Re: Pin generation algorithm question

From: Paul Rubin (//phr.cx_at_NOSPAM.invalid)
Date: 04/23/04 

Date: 23 Apr 2004 10:44:00 -0700

keess@smartcall.co.za (Kees Snijders) writes:
> These pins will be printed on cards and used by customers to recharge
> their prepaid airtime accounts. Pin verification will happen as part
> of a 'recharge request' sent to us via a cellular bearer service, for
> starters USSD (Unstructured supplimentary data service), later IVR and
> perhaps SMS.
> I suppose crypto hardware is an option, just thought since everything
> is centralised, software is the easier option.

You should read the book "Security Engineering" by Ross Anderson,
which talks about these issues. You should also hire a specialist to
help you, instead of trying to do this stuff yourself based on advice
from a newsgroup. How much revenue are you talking about protecting?

Quantcast