Authenticated names

Abstract

Currently, most means of communication include some form of identification of the sender/originator, but none of these identifications are securely authenticated (at least not conveniently or in wide use). Legitimate business entities can be misrepresented by their name, and this creates opportunities for various scams known as phishing. We propose a new end-to-end authentication scheme that can be used to authenticate companies over many means of communication including telephony, email, web, and Instant Messaging. The framework is flexible and gives concerned legitimate institutions the ability to delegate their authenticated names to employees outside the office as well as outsourcing companies. Categories and Subject DescriptorsK.6.5 [Management of computing and information systems]:

Prototyping a New Identity Authentication Framework for IP Telephony

“…In [4] it is shown how domain names suffer from the same problem and proposes to authenticate "Identity" as the solution. In general, the approach is based on X.509 certificates and the trust model is based on the existing trademark systems.…”

“…We prototype a strong identity authentication mechanism relying on a new trust model -the RealName registry [4] for IP telephone. This mechanism targets both Business-to-Customer (B2C) applications -e.g.…”