How to use a Sesame card in practice?

Is it hard to use a Sesame card, is the setup complicated, and how secure is it?

In everyday use, the Sesame card is just an extra confirmation mechanism. Actually, it is a very solid mechanism, because it uses a piece of hardware for the confirmation. And because the codes are 6-digit numbers, the chances of anyone guess the next number would be one in a million -- literally!

When you are requested to provide the confirmation code, you plug it into the card reader and copy the code that appears on the display.

Installation

The card reader is an offline device, running on batteries. In other words, you do not need anything on your PC to use Sesame.

The accounts that are going to rely on your Sesame code entry need to be setup to expect the card. This is prepared by the administrator of your account, but it may be that you need to activate or register the card under your account, usually by entering a few codes.

Every card has a serial number and a name. The name is a human-friendly way to reference the card. The serial number is a unique number, but the name does not have to be unique. If your account is setup with multiple cards (perhaps given to different people) then the rule is that each card name may occur only once under that account.

When you order or receive the Sesame card, you will be instructed if and how you need to activate the card.

Security

Because the reader is an offline device, there is no danger from infection from a virus. And even if you have spyware on your PC, all it could register would be a one-time password. The next code is a fresh pick from a range of one million codes!

The smart card is the centre of security. Keep it with you at all times. We selected a smart card for Sesame because it fits nicely in your wallet.

The reader is not linked to your security. All it does is request a code and display it for you. You could bring your own if you want to avoid that someone redesigns that part of Sesame, but in normal working situations that would not be necessary. As long as you don't trust readers that lie around in an internet cafe.

Posted on Fri, 28 Apr 2006, 11:03.


 
   ------ 8< ---------- 8< ----------- 8< ------ | OpenFortress*