Le Thursday 08 April 2004 � 12:57:06, med-i-bit a �crit:
> Ludovic,

Thanks for your comment.

> It turned out that German manufacturers of card readers had already done so for 
> their Linux PC/SC drivers. For better or worse, what's being done is to just use 
> SCardTransmit. And then let the IFD-Handler filter out the CT-BCS commands and 
> handle these with the reader.

Do you know how the IFD-Handler differentiate an normal APDU from a CT-BCS
command?
The IFD-Handler detect the VERIFY command defined in ISO 7816-4 and
perform a special treatment instead?

> This is certainly an arguable design decision. But, as there have been drivers 
> deployed before using this scheme, we have decided to do the same thing in MacGiro. 
> Currently, the cyberJack pinpad by Reiner SCT has a pcsc-lite driver for MacOS X 
> that works together with MacGiro in this way.

I don't know if I will follow this direction. It seems to be a serious
hack :-)

My proposal is not incompatible with the present situation. A driver
using the "old" scheme (CT-BCS command in SCardTransmit) could _also_
support the new one (SCardControl) without breaking any thing.


Anybody knows of another way to perform a "secure PIN management"? I can
easily imagine that every reader manufacturer has a different
(proprietary) solution.

Regards,

-- 
 Dr. Ludovic Rousseau                        [EMAIL PROTECTED]
 -- Normaliser Unix c'est comme pasteuriser le camembert, L.R. --
_______________________________________________
Muscle mailing list
[EMAIL PROTECTED]
http://lists.drizzle.com/mailman/listinfo/muscle

Reply via email to