FYI: Trusted Reviews | Visa Revamps Humble Credit Card.

James Davis ukcrypto at chiark.greenend.org.uk
Thu, 13 Nov 2008 09:02:53 +0000


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Ian Batten wrote:

> This is part of the reason why SecureID tags are lifed, of course.  RSA
> guarantee operation until the expiration date, but after that they don't
> work, battery life or no.  So RSA can ship tags whose clocks will remain
> in bounds in terms of slew rate for five years >99% of the time, and fix
> the remaining <1% in the warranty process.   I don't know how Vasco
> manage this with their unlifed tags.

It's been several years now since I could put an RSA certification to my
name but I seem to remember that an administrator could manually
resynchronize an installation with a token, and that it worked over a
wider slew than the automatic process you described (20 minutes each way
I think).

I also seem to remember that it'd accept codes +- 1 minute without
further questioning. Otherwise you'd have problems with someone reading
the code 59 seconds in, and hitting enter 2 seconds into the next minute.

I'm not sure it's really why the tags have a limited life ;-) You should
be able to continually adjust and record any reasonable slew until the
battery dies. That may be similar to what the Vasco system does.

James

- --
James Davis	+44 1235 822 229    	   PGP: 0x890F159E
JANET CSIRT	0870 850 2340	        (+44 1235 822 340)
Lumen House, Library Avenue, Didcot, Oxfordshire, OX11 0SG
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iQCVAwUBSRvtPLa926eJDxWeAQIGigP/Qua71a9935i30xTs6oMPNTL6e2vOch1I
DZ1s1m/xIyJyyHHo7YodkhwcLP/U0yCZ2eZZtv11UvsLQaBSqcA7iDtgiaIH+qmk
TCyxDMA/UMAK3MrBRK0EVpVhlpwSRMQPH5FGWwsuyRrw0s3PmCxUkXTmngqXByzG
6NgO9pRzywU=
=K2L7
-----END PGP SIGNATURE-----

JANET(UK) is a trading name of The JNT Association, a company limited
by guarantee which is registered in England under No. 2881024 
and whose Registered Office is at Lumen House, Library Avenue,
Harwell Science and Innovation Campus, Didcot, Oxfordshire. OX11 0SG