Concept - Memory Card and Smartcard
Token: an object the user possesses to authenticate (s.21).
| Memory card (s.22) | Smartcard (s.23) | |
|---|---|---|
| Processing | store but do not process data | has its own processor, memory, I/O ports (ROM, EEPROM, RAM) |
| Examples | magnetic stripe bank card, electronic memory card | credit-card like with chip |
| Use | alone for physical access (hotel rooms); with password/PIN (ATMs) | executes a protocol to authenticate with the reader/computer |
| Drawbacks | needs special reader, loss of token, user dissatisfaction (OK for ATM, not for computer access) | n/a on slide |
Smartcard protocols (s.23): static (similar to memory cards); dynamic (passwords created every minute, entered manually or electronically); challenge-response (computer creates a random number, the card provides its hash, “similar to PK”).
Related: Concept - Challenge-Response, Concept - Means of Authentication. Appears in 03 User Authentication - Chunk 01 (s.1-33).