Smartphone - Revision history

Tomjones: /* Problems */

2020-05-04T19:24:27Z

Problems

← Older revision		Revision as of 19:24, 4 May 2020
Line 9:		Line 9:
	*Phones can be lost or stolen.		*Phones can be lost or stolen.
	*Phone numbers can be reused or stolen.		*Phone numbers can be reused or stolen.
	* [ https://www.pewresearch.org/internet/2019/11/15/how-americans-think-about-privacy-and-the-vulnerability-of-their-personal-data/pi_2019-11-14_privacy_1-04/ Majorities of Americans think their personal information is less secure today than in the past]		* [https://www.pewresearch.org/internet/2019/11/15/how-americans-think-about-privacy-and-the-vulnerability-of-their-personal-data/pi_2019-11-14_privacy_1-04/ Majorities of Americans think their personal information is less secure today than in the past]
	* While an [https://www.pewresearch.org/internet/2019/11/15/how-americans-think-about-privacy-and-the-vulnerability-of-their-personal-data/#seven-in-ten-americans-say-they-feel-as-if-their-data-is-less-secure-today-than-it-was-five-years-ago increasing number of users feel as if their dta is less secure today that it was five years ago,] they are unwilling to spend much personal effort to protect their data.		* While an [https://www.pewresearch.org/internet/2019/11/15/how-americans-think-about-privacy-and-the-vulnerability-of-their-personal-data/#seven-in-ten-americans-say-they-feel-as-if-their-data-is-less-secure-today-than-it-was-five-years-ago increasing number of users feel as if their dta is less secure today that it was five years ago,] they are unwilling to spend much personal effort to protect their data.

Tomjones: /* Problems */

2020-05-04T19:24:11Z

Problems

← Older revision		Revision as of 19:24, 4 May 2020
Line 9:		Line 9:
	*Phones can be lost or stolen.		*Phones can be lost or stolen.
	*Phone numbers can be reused or stolen.		*Phone numbers can be reused or stolen.
	* [ https://www.pewresearch.org/internet/2019/11/15/how-americans-think-about-privacy-and-the-vulnerability-of-their-personal-data/pi_2019-11-14_privacy_1-04/ Majorities of Americans think their personal information is less secure today than in the past]		* [ https://www.pewresearch.org/internet/2019/11/15/how-americans-think-about-privacy-and-the-vulnerability-of-their-personal-data/pi_2019-11-14_privacy_1-04/ Majorities of Americans think their personal information is less secure today than in the past]
	* While an [https://www.pewresearch.org/internet/2019/11/15/how-americans-think-about-privacy-and-the-vulnerability-of-their-personal-data/#seven-in-ten-americans-say-they-feel-as-if-their-data-is-less-secure-today-than-it-was-five-years-ago increasing number of users feel as if their dta is less secure today that it was five years ago,] they are unwilling to spend much personal effort to protect their data.		* While an [https://www.pewresearch.org/internet/2019/11/15/how-americans-think-about-privacy-and-the-vulnerability-of-their-personal-data/#seven-in-ten-americans-say-they-feel-as-if-their-data-is-less-secure-today-than-it-was-five-years-ago increasing number of users feel as if their dta is less secure today that it was five years ago,] they are unwilling to spend much personal effort to protect their data.

Tomjones: /* Problems */

2020-05-04T19:23:51Z

Problems

← Older revision		Revision as of 19:23, 4 May 2020
Line 9:		Line 9:
	*Phones can be lost or stolen.		*Phones can be lost or stolen.
	*Phone numbers can be reused or stolen.		*Phone numbers can be reused or stolen.
			* [ https://www.pewresearch.org/internet/2019/11/15/how-americans-think-about-privacy-and-the-vulnerability-of-their-personal-data/pi_2019-11-14_privacy_1-04/ Majorities of Americans think their personal information is less secure today than in the past]
	* While an [https://www.pewresearch.org/internet/2019/11/15/how-americans-think-about-privacy-and-the-vulnerability-of-their-personal-data/#seven-in-ten-americans-say-they-feel-as-if-their-data-is-less-secure-today-than-it-was-five-years-ago increasing number of users feel as if their dta is less secure today that it was five years ago,] they are unwilling to spend much personal effort to protect their data.		* While an [https://www.pewresearch.org/internet/2019/11/15/how-americans-think-about-privacy-and-the-vulnerability-of-their-personal-data/#seven-in-ten-americans-say-they-feel-as-if-their-data-is-less-secure-today-than-it-was-five-years-ago increasing number of users feel as if their dta is less secure today that it was five years ago,] they are unwilling to spend much personal effort to protect their data.

