Protecting smart Card PIN

An alarming number of applications continue to use smart cards that are inadequately protected with static PINs. Applications such as PKI, e-wallet or e-banking applications are exposed to Trojans or key loggers if they rely simply on static PIN entry on the PC keyboard for smart card transactions. The current vulnerability of the PC platform in the Internet environment makes this form of PIN entry totally unacceptable from a security point of view. Digipass 865 provides the secure advantage of entering the pin directly at the reader and not on the computer keyboard. Therefore, the PIN is never available on the PC platform. Similarly, smart card PIN changes can be securely performed using the Digipass 865 keyboard.

Connected and unconnected mode

Digipass 865 is the USB connectable version of the trusted Digipass 810 The device can be used in both connected and unconnected mode. Digipass 865 has a sophisticated user interface, comprising a 20-key keypad and an 8-line display. When connected to the PC, the Digipass 865 functions as a sophisticated secure PIN pad reader offering secure PIN entry features and “what you see is what you sign” functionality. All data to be signed is visually presented on the Digipass 865 display for confirmation by the cardholder.

When used in unconnected stand-alone mode, Digipass 865 offers the same functionality as other Digipass unconnected smart card readers, including strong authentication and e-signatures. Digipass 865 is perfectly suited for environments with high security requirements including PKI/digital signatures, secure PIN verification, corporate network access, strong authentication (internet banking), e-commerce transactions, etc.

Digipass 865 can be delivered with a wide variety of applications including MasterCard CAP E, Visa Dynamic Passcode Authentication (DigipassA) and various domestic and proprietary schemes. The reader leverages the inherent security of chip cards to store secrets with cryptographic calculations for maximum efficiency

See it before you sign it

Digipass 865 8-line display sets a new standard for e-signature and allows extended data field validation. The user can validate significant key data on his Digipass 865 display before he signs the transaction, which provides an additional level of security for electronic transactions in unsecure channels.

 

A cost effective solution

The intrinsic security of the smart card is combined with the flexibility of a reader to maximize your investment. Additionally, Digipass 865 requires no extra personalization by the network owner and can be delivered very efficiently in volume. Security infrastructure costs are reduced due to the decreased number of helpdesk calls. Digipass 865 can help banks transition to strong authentication for retail banking cost effectively by leveraging their existing investment in EMV infrastructure.

A backward compatible solution

Digipass 865 can still behave as a transparent smart card reader for older applications that do not require the extra security features of Digipass 865. This provides a migration path to upgrade existing customer groups from a dated insecure system to a new advanced security system (PIN entry on the reader).

Easy deployment, installation and use

Digipass 865 is based on a CCID driver compliant with all popular operating systems such as Windows, Linux and MacOS. Digipass 865 supports PC/SC version 2 PIN entry. Digipass 865 applications used in connected mode can be securely and remotely downloaded into the reader. Digipass 865 is USB powered when connected to a PC.