Field-ready, token-based login method for troops

Innovation requirement: ‘Field-ready, token-based login method for troops’

Modern military operations are characterised by a wide range of digital resources. Highly secure user identification and authorisation (login method) are essential here. These must also be field-ready and able to be used reliably and intuitively by soldiers on the front line, even under stressful conditions. The solution of using a smart card (standard service provided by the federal government) in a military environment does not meet these requirements to the desired extent (e.g. dirt and moisture).

A project contribution is to be developed that includes a token-based login method based on a modern, password-free authentication protocol and is specifically tailored to military operations. A particular focus is to be placed on resistance to manipulation attempts and long-term post-quantum security.

The token-based login method should be usable on future Cyber Command devices for the army, with the security association being involved as required. This includes notebooks, tablets, smartphones and special hardware in particular.

The solution must be interoperable and meet military requirements (robust design, secure architecture and weatherproof properties). In addition, encryption, decryption and digital signatures must be ensured. Integration must be based on known and open standards.

Several military standards (MilSpecs) and security standards are relevant for field-ready and token-based login methods (e.g. for military, government or security-critical applications), which define requirements for the robustness, reliability, environmental resistance and security of the devices.