@MISC\{IMM2014-07072, author = "J. H. Skuldb{\o}l", title = "Wibephone", year = "2014", publisher = "Technical University of Denmark, Department of Applied Mathematics and Computer Science", address = "Richard Petersens Plads, Building 324, {DK-}2800 Kgs. Lyngby, Denmark, compute@compute.dtu.dk", note = "{DTU} supervisor: Christian D. Jensen, cdje@dtu.dk, {DTU} Compute", url = "http://www.compute.dtu.dk/english", abstract = "Wibephone is a suggestion on how to modernize the entry phone used in many Danish appartment buildings today. The goals of Wibephone includes the ability to let people into the stairway, even though you are not home. This project will document the development of a prototype of part of this system, particularly a backend module, which will handle authentication of users' identity, and the challenges of computer security set by this feat. The main focus of the project is safe identification, communication, nonrepudiation, and handling and exchange of digital keys. This report documents the development of a module handling these things. Thsi module is a prototype developed as a webservice, with the goal of examining whether this approach would be feasible in the context of the complete project. This report will analyze which threats a solution such as the proposed one will face, and how to handle them. It will then look at different suggestions on how to actually do this, and choose which approach to take." }