<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-01056074</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-21T06:00:39+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">Security Analysis of Mobile Phones Used as OTP                                    Generators</title>
            <author role="aut">
              <persName>
                <forename type="first">Håvard</forename>
                <surname>Raddum</surname>
              </persName>
              <idno type="halauthorid">854241-0</idno>
              <affiliation ref="#struct-300937"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Lars Hopland</forename>
                <surname>Nestås</surname>
              </persName>
              <idno type="halauthorid">854242-0</idno>
              <affiliation ref="#struct-300937"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Kjell Jørgen</forename>
                <surname>Hole</surname>
              </persName>
              <idno type="halauthorid">854243-0</idno>
              <affiliation ref="#struct-300937"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Hal</forename>
                <surname>Ifip</surname>
              </persName>
              <email type="md5">2073ac78024b6e13f2714db96e9b1e63</email>
              <email type="domain">inria.fr</email>
            </editor>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2014-08-14 18:02:58</date>
              <date type="whenModified">2020-11-20 16:22:03</date>
              <date type="whenReleased">2014-08-18 10:18:32</date>
              <date type="whenProduced">2010-04-12</date>
              <date type="whenEndEmbargoed">2014-08-14</date>
              <ref type="file" target="https://inria.hal.science/hal-01056074v1/document">
                <date notBefore="2014-08-14"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://inria.hal.science/hal-01056074v1/file/60330327.pdf" id="file-1056074-860350">
                <date notBefore="2014-08-14"/>
              </ref>
              <ref type="externalLink" target="http://www.nowires.org/Papers-PDF/OTPanalysis.pdf"/>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="200187">
                <persName>
                  <forename>Hal</forename>
                  <surname>Ifip</surname>
                </persName>
                <email type="md5">2073ac78024b6e13f2714db96e9b1e63</email>
                <email type="domain">inria.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-01056074</idno>
            <idno type="halUri">https://inria.hal.science/hal-01056074</idno>
            <idno type="halBibtex">raddum:hal-01056074</idno>
            <idno type="halRefHtml">&lt;i&gt;4th IFIP WG 11.2 International Workshop on Information Security Theory and Practices: Security and Privacy of Pervasive Systems and Smart Devices (WISTP)&lt;/i&gt;, Apr 2010, Passau, Germany. pp.324-331, &lt;a target="_blank" href="https://dx.doi.org/10.1007/978-3-642-12368-9_26"&gt;&amp;#x27E8;10.1007/978-3-642-12368-9_26&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">4th IFIP WG 11.2 International Workshop on Information Security Theory and Practices: Security and Privacy of Pervasive Systems and Smart Devices (WISTP), Apr 2010, Passau, Germany. pp.324-331, &amp;#x27E8;10.1007/978-3-642-12368-9_26&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0 - Attribution<ref corresp="#file-1056074-860350"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="IFIP-LNCS" corresp="IFIP">IFIP - Lecture Notes in Computer Science</idno>
            <idno type="stamp" n="IFIP">IFIP - International Federation for Information Processing</idno>
            <idno type="stamp" n="IFIP-LNCS-6033" corresp="IFIP-LNCS">Information Security Theory and Practices. Security and Privacy of Pervasive Systems and Smart Devices</idno>
            <idno type="stamp" n="IFIP-TC" corresp="IFIP">IFIP Technical Committees </idno>
            <idno type="stamp" n="IFIP-TC11" corresp="IFIP-TC">IFIP TC11: Security and Privacy Protection in Information Processing Systems</idno>
            <idno type="stamp" n="IFIP-WISTP">IFIP-WISTP</idno>
            <idno type="stamp" n="IFIP-WG11-2">IFIP-WG11-2</idno>
            <idno type="stamp" n="IFIP-2010">IFIP-2010</idno>
          </seriesStmt>
          <notesStmt>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">Security Analysis of Mobile Phones Used as OTP                                    Generators</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Håvard</forename>
                    <surname>Raddum</surname>
                  </persName>
                  <idno type="halauthorid">854241-0</idno>
                  <affiliation ref="#struct-300937"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Lars Hopland</forename>
                    <surname>Nestås</surname>
                  </persName>
                  <idno type="halauthorid">854242-0</idno>
                  <affiliation ref="#struct-300937"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Kjell Jørgen</forename>
                    <surname>Hole</surname>
                  </persName>
                  <idno type="halauthorid">854243-0</idno>
                  <affiliation ref="#struct-300937"/>
                </author>
              </analytic>
              <monogr>
                <title level="m">Lecture Notes in Computer                                        Science</title>
                <meeting>
                  <title>4th IFIP WG 11.2 International Workshop on Information Security Theory and Practices: Security and Privacy of Pervasive Systems and Smart Devices (WISTP)</title>
                  <date type="start">2010-04-12</date>
                  <date type="end">2009-04-14</date>
                  <settlement>Passau</settlement>
                  <country key="DE">Germany</country>
                </meeting>
                <editor>Pierangela Samarati; Michael Tunstall; Joachim Posegga;                                    Konstantinos Markantonakis; Damien Sauveron</editor>
                <imprint>
                  <publisher>Springer</publisher>
                  <biblScope unit="serie">Information Security Theory and Practices. Security                                    and Privacy of Pervasive Systems and Smart Devices</biblScope>
                  <biblScope unit="volume">LNCS-6033</biblScope>
                  <biblScope unit="pp">324-331</biblScope>
                  <date type="datePub">2010</date>
                </imprint>
              </monogr>
              <idno type="doi">10.1007/978-3-642-12368-9_26</idno>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <classCode scheme="halDomain" n="info.info-dl">Computer Science [cs]/Digital Libraries [cs.DL]</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>The Norwegian company Encap has developed protocols                            enabling individuals to use their mobile phones as one-time password                            (OTP) generators. An initial analysis of the protocols reveals minor                            security flaws. System-level testing of an online bank utilizing Encap's                            solution then shows that several attacks allow a malicious individual to                            turn his own mobile phone into an OTP generator for another individual's                            bank account. Some of the suggested countermeasures to thwart the                            attacks are already incorporated in an updated version of the online                            banking system.</p>
            </abstract>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="regrouplaboratory" xml:id="struct-300937" status="VALID">
          <orgName>Department of Informatics [Bergen]</orgName>
          <orgName type="acronym">UiB</orgName>
          <desc>
            <address>
              <addrLine>Universitetet i Bergen, Institutt for informatikk, Postboks 7803, N-5020 Bergen</addrLine>
              <country key="NO"/>
            </address>
            <ref type="url">https://www.uib.no/en/ii</ref>
          </desc>
          <listRelation>
            <relation active="#struct-300728" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-300728" status="VALID">
          <idno type="IdRef">026431637</idno>
          <idno type="ROR">https://ror.org/03zga2b32</idno>
          <orgName>University of Bergen</orgName>
          <orgName type="acronym">UiB</orgName>
          <desc>
            <address>
              <addrLine>Universitetet i Bergen | Postboks 7800, NO-5020 Bergen</addrLine>
              <country key="NO"/>
            </address>
            <ref type="url">https://www.uib.no/en</ref>
          </desc>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>