Analyzing two-factor authentication devices

It is expected that mobile phones will be used in various e-commerce applications, since it is handy and frequently used. Another important aspect is that mobile phones approach computers both with respect to programmability and capacity. One example of a cutting edge application is a generic authentication mechanism invented by a new Norwegian startup company: a mobile terminal is used as a password calculator that could potentially be used towards any Internet service provider. Yet, security protocols in general and authentication protocols in particular are vulnerable to attacks: The current phishing attacks pose a major challenge to the trustworthiness of any kind of e-business, hence it is particularly important to address the phishing problem effective. In the paper we shall investigate a new commercial protocol, and analyze how the protocol (or more accurately a couple of protocols) can handle phishing attacks.