INDEX   TOC
Introduction
Product Overview
Settings and Administration
  Installation
  Configuration
  LAN Overview
  Administrate Users
  Upgrade Firmware
ADSL
SIP Support
Security
Firewall Administration
Troubleshooting

Smart Card Security Issues

For nearly all smart card applications, you want some kind of privacy around the smart card session. No other than you should be able to access the smart card you just plugged into the reader. For "hackers" out there, on the Internet, you can feel safe. The simply doesn't allow any access to the reader from the outside.

However, if you have more than one computer connected on the inside of the (that is, a LAN, Local Area Network) you have to be careful. The smart card reader by default allows all accesses from "inside" to the reader.

You should then configure the card reader to admit access only from your computer. Click here for instructions.

Even disregarding the security issues, there are problems with a shared card reader. It is tempting to view the smart card reader as a common resource for a local network of several computers. For applications using the Windows PC/SC API - it won't work. Simply because of the way Windows PC/SC is designed. Every "PC/SC computer" wants to have full control of the smart card reader already from startup. If more than one computer tries to fully control one and same card reader on the network the result will be chaotic. (With other, less "possessive" API:s it might work, provided that the smart card applications only use those API:s and allows shared use of the card reader.)

So in short, regard the card reader as belonging to one computer only. If there is only your computer inside the firewall/ADSL modem, then don't bother. If you have a local network, go attach the reader to your particular computer.

More Information:

Restrict Access to Smart Card Reader