Aloaha Secure PIN Entry
Aloaha offers a broad range of possibilities to pass the Signature Card PIN to the Card. Per default Aloaha displays a dialog to enter the PIN. In case batch-/mass Signatures are required it is possible to save the PIN in the Registry on a file on disk.In high security environments the so called Secure PIN Entry is required. The Secure PIN Entry allows the user to enter the PIN on the Card Reader PIN PAD (Class 2 or higher). The Card Reader PIN PAD will send this PIN DIRECTLY to the Card to eliminate the possibility that a Virus/Trojan or USB Sniffer gets hold of the PIN.
The PIN is neither stored on the PC nor communicated via insecure PC/reader connection but remains in the card/reader environment.
Which Card Readers are supported for Secure PIN Entry?
Virtuall every PC/SC compatible Smartcard Reader is supported. From the technical point of view the Card Reader must support the following commands:- GET_FEATURE_REQUEST via Control Code 3400
- VERIFY_PIN_START
- VERIFY_PIN_FINISH
- GET_KEY_PRESSED
or
- VERIFY_PIN_DIRECT
- FEATURE_MCT_UNIVERSAL (optional)
How do I enable/disable Secure PIN Entry?
As mentioned before per default Aloaha uses a standard Windows dialog to enter the PIN. After the first use of a card read a file ReaderINI.ini is being created in <program files>\Wrocklage.This ReaderINI will contain one section per reader as shown below:
[OMNIKEY CardMan 3621 0]
UsePINPAD=0
[SCM Microsystems Inc. SPRx32 USB Smart Card Reader 0]
UsePINPAD=0
To activate the usuage of the secure PIN Pad please set the Value UsePINPAD to 1 and restart Aloaha.
Suggested Smart Card Reader with PIN Pad
It is always difficult to suggest a piece of hardware.Below you find short list of some readers. Please use the contact form at the end of this page in case you would like to have a different reader added.
CardMan 3621
+ fully supports required PC/SC commands
(download PC/SC driver here)
+ generic PNP drivers (without PIN Pad support) included in windows.
+ excellent performance (mass signatures)
CardMan 3821
+ fully supports required PC/SC commands
(download PC/SC driver here)
+ generic PNP drivers (without PIN Pad support) included in windows.
+ excellent performance (mass signatures)
+ quality display
- unlike the 3621 this reader does not have a flash light indicating when in secure mode. It relies on its internal display only.
Reiner CyberJack
This Reader requires a firmware upgrade and driver upgrade in order to be able to us its PIN Pad via PC/SC. Minimum Base Components Version 6.3.2 is required!
CHIPDRIVE pinpad 532
+ fully supports all required PC/SC commands
(download PC/SC driver and Firmware update here)
+ generic PNP drivers (without PIN Pad support) included in windows.
+ excellent PIN Pad keys
+ excellent performance (mass signatures)
- heavy duty
