Security token design question

Security token design question

Secure Home | Search | About

Microsoft Applications Security - Microsoft's general security discussions and announcements 

Bookmark this page:  YahooMyWeb Yahoo!  Google Google  Windows Live Favorites Windows Live  del.icio.us del.icio.us  digg digg  Add to Netscape Netscape
Subject Author Date
Security token design question Pavel A. 07-28-2005
Posted by =?Utf-8?B?UGF2ZWwgQS4=?= on July 28, 2005, 3:06 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
There is a smartcard chip embedded in a PnP device of completely irrelevant
class. It is not exposed as independent hardware function.
The chip can be accessed only thru the driver of this device.
How I can make this chip visible to CryptoAPI from user mode?
Can this be done with a user mode module that sends custom ioctls to the
driver?
Or I need a root enumerated driver that emulates a Smartcard reader?
Can such "virtual" smartcard readers pass HCT?

Regards,
--PA


Posted by =?Utf-8?B?R2FyeSBHLiBMaXR0bGU= on July 29, 2005, 1:52 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
So who uses the Smartcard chip? The "PnP device of a completely irrelevant
class"? Does the chip present an ATR when requested?

You can write a driver that will function as a Smartcard reader, but
gettiing it thru WHQL is going to be a problem since the first thing that
IFDtest asks you to do is insert a card. You would use the Universal program
to get it through certification. I have the same problem since my harddisc
thinks its a Smartcard ... LOTS and LOTS of Smartcards.

The personal opinion of
Gary G. Little

"Pavel A." wrote:

> There is a smartcard chip embedded in a PnP device of completely irrelevant
> class. It is not exposed as independent hardware function.
> The chip can be accessed only thru the driver of this device.
> How I can make this chip visible to CryptoAPI from user mode?
> Can this be done with a user mode module that sends custom ioctls to the
> driver?
> Or I need a root enumerated driver that emulates a Smartcard reader?
> Can such "virtual" smartcard readers pass HCT?
>
> Regards,
> --PA
>

Similar ThreadsPosted
Easy question on PKI, 2 level hierarchy design December 4, 2006, 12:13 pm
Help with security design documentation March 8, 2006, 4:26 pm
"replace a process level token" security November 25, 2008, 1:18 pm
Re: Securing Floopy Disk - Design strategy June 23, 2005, 11:22 pm
Token validation is inconsistent May 16, 2008, 10:25 am
ConnectServer using impersonation token October 20, 2008, 5:00 am
Is there any SPNEGO/GSSAPI token creation API? August 9, 2005, 9:29 pm
Kerberos token in windows logon December 23, 2008, 5:45 pm
How to create the SPNEGO token used in CIFS/SMB authentication? August 4, 2005, 7:42 pm
Send current user token to IIS server August 25, 2006, 7:37 am

The site map in XML format XML site map

Contact Us | Privacy Policy