208 Software Networks
look at how confidential communication takes place between the
mobile terminal and, say, an Internet-based trader. This relationship is
illustrated in Figure 7.15.
Figure 7.15. Securing by a Cloud of secure elements
Communication takes place between the mobile terminal and the
secure element, which is in the Cloud of security. This communication
takes place after the opening of a secure tunnel once contact has been
established with the SSL/TLS protocol. Once this communication has
been completed, the secure element always connects with the trader
through a secure channel which is opened between the secure element
and the retailer’s site. Purchases can then be made perfectly securely.
Once the purchase has been made, control is passed back to the
mobile terminal, which is able to retrieve the bought music or video
or, indirectly, any type of purchase. The secure element may be in a
Cloud of secure elements, but also in an HSM (Hardware Security
Module) which plays the same role, but the client still needs to trust
that device. It is for this reason that Clouds of secure elements are still
the most likely solution to develop, because secure elements – e.g.
smartcards – may actually be held by the user, who will therefore have
a high level of trust in that system.
www.it-ebooks.info
look at how confidential communication takes place between the
mobile terminal and, say, an Internet-based trader. This relationship is
illustrated in Figure 7.15.
Figure 7.15. Securing by a Cloud of secure elements
Communication takes place between the mobile terminal and the
secure element, which is in the Cloud of security. This communication
takes place after the opening of a secure tunnel once contact has been
established with the SSL/TLS protocol. Once this communication has
been completed, the secure element always connects with the trader
through a secure channel which is opened between the secure element
and the retailer’s site. Purchases can then be made perfectly securely.
Once the purchase has been made, control is passed back to the
mobile terminal, which is able to retrieve the bought music or video
or, indirectly, any type of purchase. The secure element may be in a
Cloud of secure elements, but also in an HSM (Hardware Security
Module) which plays the same role, but the client still needs to trust
that device. It is for this reason that Clouds of secure elements are still
the most likely solution to develop, because secure elements – e.g.
smartcards – may actually be held by the user, who will therefore have
a high level of trust in that system.
www.it-ebooks.info