Secure PIN transmission
View Patent ↗A secure channel is established between a processor and a smart card such that authentication can be achieved without transmitting a Personal Identification Number (PIN) to or from the smart card in the clear. A session ticket indicative of the PIN is generated, and the session ticket is securely negotiated between the computer and the smart card instead of the PIN. Also, a trusted path is established between a user and the operating system of the processor for allowing the user to enter a PIN. A trusted computing base is established in the processor for receiving the PIN from the user and performing operations associated therewith.
1. An authentication method comprising:
detecting a smart card communicatively coupled to a computer via a communication link;
establishing a trusted computing base in the computer for preventing spoofing of a personal identification number (PIN) dialog box;
prompting a user to enter a personal identification number;
receiving in the trusted computing base, a first personal identification number entered by the user; and
using the trusted computing base for securely transferring data between the computer and the smart card for verifying in the smart card, that the first personal identification number entered by the user is the same as a second personal identification number stored in the smart card, the secure transfer comprising:
the trusted computing base requesting a session ticket from the smart card;
generating in the smart card, a first session ticket and a first session key, wherein the first session key is generated by utilizing as a seed, the second personal identification number stored in the smart card;
encrypting the first session ticket with the first session key;
transmitting the encrypted first session ticket from the smart card to the trusted computing base;
generating inside the trusted computing base, a second session key by utilizing as a seed, the first personal identification number entered by the user;
using the second session key for decrypting the encrypted first session ticket received from the smart card;
transmitting the decrypted first session ticket from the trusted computing base to the smart card;
comparing the decrypted first session ticket received in the smart card to the first session ticket originally generated in the smart card;
if the comparison indicates a successful match, authenticating the first personal identification number entered by the user; and
if the comparison fails to indicate the successful match, disallowing authentication.
2. A method in accordance with claim 1 , further comprising rendering, via the trusted computing base, a prompt to provide an indication to establish a trusted path for entry of the personal identification number.
3. A method in accordance with claim 2 , further comprising, in response to receiving an indication to establish a trusted path, establishing a secure desktop within the trusted computing base for receiving the personal identification number.
4. A method in accordance with claim 3 , further comprising providing, via the secure desktop, the prompt to enter the personal identification number.
5. A method in accordance with claim 2 , wherein the prompt comprises a prompt to enter a secure attention sequence.
6. A authentication system comprising:
an input/output portion configured to:
receive from a user, a first personal identification number; and
a processor portion configured to:
establish a trusted computing base within the system for preventing spoofing of a personal identification number (PIN) dialog box;
generate, via the trusted computing base, a request for a session ticket from a smart card;
receive in response to the request, a first session ticket from the smart card, wherein the first session ticket is encrypted, via the trusted computing base, using a first session key, and wherein the first session key is generated, via the trusted computing base, by utilizing as a seed, a second personal identification number stored in the smart card;
via the trusted computing, generate a second session key and utilize the first personal identification number entered by the user as a seed;
use the second session key for decrypting the first session ticket received from the smart card; and
utilizing the trusted computing base to securely transmit the decrypted first session ticket, via the input/output portion, to the smart card for authentication of the first personal identification number, thereby eliminating clear-channel transmission of the first personal identification number, the authentication comprising:
comparing the decrypted first session ticket received in the smart card to the first session ticket originally generated in the smart card;
if the comparison indicates a successful match, authenticating the first personal identification number entered by the user; and
if the comparison fails to indicate the successful match, disallowing authentication.
7. A system in accordance with claim 6 , the processing portion further configured to render, via the trusted computing base, a prompt to provide an indication to establish a trusted path for entry of a personal identification number.
8. A system in accordance with claim 7 , the processing portion further configured to establish, in response to receiving an indication to establish a trusted path, a secure desktop within the trusted computing base for receiving a personal identification number.
9. A system in accordance with claim 7 , wherein the prompt further comprises a prompt to enter a secure attention sequence.
10. A computer-readable storage medium, the computer-readable storage medium not being a transient signal, the computer-readable storage medium having stored thereon computer-executable instructions for performing the steps of:
establishing a trusted computing base in the computer for preventing spoofing of a personal identification number (PIN) dialog box;
prompting a user to enter a personal identification number;
receiving a first personal identification number entered by the user; and
using the trusted computing base for authenticating the entered first personal identification number, the authenticating comprising:
requesting a session ticket from a smart card;
receiving, in response to the request, a first session ticket encrypted using a first session key, wherein the first session key is generated utilizing as a seed, a second personal identification number stored in the smart card;
decrypting the received first session ticket, utilizing a second session key, wherein the second session key is generated using as a seed, the first personal identification number entered by the user; and
eliminating clear-channel transmission of the first personal identification number over a communication link, by transmitting the decrypted first session ticket over the communication link to the smart card for authentication of the first personal identification number, the authentication comprising:
comparing the decrypted first session ticket received in the smart card to the first session ticket originally generated in the smart card;
if the comparison indicates a successful match, authenticating the first personal identification number entered by the user; and
if the comparison fails to indicate the successful match, disallowing authentication.
11. A computer-readable storage medium in accordance with claim 10 , the computer-executable instructions further for:
rendering, via the trusted computing base, a prompt to provide an indication to establish a trusted path for entry of a personal identification number; and
in response to receiving an indication to establish a trusted path, establishing a secure desktop within the trusted computing base for receiving a personal identification number.