Subject: [KEYPROV] "Cloud" Token - Reference Implementation

From: Anders Rundgren <[email-masked]>
Date: Wed, 19 May 2010 20:38:51 +0200

http://code.google.com/p/openkeystore/source/browse/trunk/library/src/org/webpki/sks/test/SKSReferenceImplementation.java

This is preliminary and not 100% conformant with the specification
( http://webpki.org/papers/keygen2/sks-api-arch.pdf ), but it does
already in the current incarnation support simultaneous provisioning of

- Symmetric keys
- PKI
- Information Cards
- PINs, and PUKs
- Logotypes
- Arbitrary key attribute data

using an E2ES (End-to-End Secured) scheme.

As you can see complexity is quite low which IMO is a prerequisite for reaching
out to consumers on a huge variety of platforms.   In a genuine (hardware) token
implementation, resource management is likely to be more difficult though.

If you have any ideas on how "Cloud" tokens should be designed,
it seems that the time has come to voice them :-)

Enjoy!

Anders

PS The post-provisioning credential-management primitives are at the
time of writing still missing in the code. DS