Mobile Call Authentication using Near Field Communication-based Smart Cards for Proof of Identity towards a Company

Many online services require an authentication of the user against the service provider. Most telephone services have insufficient security mechanisms. Even though, modern IP-based telephone networks are exposed to a larger range of security threats in camparison to classical circuit switched networks. In this paper, we present a concept and prototype, which uses smart cards for user authentication in Voice-over-IP (VoIP) calls. During an encrypted VoIP call the user is able to authenticate himself against the service provider, e.g. a company, using a smart card and an NFC-enabled smartphone. The papers describes the server infrastructure of the service provider, the implementation on the mobile device of the user and the integration of the smart card.