Multiple Smart Card Readers

Hello! This is the same topic I posted on the cryptography forum, but nobody there seems to reply, so here it is again!
I'm developing an application to sign pdf documents with smart cards. I'm using the PKCS#11 Sun Provider to manage the smart card and IText to sign the document. I don't need to support other OS's than Windows.
Everything works fine with one smart card, but I need to support two readers: they should be connected and active at the same time, on the same machine, they are exactly the same (apart from the smart card they hold) and the smart cards are from the same providers, thus use the same DLL.
I know my problem has a solution (I saw applications managing these cases), but my question is: If it can be done with the Sun PKCS11 provider, what should I do? (I saw that you can configure 'slots', but I don't know if it has to do with my problem!) Otherwise, should I recur to C++ to work at a lower level?
Any help is appreciated, even just a link to some documentation!
Thank you very much!

Hi,
when you work with one smartcard reader only usually you address the slot -1 that means "the first found".
But to deal with multiple readers you have to use slots of course since one reader will be slot 0, next reader will be slot 1 and so on...
So a credential object will be identified on a system by a couple
<slot,alias>
After that, the way to address slots (I mean the syntax) depends on the classes you are using...
Bye

Similar Messages

Programming multiple smart cards with multiple smart card readers in a PC causes a PCSCException in a smart card that is in progress

Hi,
I develop a Java code using smartcardio API to program a smart card. My GUI allows to add at most 5 smart card readers that will wait for card present, then do authentication and program the smart card with an application, then wait for card removal. This is a separate thread running in a loop for each smart card reader added as programmer.
The problem occurs when a certain smart card is in progress and I inserted another smart card to another smart card reader. Both smart card reader halts and throw sun.security.smartcardio.PCSCException: Unknown error 0x8010002f.
I also observed that every time there is an attempt to insert/remove a smart card in the smart card reader that is connected to the USB port would cause the programming in progress to be interrupted and throw the PCSCException.
These are some exceptions I got during my testing:
sun.security.smartcardio.PCSCException: Unknown error 0x8010002f
at sun.security.smartcardio.PCSC.SCardTransmit(Native Method)
at sun.security.smartcardio.ChannelImpl.doTransmit(ChannelImpl.java:171)
java.lang.Exception: Loader Record Failed: 6E | 0 //Sometimes I got this return code SW1 0x6E SW2 0x00 which means an APDU with an invalid 'CLA' bytes was received. I had check the command before it was sent and it was correct.
Help me understand this issue. I think the CardTerminal.isCardPresent(), CardTerminal.waitForCardPresent(0), and CardTerminal.waitForCardAbsent(0) cause this issue that CardChannel.transmit(apduCommand) is interrupted or the smart card insertion/removal causes the CardChannel.transmit(apduCommand) is interrupted.
Regards,
Knivez

Hi,
when you work with one smartcard reader only usually you address the slot -1 that means "the first found".
But to deal with multiple readers you have to use slots of course since one reader will be slot 0, next reader will be slot 1 and so on...
So a credential object will be identified on a system by a couple
<slot,alias>
After that, the way to address slots (I mean the syntax) depends on the classes you are using...
Bye

Accessing to Smart Card Readers PC/SC with Labview

Accessing to Smart Card Readers using Labview
This program is an example that how access to Smart Card Readers (PC/SC) to get some information about a SIM Card, this program is not debuged yet and have some issues.
The point is wear the winscard.dll where all the function to access to this PC/SC readers are defined, I don´t have enought skills as programmer, but I think that it could be help somebody to develope
applications with Labview and SIM cards (GSM, USIM, etc..)
Regards
Attachments:
GETTING_ATR_FROM_SIM_CARD_GSM.vi ‏118 KB

Hello!
Let me first understand your question, Do you want to know wich of 22 DLL´s, that you have, can you use to sent an AT command to retrive the MSISDN on SIM Card?
If you answer is yes, you should be identify all the functions in your dll and found wich of them ara used to sent AT commands like SMS send, SMS retrive, etc.., the same structure of this commands you can use to send another AT Command.
The number should be record on the SIM Card.
AT+CNUM Subscriber Number
Description:
This command returns the MSISDNs related to the subscriber (this information can be
stored in the SIM or in the ME). If subscriber has different MSISDN for different services,
each MSISDN is returned in a separate line.
Test if the command
is supported
AT+CNUM=?
Best Regards.
Enrique Ramos
Telcel Mexico

How access to Smart Card Readers using Labview?

I´am trying access to Smart Card Readers by Labview, but I have problems.
I want to read SIM card GSM using Labview.!
The file winscard.dll has the functions to access, but I dont have skill with "Using External codes in LabView".
In MSDN library there is the specification about the functions for winscard.dll
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/secauthn/security/smart_card_authentication.asp
When you install a driver for some smart card reader you access to it by winscard.dll.
Att. Enrique

Finally I can acces to the smart card readers (PC/SC) with Labview,   this is the first part where I can establish the context and realease it, and I can get the first name of my list of PC/SC readers that I have connected to my computer.
I was wearing the "Call Library Function" for winscard.dll
For Establish the context you need :
    function name : SCardEstablishContext
Calling conventions : stdcall (WINAPI)
function prototype :    long SCardEstablishContext(long SCARD_SCOPE_USER, long NULL1, long NULL2, unsigned long *hContextHandle);
function name : SCardReleaseContext
Calling conventions : stdcall (WINAPI)
function prototype :  void SCardReleaseContext(unsigned long hContextHandle);

Remote desktop and smart cards

I frequently work from home using my mac to access my windows based desktop at the office. I use the microsoft remote desktop v. 1.0.3. for MAC. Now that my agency is moving to smart card identification requirements for access I need to be able to use the smart card at home to sign onto the office desktop.
The RDC for MAC does not have an option for smart card readers (as opposed to the RDC for windows version). Is there alternative software that would be simple to install on my MAC (I am not an IT sophisticate) that will give me smart card access?

