Mobile credentials stored within the Safetrust Wallet function as virtual smartcards, similar to traditional Public Key Infrastructure (PKI) systems.
- Public Keys are transferred to the local machine when the virtual smartcard is inserted into the reader, allowing transactions that use the Public Key to be performed locally.
- Private Key transactions are conducted securely within the mobile device through an encrypted channel, ensuring that sensitive data remains protected.
- Unlike traditional soft certificates, the Private Key is non-exportable, meaning the end user cannot access or extract it. This ensures the highest level of security for authentication and encryption operations.