A Framework for Identity Management on Mobile Devices for mGovernance Application

In the past decade, mobile computing has spurred the development of diverse user-centric applications, enhancing the capabilities of service providers and government entities. Recognizing the security flaws of password-based authentication, mobile devices increasingly adopt two-factor or three-factor authentication in line with NIST standards. Accessing most services involves user registration with a service provider, involving the submission of personal information, constituting the user's digital identity. This digital identification is crucial for secure online transactions via mobile devices. The study proposes a mobile identity system, integrating a PKI-based communication approach with robust secure key storage. Notably, this method is cost-effective, scalable, and independent of external hardware, offering a comprehensive solution for digital identification and secure online transactions on portable devices.