|
Smart cards are credit card-sized devices that contain an embedded electronic chip and a simple interface for accessing the memory or processor on the chip.
Some smart cards contain a built-in thumb-print reader, creating a portable biometric device. The biometric factor is used to ensure that the owner of the smart card is using it.
This kind of system combines cryptographically strong digital certificates in a package that offers three-factor authentication:
(a) User’s thumb-print
(b) User's Card
(c) User's Password
|
|
Example: The wide use of smart cards for identity is in the cell phone industry. GSM phones rely on a SIM (Subscriber Information Module) that provides an individual identity for each mobile user account.
The SIM is just a smart card that allows the electrical contacts and processor to be punched out of the larger card and inserted into a small receptacle in the phone.
The advantages of Smart cards:
(a) The memory on the card is used to store a digital certificate which provides portability.
(b) Smart cards can also be used to implement a challenge-response system. Here, the set of algorithms used to manipulate the challenge phrase are encoded in the card. The card can be placed in a reader attached to the user's computer or the card can be inserted into a special-purpose device that allows the user to enter the challenge phrase and displays the result of the manipulation.
The disadvantage of Smart cards:
The additional hardware is needed to read the cards.
|