On Sun, Sep 30, 2012 at 5:48 AM, NdK <ndk.cla...@gmail.com> wrote: > Il 29/09/2012 09:01, Frank Cusack ha scritto: > > > I knew something that didn't need "trusted software" (in the PC) > should > > exist. And Finally I found it: > > http://www.ftsafe.com/product/epass/interpass > > Seems quite near to my idea of a "really-smart card": big display to > > show transaction details and button to review/confirm/cancel (and, I > > hope, to insert a gesture that replaces the PIN...). > > Just evolve that a bit and it's perfect :) > > I agree, it's close. Not that I've contacted them, but I doubt it's an > > actual shipping product. > I've already seen a smartcard that hosts a battery, a display and a > button in a standard ISO form factor (it uses the sc chip to henerate an > OTP every time the key is pressed), so 'technically' we're quite near to > a card that shows anamount to be authorized and a "blinding factor" for > the PIN (5 digits, to be added one-to one to the actual PIN, so snooping > the keyboard is useless), or even having an integrated pinpad to enter > the PIN w/o relying on an external device. >
Sure. I built [prototypes of] such a card 6+ years ago, minus the PINpad. There are at least 2 vendors of such cards today, and at least one vendor of a card that includes a PINpad. $$$ and very niche. Also, no one really wants to use such a card. So there's no question it can be built in USB form factor. But I don't believe there are any customers and so the product is not actually shipping. It would take the first customer to commit, before they built it. Someone here must be on a first-name-basis with someone at Feitian?
_______________________________________________ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel