Process Level Security for Mobile System Assurance

The Department of Homeland Security (DHS) Science and Technology Directorate Cyber Security Division has initiated the Mobile Technology Security Research & Development (R&D) program to focus on innovative security technologies needed to address the challenges impeding the adoption of mobile technology. To facilitate this need, Hypori will devise, produce, deploy and test a Virtual Mobile Infrastructure (VMI) solution. This solution will include new functionality supporting access control for Bluetooth peripheral devices. Additionally Hypori will produce an authentication scheme which will achieve Level of Assurance 3 or higher integrated with the DHS Identity management systems. This implementation will be cloud based and will be validated to achieve Federal Risk and Authorization Management Program (FedRAMP) compliance. Achieving FedRAMP compliance will significantly ease the implementation and adoption challenges which have faced previous mobile solutions in the US Federal government. The implementation will be tested as both an on-premise and off-premise solution (software as a service) in order to provide the greatest possible flexibility for future agency needs and implementation goals. Each of these options will be evaluated and reported independently in order to provide a clear picture of deployment options and capabilities. The commercial application for this technology is particularly visible in the financial and healthcare industries. As both highly regulated spaces, those companies will benefit greatly from the security enhancements and testing performed as a part of this research and development. Additionally, both industries are already moving to mobile applications which incorporate Bluetooth peripheral devices.