Bootstrapping OAuth for mobile apps using QR codes

Abstract

The current trend to do as many things as possible using mobile devices prompted the University of Málaga Central ICT Services to plan the development of mobile apps that would allow access to student data stored in the student management systems. Allowing access to personal data required strong authentication of the users and a secure way of storing credentials in otherwise insecure devices. Most mobile devices used by the student population have cameras that can scan QR codes and act on them. So, inserting a QR scan in the application installation process was an easy way to go. The initial application is able to send alerts to the registered handsets and allow for reviewing published exams results. The app got over two thousand registered devices in five days.