User's Manual
Use
the
pcProx Device
for
Password
Security -
Complex
Passwords
It is
possible
with
certain limitations,
to
use
the proximity
t
oken
as a password
for
an application
or
operating system log on. The unique card bit-stream c
onv
er
t
ed
to
either decimal
or hexadecimal
becomes
the
entire
or
a portion
of the
password. Enroll
this
card data
to the
password
of the
operating system application
for the
user
.
Since
the proximity
t
oken
has no
read/write
memory there
is
no way go change
this or
writ
e
alphanumeric characters such as a user name
to the proximity
t
ok
en.
Some examples are
shown
below. Please see RF
IDeas pcProx Playback
Star
t
er
Kit or
call
the
Sales
Department
if this capability
is needed.
Several companies have adopted a policy
that
requires users
to
change
their
password every
xx
number
of
days
to
increase security. The PIN
is the
portion
of the
password
the
user changes
every
xx
number
of
days. Since
the
card data
is
completely numeric, any alpha and
upper/lower
case
letter
constraints are handled
in the
user supplied
PIN.
A two-factor
authentication system
is
made up
of:
1.
Card
ID data
2. Personal
Identification Number
(PIN)
The device may be configured
to
allow operation under either a one
or two-factor authentication
system.
One-Factor
In
a one-factor system,
the
user simply scans
the ID
card. The device may be configured
to
add
TAB
keystrokes ahead
of the
data as
well
as a TAB
or
ENTER
keystroke after
the
card
data.
Two-Factor
The
two-factor
approach
is
especially useful when insisting on password construction rules
or
periodic changing
of passwords.
In
a
two-factor
system,
the
user may enter
the
PIN either before
or
after
the
card data.
If the user
adds
the
PIN before
the
card data,
the
device may be configured
to
append
the
ENTER
keystroke.
Pre and Post
Characters
There are some additional measures
that
can be taken
to
make
it
more
difficult for
unauthoriz
ed
users
to
reproduce
passwords.
Adding additional keystroke characters
to the
card information,
that is difficult to
re-produce,
while
configuring
the
data. These additional characters are labeled as
Sp1, Sp2, and Sp3 on
the delimeters
tab
menu
selections.