Using patterns to perform personal identification data substitution
The present invention is directed toward using patterns in APDU to perform identification data substitution. According to one or more embodiments of the present invention, a user inserts a smart card into a card reader connected to a client computing device. Then, the user enters a PIN. The PIN is embedded into an APDU which is sent to the card reader and is presented to the smart card. The APDU contains special patterns that specify to the card reader where and in what format the PIN should be embedded into a prototype APDU that is constructed in the card reader and presented to the card for verification.
1. A method for verifying an identification data item comprising:
accessing a client when a user presents a form of identification;
embedding a pattern into an APDU on said client;
sending said pattern to a verification device;
obtaining said identification data item by said verification device;
constructing a prototype APDU from said APDU in said verification device using said pattern, wherein said pattern instructs said verification device to use an ASCII code versus a binary code format while constructing said prototype APDU; and
determining if said identification data item is correct using said prototype APDU.
2. The method of claim 1 wherein said step of embedding further comprises: using a generic application.
3. The method of claim 1 wherein said client is a component of a virtual desktop system architecture.
4. The method of claim 1 wherein said form of identification is a smart card.
5. The method of claim 1 wherein said verification device is a smart card reader.
6. The method of claim 1 wherein said form of identification is a biometric identifier.
7. A method for verifying an identification data item comprising:
accessing a client when a user presents a form of identification;
embedding a pattern into an APDU on said client;
sending said pattern to a verification device;
obtaining said identification data item by said verification device;
constructing a prototype APDU from said APDU in said verification device using said pattern, wherein said pattern instructs said verification device to use an most significant bytes first format while constructing said prototype APDU; and
determining if said identification data item is correct using said prototype APDU.
8. A system for verifying an identification data item comprising:
a client configured to be accessed when a user presents a form of identification;
a pattern configured to be embedded into an APDU on said client;
a verification device configured to receive said APDU from said client and to obtain said identification data item; and
a prototype APDU configured to be constructed from said APDU in said verification device using said pattern to determine if said identification data item is correct, wherein said pattern instructs said verification device to use an ASCII code versus a binary code format while constructing said prototype APDU.
9. The system of claim 8 wherein said pattern is embedded using a generic application.
10. The system of claim 8 wherein said client is a component of a virtual desktop system architecture.
11. The system of claim 8 wherein said form of identification is a smart card.
12. The system of claim 8 wherein said verification device is a smart card reader.
13. The system of claim 8 wherein said form of identification is a biometric identifier.
14. A system for verifying an identification data item comprising:
a client configured to be accessed when a user presents a form of identification;
a pattern configured to be embedded into an APDU on said client;
a verification device configured to receive said APDU from said client and to obtain said identification data item; and
a prototype APDU configured to be constructed from said APDU in said verification device using said pattern to determine if said identification data item is correct, wherein said pattern instructs said verification device to use an most significant bytes first format while constructing said prototype APDU.
15. A computer program product comprising:
a computer usable medium having computer readable program code embodied therein configured to verify an identification data item, said computer program product comprising:
computer readable code configured to cause a computer to access a client when a user presents a form of identification;
computer readable code configured to cause a computer to embed a pattern into an APDU on said client;
computer readable code configured to cause a computer to send said pattern to a verification device;
computer readable code configured to cause a computer to obtain said identification data item by said verification device;
computer readable code configured to cause a computer to construct a prototype APDU from said APDU in said verification device using said pattern, wherein said pattern instructs said verification device to use an ASCII code versus a binary code format while constructing said prototype APDU; and
computer readable code configured to cause a computer to present said prototype APDU to said verification device to determine if said PIN is correct.
16. The computer program product of claim 15 wherein said computer readable code configured to cause a computer to embed further comprises:
computer readable code configured to cause a computer to embed use a generic application.
17. The computer program product of claim 15 wherein said client is a component of a virtual desktop system architecture.
18. The computer program product of claim 15 wherein said form of identification is a smart card.
19. The computer program product of claim 15 wherein said verification device is a smart card reader.
20. The computer program product of claim 15 wherein said form is a biometric identifier.
21. A computer program product comprising:
a computer usable medium having computer readable program code embodied therein configured to verify an identification data item, said computer program product comprising:
computer readable code configured to cause a computer to access a client when a user presents a form of identification;
computer readable code configured to cause a computer to embed a pattern into an APDU on said client;
computer readable code configured to cause a computer to send said pattern to a verification device;
computer readable code configured to cause a computer to obtain said identification data item by said verification device;
computer readable code configured to cause a computer to construct a prototype APDU from said APDU in said verification device using said pattern, wherein said pattern instructs said verification device to use an most significant bytes first format while constructing said prototype APDU; and
computer readable code configured to cause a computer to present said prototype APDU to said verification device to determine if said PIN is correct.