| |
How to use a Sesame card in practice?
Is it hard to use a Sesame card, is the setup complicated, and how
secure is it?
In everyday use, the Sesame card is just an extra confirmation mechanism.
Actually, it is a very solid mechanism, because it uses a piece of hardware
for the confirmation. And because the codes are 6-digit numbers, the
chances of anyone guess the next number would be one in a million -- literally!
When you are requested to provide the confirmation code, you plug it into
the card reader and copy the code that appears on the display.
The card reader is an offline device, running on batteries. In other words,
you do not need anything on your PC to use Sesame.
The accounts that are going to rely on your Sesame code entry need to be
setup to expect the card. This is prepared by the administrator of your
account, but it may be that you need to activate or register the card under
your account, usually by entering a few codes.
Every card has a serial number and a name. The name is a human-friendly
way to reference the card. The serial number is a unique number, but the
name does not have to be unique. If your account is setup with
multiple cards (perhaps given to different people) then the rule is that
each card name may occur only once under that account.
When you order or receive the Sesame card, you will be instructed if and
how you need to activate the card.
Because the reader is an offline device, there is no danger from infection
from a virus. And even if you have spyware on your PC, all it could
register would be a one-time password. The next code is a fresh pick from
a range of one million codes!
The smart card is the centre of security. Keep it with you at all times.
We selected a smart card for Sesame because it fits nicely in your wallet.
The reader is not linked to your security. All it does is request a code
and display it for you. You could bring your own if you want to avoid
that someone redesigns that part of Sesame, but in normal working situations
that would not be necessary. As long as you don't trust readers that lie
around in an internet cafe.
Posted on Fri, 28 Apr 2006, 11:03.
| |
|