Re: Disable PIN prompt in Smart Card Logon

From: Andrea Cogliati (AndreaC71_at_hotmail.com)
Date: 06/07/05 

Date: Tue, 07 Jun 2005 18:00:23 +0200

On 6/7/05 5:18 PM, in article 42A5BAE5.6080208@san.rr.com, "Ivailo Petrov"
<ipetrov@san.rr.com> wrote:

> SC logon is integral part of Winlogon in a sense that Winlogon does the
> hard job of handling the insertion/removal and reads the card.
> On SC insert SAS Gina prompts for a PIN and queries Winlogon for the SC
> content. Having the authentication info (SC/PIN or User/Pwd) Gina should
> call LsaLogonUser with appropriate structure (in the case of SC
> KERB_SMART_CARD_LOGON).

Ok, I understand: my problem with this approach was in KERB_SMART_CARD_LOGON
structures, which was not documented in my VS.NET 2003 setup. Now I've found
the documentation on MSDN online. I'll give it a try.
 
> Where do you match the Biometrics? If you do it on the client machine
> there is an easier solution - Gina hook.

We match on the smart card and the fingerprint is the "PIN" to access the
logon certificate and private key.

Thanks,

Andrea

Relevant Pages

  • Re: SDS PROM-100 software
    ... 2708 EPROM and to consistently read the content of another used 2708 ... card which worked great with Dave Dunfield's RAMless ROM monitor ... socket) with the IA 1010B the 2708 simulator has been a disaster. ... First the original IA 1010B used a weird and probably damaged 24 pin ...
    (comp.os.cpm)
  • Re: HELP, Vulnerability in Debit PIN Encryption security, possibly
    ... > not the case where PIN encryption had to be ... > derived from the card number because the card PIN was checked at the ... It is unlikely that the banks should have been able to hide such ... Smartcard terminals are used in environments over which the ...
    (sci.crypt)
  • Re: smart card versus credit card
    ... fraud must be low due to card fraud going unreported. ... >> me one good reason for wanting a PIN with a credit card? ...
    (sci.crypt)
  • Re: smart card versus credit card
    ... > That's why I was complaining that if the banks want to place more trust ... > in the PIN verification process they ... Own Plastic Savings Cards, PO Card Acoount Cards, Store Cards to name ... implemented the Chip and sPIN System. ...
    (sci.crypt)
  • Re: smart card versus credit card
    ... Retailers will presumably have to ... > decide for themselves whether to accept a card with a magstripe and no ... > he has not safeguarded his PIN adequately ... ... >> Can you see UK retailers offering this added security measure ...
    (sci.crypt)
Quantcast