Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I am looking for a card-reader solution that includes not only the physical card-reader but a method to read/program the cards. The end goal is have to give my end users a card-reader and then an associated card they need to swipe to login to the windows machine. I am not worried about end-users 'swapping' cards as they are geographically distant.

Suggestions on where to start?

Thanks in advance,

share|improve this question

1 Answer 1

A simple swipe card is easy to skim and then clone. Often simple magnetic strip readers just contain a secret which is transmitted over usb or ps/2 which could be intercepted by a hardware key logger. Smart card authentication isn't affected by this attack. Even if the challenge response was intercepted, the attacker would have to brute force the private key. Here is more information on implementing two factor authentication for windows.

share|improve this answer
    
I agree that two-factor authentication is the way to go; however that is not my assignment. I'm simply supposed to find a card-reader solution, even if it is one-factor, and I don't know where to look. –  Robert Jul 27 '10 at 0:11
    
@Robert if the three links i posted isn't enough information then i'm sorry but i don't think anyone can help. A smartcard has doesn't require multi-factor authentication. Apples and oranges, mag strips are EXTREMELY insecure and are trivial to clone, this would be massive mistake. –  Rook Jul 27 '10 at 19:41
    
I can agree that is not secure by any means, but this is where policy makers meet security people and win. :/ –  Robert Aug 24 '10 at 0:23

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.