Jump to content

Recommended Posts

Posted

Hello all.

 

We've just moved to a different payroll system and I've no idea how the security works.

 

The users log into a website using a one use time limited code.

 

Basically the Finance manager has this Dongle thing which is attached to nothing. No other hardware in school related to it, doesn't connect to a PC or anything.

He presses a button and a code is generated.

He must use this code within 30 seconds or else it becomes redundant and he must press the button again to generate another.

He types code into the software on his PC and it lets him on.

 

How does their system know what his code is?

 

http://www.vasco.com

Posted

It could be some algorithm based on the time and/or date that then has another user-centric algorithm applied to it. That way it's all hard-coded onto the device.

 

Natwest have a similar thing for their online banking.

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now



×
×
  • Create New...