Stable release 2.0.1 Website www.secmsg.emudhra.com | Type Encryption | |
 | ||
Developer(s) 3i Infotech Consumer Services Ltd. Operating system | ||
eMudhra SecMsg is mobile application designed to secure the SMS channel. It allows users to send SMS's that are encrypted and signed using PKI technology and ensures that it is decrypted only by the intended user.
Contents
- Key pair generation
- Built in security
- Secure communication
- Secure Safe
- Two factor authentication
- PasswordATM PIN retrieval
- Features
- SecMsg on the News
- References
The algorithms used for crypto processes like Signing, Encryption, Decryption are RSA/ECC, AES and SHA.
Key pair generation
The RSA or ECC key pair is generated in the application and stored in the mobile. These keys will be used for all the crypto process like signing, encryption and decryption. The key pair generation is a onetime process and is completely user driven. The user can also use X.509 digital certificates from any certification authority (CA) for the crypto processes mentioned above.
Built-in-security
The user is required to provide the application PIN whenever he wants to gain access to it. The key pair is protected with the key PIN which controls signing, encryption/decryption processes.
Secure communication
SecMsg can be used to send and receive confidential messages. Secure communication with peers can be established by exchanging the public key with friends/spouse/colleagues. The public key received from peers will be stored in the application.
The messages composed by the user will be encrypted with recipient's public key and will land up in the inbox of SecMsg. This message can be decrypted with the intended recipient's private key only.[see Fig.1]
Secure Safe
'My Vault' is an organizer that gives additional security to store personal information that is protected with PIN. All the information stored will be encrypted with the RSA private key.
Two-factor authentication
Any online transaction (Fund transfer, Add payee, Online broking,End of day confirmation)can be acknowledged by digitally signing the transaction details. This ensures confidentiality,integrity and more importantly non repudiation. Acknowledgment of the transaction thus made cannot be repudiated later.
Password/ATM PIN retrieval
Users can use the application for resetting/receiving passwords. Banks can send the ATM PIN/Internet banking passwords as an encrypted text message for which a digitally signed acknowledgment can be received in no time.