Using smartcard reader

I've been trying to find some software to make use of the smartcard reader in my M4400. I've searched a lot on Google but I can't find any applications, only drivers. Is there any software that would let me view the data from the chip on my debit cards, credit cards and other smartcards? I don't want to do anything productive with it, but just to see what it's capable of and what data is stored on the cards.

Ideally, I'd like to find a software version of Chip Authentication Program so I don't have to carry around a handheld card reader for logging into my online banking. Although it's a standard algorithm used by many banks, I doubt anything has been produced yet.

 

Sorry, I do not know of any software for that purpose (because I have never looked for one). But I highly doubt you'd find something interesting on your debit card (depending on what techniques your bank uses).

Warning: you can not securely enter your PIN via the keyboard, software can "read out" the PIN if entered via keyboard. If you enter your PIN via a separate card reader, it doesn't even get to the computer, so no software can read it out.

The smartcard reader of the M4400 is a security class 1 reader, whereas external readers with separate PIN pads are security class 2. So using your smartcard in the reader of the M4400 to do homebanking wouldn't make it any more secure than just using a password and no smartcard at all.

Actually, you only get a real security improvemet in home banking with smartcards if you use a security class 3 reader (PIN pad and display), and a soft- and hardware solution that makes it possible to read the details of the transaction on the display of the card reader before you enter your pin to verify it (on the computer monitor, malicious software could fake the transaction information). Just in case: Better don't fall back to only using a password for home banking just because I explained that now.

 

It should at least contain the card number, which would be useful for copying to the clipboard to paste into online shopping sites.

 

Hi Christoph.krn,

i'm looking for a solution with exactly this qualities. Do you need a special hardware or does this work with every class-3 reader?
I am planning to buy a 'reiner-sct e-com plus' card reader. (http://www.reiner-sct.com/content/view/181/142/)
As you statet: the input of a pin (to unlock the smartcard) to sign the transaction is obviously useless if you can't check the account number for example.

Regards,
doak

 

Hello doak,

I'm sorry, I never did any homebanking so I can't judge about any of the possible ways to do secure homebanking, thus I can't really recommend any solution at all.

I do know that the first thing you have to do is to contact your bank, since many of them only offer so many of the vast amount of homebanking solutions.

Maybe you should register on http://www.onlinebanking-forum.de Keywords to search for would be "HBCI", "FinTS" and especially "Secoder" (these are standards used in homebanking). "Hibiscus" is an open-source homebanking software that looks promising to me, but I have never tried it.

Once you found a good solution, I'd be glad if you shared you findings with me. Thank you.


Sorry I couldn't help,

Christoph

 

Hi Christoph,

Thank you for your fast response!

They support HBCI. IMHO some HBCI software and any solution which could sign the transaction (with a certificate I had commited to my bank) should work. Basically it is on my own authority where to store and /protect/ my certificate, isn't it?

Seems to be very good forum. Thanks.

I will give this a try. I have choosed a class 3 reader (secoder functionality, Reiner SCT) and a smartcard of Athena (ASEcard crypto). Let's see ...

I will do that!

Thank you very much.

Regards,
doak


PS: Sorry, I had to strip all links above because of forum restrictions