enablers.
The proposed design centres around addressing two of the key challenges facing the m-commerce industry today:
1) How to provide suitable authentication and a level of trust that is directly appropriate to the circumstances of a particular transaction at any given time, given that the context of the transaction can constantly change for both users and merchants.
2) How to provide suitable authentication whilst at the same time maintain a consistent and intuitive user experience for the end user, in order to gain and maintain the users perception of trust in the service being used.