mercredi 12 octobre 2016

How to implement a two factor authentication using smart cards and smart card readers via web

First of all, please excuse my ignorance about this topic.

What exactly is needed to implement a process like this:

  1. Client visits login site (example.com/login).
  2. To login, the client enters its client ID. Also, a random (?) code is displayed to the visitor: 251 221 555.
  3. The client picks up his smart card reader, puts his smart card into it and clicks on the "Login" button, enters the code 251 221 555
  4. The client then enter his PIN code (in the smart card reader)
  5. A token is then returned: 922 444 113
  6. The client uses the returned token to login in the website.

I guess one needs:

  • A smart card (which has a PIN code)
  • A smart card reader (see picture)

What I wonder is how to authenticate the returned token in a website, and also how to return a token in the smart card reader? What are the exact (or simplest) steps to implement a process like the one above?




Aucun commentaire:

Enregistrer un commentaire