Tomjones: /* Proposal for Assurance */

2020-05-04T17:43:56Z

Proposal for Assurance

← Older revision		Revision as of 17:43, 4 May 2020
Line 13:		Line 13:
	==Solutions==		==Solutions==
	===Proposal for Assurance===		===Proposal for Assurance===
	Following the pattern created by NIST SP 800-63-3 it is proposed to create levels of assurance for Smartphones and software running on those phones with a [[Software Statement]].		Following the pattern created by NIST SP 800-63-3 it is proposed to create levels of assurance for Smartphones and software running on those phones with a [https://tcwiki.azurewebsites.net/index.php?title=Software_Statement Software Statement].
	# Simplest level the app makes an assurance of its own identity, provenance and policies as well as the security configuration of the device it is running on.		# Simplest level the app makes an assurance of its own identity, provenance and policies as well as the security configuration of the device it is running on.
	# The assertion includes a description of the authentication requirements placed on the user and can accommodate, as installed on the smartphone, at least AAL2 level of assurance to to the relying party. The app will not run phones without support for key protection.		# The assertion includes a description of the authentication requirements placed on the user and can accommodate, as installed on the smartphone, at least AAL2 level of assurance to to the relying party. The app will not run phones without support for key protection.
	# The assertion is signed by an accredited testing body as meeting the highest level of assurance by a recognized accrediting body.		# The assertion is signed by an accredited testing body as meeting the highest level of assurance by a recognized accrediting body.

	===Security===		===Security===
	* All modern smartphone have the ability to limit access by the use of some authentication factor any any purpose except emergency access for calling or emergency contact information. The user has the option to direct some notices to the lock screen if they wish. Apple and some Android phones come with the lock screen enabled by default, but all allow it to be disabled.		* All modern smartphone have the ability to limit access by the use of some authentication factor any any purpose except emergency access for calling or emergency contact information. The user has the option to direct some notices to the lock screen if they wish. Apple and some Android phones come with the lock screen enabled by default, but all allow it to be disabled.

Tomjones at 17:42, 4 May 2020

2020-05-04T17:42:11Z

← Older revision		Revision as of 17:42, 4 May 2020
Line 12:		Line 12:

	==Solutions==		==Solutions==
			===Proposal for Assurance===
			Following the pattern created by NIST SP 800-63-3 it is proposed to create levels of assurance for Smartphones and software running on those phones with a [[Software Statement]].
			# Simplest level the app makes an assurance of its own identity, provenance and policies as well as the security configuration of the device it is running on.
			# The assertion includes a description of the authentication requirements placed on the user and can accommodate, as installed on the smartphone, at least AAL2 level of assurance to to the relying party. The app will not run phones without support for key protection.
			# The assertion is signed by an accredited testing body as meeting the highest level of assurance by a recognized accrediting body.
	===Security===		===Security===
	* All modern smartphone have the ability to limit access by the use of some authentication factor any any purpose except emergency access for calling or emergency contact information. The user has the option to direct some notices to the lock screen if they wish. Apple and some Android phones come with the lock screen enabled by default, but all allow it to be disabled.		* All modern smartphone have the ability to limit access by the use of some authentication factor any any purpose except emergency access for calling or emergency contact information. The user has the option to direct some notices to the lock screen if they wish. Apple and some Android phones come with the lock screen enabled by default, but all allow it to be disabled.

Tomjones: /* Recommendations */

2020-05-04T04:43:09Z

Recommendations

← Older revision		Revision as of 04:43, 4 May 2020
Line 18:		Line 18:
	===Recommendations===		===Recommendations===
	# Ensure that users understand the need for privacy and make it little extra effort to enable it.		# Ensure that users understand the need for privacy and make it little extra effort to enable it.
			# Ensure transparency of the use of data is maintained.
	# Give users some functionality with little privacy, but make significant data available only if the user has enabled smart phone access.		# Give users some functionality with little privacy, but make significant data available only if the user has enabled smart phone access.

Tomjones: /* Proposal */

2020-05-04T04:41:46Z

Proposal

← Older revision		Revision as of 04:41, 4 May 2020
Line 16:		Line 16:
	* On 2017-03-15 28% of smartphone users have [https://www.pewresearch.org/fact-tank/2017/03/15/many-smartphone-owners-dont-take-steps-to-secure-their-devices/ no lock screen on their phones.] 26% had a PIN code and 23% used a thumbprint scanner.		* On 2017-03-15 28% of smartphone users have [https://www.pewresearch.org/fact-tank/2017/03/15/many-smartphone-owners-dont-take-steps-to-secure-their-devices/ no lock screen on their phones.] 26% had a PIN code and 23% used a thumbprint scanner.
	* On 2020-04-24 Half of of Americans [https://www.pewresearch.org/fact-tank/2020/04/14/half-of-americans-have-decided-not-to-use-a-product-or-service-because-of-privacy-concerns/ have decide not to use a product or service because of privacy concerns.]		* On 2020-04-24 Half of of Americans [https://www.pewresearch.org/fact-tank/2020/04/14/half-of-americans-have-decided-not-to-use-a-product-or-service-because-of-privacy-concerns/ have decide not to use a product or service because of privacy concerns.]
	===~~Proposal~~===		===Recommendations===
	# Ensure that users understand the need for privacy and make it little extra effort to enable it.		# Ensure that users understand the need for privacy and make it little extra effort to enable it.
	# Give users some functionality with little privacy, but make significant data available only if the user has enabled smart phone access.		# Give users some functionality with little privacy, but make significant data available only if the user has enabled smart phone access.

