Re: Caching PIN

Hi,
Is it possible to know the smart card module associated with a card
identified by an ATR string?

I know how a CSP name associated with a card be identified.But after getting
the CSP ,is it possible to just verify the PIN alone ?If yes,could you please
outline how can I do that?

Thanks in advance
--
-Novice
"To unlearn is to learn"


"Mounir IDRASSI" wrote:

Hi Marek,

The usual approach taken by smart card CSP's implementors is to cache the
PIN in the context of the CSP dll, thus you don't need to care about the
process ID or what ever because each process will load its own copy of the
CSP dll. Personally, in the CSP's I have developed in the past where the PIN
is cached, I had a list of available readers on the system and the PIN is
cached for each reader.
From what you write, I understand that you will have some sort of global
repository on the system for cached PIN (like a service) and that you need
the process ID to identify which PIN belongs to which process. In my opinion,
this is not a good approach and it is useless. I advice you to consider the
way I explained in the begining of this message, thus you will not have to
care about the process ID.

Cheers,
--
Mounir IDRASSI
IDRIX
http://www.idrix.fr

to reach : mounir_idrix_fr (replace the underscores with the at and dot
characters respectively)


"m.pawlak@xxxxxxxx" wrote:

Hi Mounir,

For your last question, it appears to me that it's very specific to your
implementation.

Microsoft's CSP Cookbook (http://msdn.microsoft.com/en-us/library/
ms953432.aspx) says: "The PIN should be stored internally within the
CSP per process." So it appears to me that at some point every CSP
needs to address this problem and identify the process. I am just
wondering if using the id obtained for GetCurrentProcessId() is a good
approach.

Cheers,
Marek


.

Relevant Pages

  • Re[2]: Whats the mean of PIN cache in smart card csp
    ... SR_CAPI.exe share the pin cache? ... I notice it is very important, because the "Microsoft Base Smart Card Crypto Provider" ... but my csp can not work perfectly. ...
    (microsoft.public.platformsdk.security)
  • Re: Whats the mean of PIN cache in smart card csp
    ... SR_CAPI.exe share the pin cache? ... I notice it is very important, because the "Microsoft Base Smart Card Crypto Provider" ... but my csp can not work perfectly. ...
    (microsoft.public.platformsdk.security)
  • Problem with multiple cards/different key containers
    ... I have written a smart card CSP that detects the type of smart card ... CPCreateHash delegates to CPCreateHash implemented in the CSP ... I tested my CSP with two readers connected to my computer. ...
    (microsoft.public.platformsdk.security)
  • Re: [SmartCard CSP] How can I obtain a PIN to sign HASH ?
    ... CRYPT_IMPL_HARDWARE implies that all crypto functions are implemented with ... CRYPT_IMPL_MIXED implies that some functions are implemented in hardware ... > "CRYPT_IMPL_MIXED" means not call other CSP. ... > the user's PIN by myself. ...
    (microsoft.public.platformsdk.security)
  • Re: Re[2]: Whats the mean of PIN cache in smart card csp
    ... The PIN cache described by the Smart Card Cryptographic Service Provider ... smart card CSP. ...
    (microsoft.public.platformsdk.security)