OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: noprianto (nop2_at_bluejack.binus.ac.id)
Date: Wed Dec 31 1969 - 17:59:59 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Hi all...

    Firstly, many thanks for you replies.
    I got something, but there are some confusing things:
     
    1. Erwann ABALEA said: memory cards are not 'smart'. ;). Arno Wilhelm said:
    No, memory cards do not have an processor and that's why they are not
    "smart".. Jim Rees said that: Processor cards have a small programmable computer. Memory cards do not. A
    memory card can only store data, like a floppy disk, but can not process it.
    => So, since i have only memory card and cannot have microprocessor card by now, i really care on this.
    From that quotes, can i asumme that memory card just like floppy disk ? Have no additional stuff ? Just like floppy ?
    If yes, where are the security points?
    I want to make a remote logon (LTSP) using smartcard (just like SUn' machine) for my final task. May be i will save any session to the card.
    Can i use that card ? How about the security ?

    2. Arno Wilhelm said: Not really, the smartcard can generate for example an private RSA key
    onboard and no person can ever read this key out. So only the person
    that has the smartcard physically attached to /his/her body can
    sign/verify data etc.

    In order to be sure that the card was not stolen
    and that the right person has the smartcard you usually have to give in
    a pin code that only the owner of the card can know. ( eg.: "bankomat
    cards" )
    => So the owner will be prompted to input their key ?

    3. Jim Rees said: The cards I sent you are memory cards. Muscle software is mostly for
    processor cards, but you might be able to use it for memory cards too. You
    need both pc/sc and the Carlos driver.
    When you get this to work, install the pc/sc software, read the
    documentation, and try to write your own test program to talk to the card.
    => Does pc/sc software is muscle pkcs ?

    4. Peter Tomlinson said: More practically, you cannot load software into a memory card (but these
    days with some memory cards you can configure their sector sizes, i.e.
    decide how many bytes of data in each read or write command).
    => so what does it means ?

    5. This is still make me confused: so memory card (i will use it, because i only have this one) can be read everywhere ? The data can be read and manipulated everywhere having smatcard reader ? So whats the differences between it and mag stripe card ? or with floppy card ? Where are the security points?

    Thanks in advanced,
    noprianto

    ***************************************************************
    Unix Smart Card Developers - M.U.S.C.L.E.
    (Movement for the Use of Smart Cards in a Linux Environment)
    http://www.linuxnet.com/
    To unsubscribe send an email to majordomolinuxnet.com with
    unsubscribe sclinux
    ***************************************************************