Tomjones: /* Security */

2020-05-04T04:41:05Z

Security

← Older revision		Revision as of 04:41, 4 May 2020
Line 16:		Line 16:
	* On 2017-03-15 28% of smartphone users have [https://www.pewresearch.org/fact-tank/2017/03/15/many-smartphone-owners-dont-take-steps-to-secure-their-devices/ no lock screen on their phones.] 26% had a PIN code and 23% used a thumbprint scanner.		* On 2017-03-15 28% of smartphone users have [https://www.pewresearch.org/fact-tank/2017/03/15/many-smartphone-owners-dont-take-steps-to-secure-their-devices/ no lock screen on their phones.] 26% had a PIN code and 23% used a thumbprint scanner.
	* On 2020-04-24 Half of of Americans [https://www.pewresearch.org/fact-tank/2020/04/14/half-of-americans-have-decided-not-to-use-a-product-or-service-because-of-privacy-concerns/ have decide not to use a product or service because of privacy concerns.]		* On 2020-04-24 Half of of Americans [https://www.pewresearch.org/fact-tank/2020/04/14/half-of-americans-have-decided-not-to-use-a-product-or-service-because-of-privacy-concerns/ have decide not to use a product or service because of privacy concerns.]
			===Proposal===
			# Ensure that users understand the need for privacy and make it little extra effort to enable it.
			# Give users some functionality with little privacy, but make significant data available only if the user has enabled smart phone access.

	==References==		==References==

Tomjones: /* Problems */

2020-05-04T04:38:49Z

Problems

← Older revision		Revision as of 04:38, 4 May 2020
Line 9:		Line 9:
	*Phones can be lost or stolen.		*Phones can be lost or stolen.
	*Phone numbers can be reused or stolen.		*Phone numbers can be reused or stolen.
			* While an [https://www.pewresearch.org/internet/2019/11/15/how-americans-think-about-privacy-and-the-vulnerability-of-their-personal-data/#seven-in-ten-americans-say-they-feel-as-if-their-data-is-less-secure-today-than-it-was-five-years-ago increasing number of users feel as if their dta is less secure today that it was five years ago,] they are unwilling to spend much personal effort to protect their data.

	==Solutions==		==Solutions==

Tomjones at 04:32, 4 May 2020

2020-05-04T04:32:48Z

← Older revision		Revision as of 04:32, 4 May 2020
Line 4:		Line 4:
	==Context==		==Context==
	The computing power of a [[Smart Phone]] today is beyond that of any computer of 25 years ago. The connectivity of a [[Smart Phone]] is beyond that of any computer of 25 years ago. Now anyone of modest means can carry one with them nearly anywhere they want to go. Clearly society will feel the impact of this leap of technology. And its impact for personal [[Identity]] can only be guessed at.		The computing power of a [[Smart Phone]] today is beyond that of any computer of 25 years ago. The connectivity of a [[Smart Phone]] is beyond that of any computer of 25 years ago. Now anyone of modest means can carry one with them nearly anywhere they want to go. Clearly society will feel the impact of this leap of technology. And its impact for personal [[Identity]] can only be guessed at.
			* On 2019-06-12 The vast majority of Americans – 96% – [https://www.pewresearch.org/internet/fact-sheet/mobile/ own a cellphone of some kind and 81% have a smartphone.]

	==Problems==		==Problems==
Line 13:		Line 14:
	* All modern smartphone have the ability to limit access by the use of some authentication factor any any purpose except emergency access for calling or emergency contact information. The user has the option to direct some notices to the lock screen if they wish. Apple and some Android phones come with the lock screen enabled by default, but all allow it to be disabled.		* All modern smartphone have the ability to limit access by the use of some authentication factor any any purpose except emergency access for calling or emergency contact information. The user has the option to direct some notices to the lock screen if they wish. Apple and some Android phones come with the lock screen enabled by default, but all allow it to be disabled.
	* On 2017-03-15 28% of smartphone users have [https://www.pewresearch.org/fact-tank/2017/03/15/many-smartphone-owners-dont-take-steps-to-secure-their-devices/ no lock screen on their phones.] 26% had a PIN code and 23% used a thumbprint scanner.		* On 2017-03-15 28% of smartphone users have [https://www.pewresearch.org/fact-tank/2017/03/15/many-smartphone-owners-dont-take-steps-to-secure-their-devices/ no lock screen on their phones.] 26% had a PIN code and 23% used a thumbprint scanner.
	* On 2019-06-12 The vast majority of Americans – 96% – [https://www.pewresearch.org/internet/fact-sheet/mobile/ own a cellphone of some kind and 81% have a smartphone.]
	* On 2020-04-24 Half of of Americans [https://www.pewresearch.org/fact-tank/2020/04/14/half-of-americans-have-decided-not-to-use-a-product-or-service-because-of-privacy-concerns/ have decide not to use a product or service because of privacy concerns.]		* On 2020-04-24 Half of of Americans [https://www.pewresearch.org/fact-tank/2020/04/14/half-of-americans-have-decided-not-to-use-a-product-or-service-because-of-privacy-concerns/ have decide not to use a product or service because of privacy concerns.]