Security token design question

Security token design question

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Security token design question Pavel A. 07-28-2005
Posted by =?Utf-8?B?UGF2ZWwgQS4=?= on July 28, 2005, 3:06 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
There is a smartcard chip embedded in a PnP device of completely irrelevant
class. It is not exposed as independent hardware function.
The chip can be accessed only thru the driver of this device.
How I can make this chip visible to CryptoAPI from user mode?
Can this be done with a user mode module that sends custom ioctls to the
driver?
Or I need a root enumerated driver that emulates a Smartcard reader?
Can such "virtual" smartcard readers pass HCT?

Regards,
--PA


Posted by =?Utf-8?B?R2FyeSBHLiBMaXR0bGU= on July 29, 2005, 1:52 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
So who uses the Smartcard chip? The "PnP device of a completely irrelevant
class"? Does the chip present an ATR when requested?

You can write a driver that will function as a Smartcard reader, but
gettiing it thru WHQL is going to be a problem since the first thing that
IFDtest asks you to do is insert a card. You would use the Universal program
to get it through certification. I have the same problem since my harddisc
thinks its a Smartcard ... LOTS and LOTS of Smartcards.

The personal opinion of
Gary G. Little

"Pavel A." wrote:

> There is a smartcard chip embedded in a PnP device of completely irrelevant
> class. It is not exposed as independent hardware function.
> The chip can be accessed only thru the driver of this device.
> How I can make this chip visible to CryptoAPI from user mode?
> Can this be done with a user mode module that sends custom ioctls to the
> driver?
> Or I need a root enumerated driver that emulates a Smartcard reader?
> Can such "virtual" smartcard readers pass HCT?
>
> Regards,
> --PA
>

Similar ThreadsPosted
Easy question on PKI, 2 level hierarchy design December 4, 2006, 12:13 pm
Help with security design documentation March 8, 2006, 4:26 pm
Re: Securing Floopy Disk - Design strategy June 23, 2005, 11:22 pm
Token validation is inconsistent May 16, 2008, 10:25 am
ConnectServer using impersonation token October 20, 2008, 5:00 am
Is there any SPNEGO/GSSAPI token creation API? August 9, 2005, 9:29 pm
How to create the SPNEGO token used in CIFS/SMB authentication? August 4, 2005, 7:42 pm
Send current user token to IIS server August 25, 2006, 7:37 am
mixed authentication and LogonUser token in forms ticket - safe? August 30, 2007, 6:44 am
security question July 11, 2005, 2:22 am

The site map in XML format XML site map

Contact Us | Privacy Policy