OTPK
Company: Data Security Systems Solutions
Details: Not yet available.
Challenge: Laws surrounding the use of digital signatures are becoming stricter, making security for mobile users challenging. In many Asian and European countries, such as Singapore and Germany, governments mandate that private keys used for digital signatures must be in possession of the user at all times. According to Tan Teik Guan, CEO and CTO of Data Security Solutions, this rules out most of the technology available to mobile users today.
Solution: Guan and his team are developing an OTPK, or one-time private key, to enable mobile and other users to digitally sign electronic transactions and documents. With OTPK, a key is generated via a browser-based Java applet whenever a user needs to carry out a signature on a device or browser. That key is sent for certification, used to sign the transaction or document, and then deleted. Though the key is no longer available, the certification chain remains so users are able to revalidate their documents. OTPK uses strong cryptography, including RSA 1024 for PCs and ECDA for mobile phones, to ensure the highest level of compliance and privacy. Guan says OTPK will enable tightened security for mobile applications such as allowing doctors to digitally sign prescriptions from their mobile phones.