Microsoft Remote Desktop Connection (RDC) for Mac and Apple Remote Desktop (ARD) are two completely different tools with marginally similar capabilities. Unfortunately, as you've already discovered, neither offers Smart Card capabilities to allow you to authenticate to your Windows computer at work.
If your Mac is an Intel Mac then you could probably run Windows using Parallels or Boot Camp on your home computer and use the Windows RDC client to make your connection. I don't suggest trying to use VirtualPC if you have a PowerPC Mac simply because your Smart Card reader will most likely be USB and VirtualPC has a bad track record with USB devices.
Hope this helps!
bill
Mac OS X (10.4.10) 1 GHz Powerbook G4

Can Oracle (TM) Supply the Oracle Card Readers at the Retail Stores?

C:/MyProgram.SunOracle.dvi
The United States's Board of Education has the SUN RAY 3 on every desktop facility in the School Building throughtout the Nation this new school year 2011 (Fall). We cannot find the Hardware at any retail stores around the Nation. Can Oracle (TM) help us ?; get supplies to the retail stores quickly ,for these features; example:
- Smart card Readers: 1000,000 Oracle cards in distribution needed at retail stores, such as a Lighted smart card bezel, with dual-sided reader socket, support ISO 7816 T-O and T=1 Interface smart cards, synchrounus cards not supported; supported cards with voltage: 1.8, 3, 5 v and with a Max. card baud rate: 230K
-Audio- Stereo Headphones output jack and Microphone input jack (1/8- mini jack)
-Peripheral Interface-Five Universal Serial Bus (USB) Ports; One for Internet Services Provider Personal Numbers Drives and Flash Drives and DVI Video Connector.
_The Server Software X-Terminals for Microsoft Office:MAC and Windows 8.
_MAC OS X installation Drive for Notes or Lotus for Notes.
The Board of Education,(http://www.ed.gov/hardware.accessories.htm) need these required equipment in order to run the hardware on the desktop computers around the Nation. Can you be so kind to report a load to all the retail local stores around the United States? _MariaAkiba Inc.

I recently had similar errors on a Win95 PC. The Personal Oracle
for Win98 CD wouldn't install on a Win95 PC.
I upgraded to Win98 and it installed and worked.
FYI
The following regards Oracle ODBC drivers-
You must have an Oracle product with SQLNet installed before you
can make the Oracle ODBC driver work.
The version of the ODBC driver to get is supposed to correspond
to the SQLNet or Net8 Client version you're running.
You should only install the version of the ODBC driver that
matches the version of the Oracle client you have. In other
words--
ODBC driver     Oracle client
8.0.5.10      8.0.5.x.x
8.0.6.2      8.0.6.x.x
8.1.5.7      8.1.5.x.x
8.1.6.2      8.1.6.x.x
Start up the Oracle installer and look at the list of products
already installed.
After installing the Oracle8 ODBC Driver and Configuring Net8
database services, and
before using the Oracle8 ODBC Driver, you must configure the data
source.

Windows 8.1 default logon prompt for smart card instead of username/password

Hello,
We are currently in our pre-deployment test phase for Windows 8.1 and are trying to knock out the high visibility problems that we notice. One of the issues we've noticed:
When logging into Windows, the default prompt is for a username/password. all of our users are using smart cards, so they have to click "sign-in options", click the smart card icon, and then enter their PIN. How would I change the startup
screen to default to smart card?
Also, when locking the screen by removing the card it again prompts for the username/password when unlocking the screen. So the users again have to click on "sign-in options" and select the smart card, otherwise they risk locking out their
account by entering the PIN in the username/password field.
when locking the screen via ctrl-alt-del or windows-L unlocking does default to the smart card, so I know it can be done!
thanks,
-Nick

Hi,
I'm afraid we couldn't change the Sign-in Options order, I checked GP and Registry, there is no way to do it.
However, there is another way is just enable "Require smart card" In GP. While after this policy enabled, All users will have to use smart cards to log on to the network. This means that the organization must have a reliable public key infrastructure (PKI)
in place, and provide smart cards and smart card readers for all users.
Location: GPO_name\Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options
Roger Lu
TechNet Community Support

Unable to pair BB Smart Card Reader with Pc/Laptop

Hi, I have 2 new BB smart card readers (SCR) and Im trying to pair with the PC and I can not. The SCR software can not detect the SCR. I put the ID of the device on the software and is trying to looking for it but can not. It says "Unable to connect to the specified Blackberry smart card reader". I have another SCR and I don't have problems to pair with the computer only with the new ones. The SCR have the last OS. Do you know what could be the problem? I think is a bug of the new SCR.

mzamora wrote:
Andy, may be nothing so where can I post it? Is there a general discussion?
Hello,
if I were you, I'd post in the "General Blackberry Smartphone Functions and Features" forum.
The search box on top-right of this page is your true friend, and the public Knowledge Base too:

Compatible Smart Card Availability

I need help locating compatible smart cards for purchase for use with Client Security Solution 8.2 on my Thinkpad X60.
According to the installation notes for OmniPass Smart Card Middleware for Client Security Solution, the following smart cards are compatible...
- Gemalto/Axalto Cyblerflex Access eGate 32K (PRO/PKI)
- G&D SmartCafe 64K (PRO/PKI)
- OmniPass 72K (PRO/PKI)
- JCOP 72K (PRO/PKI)
I cannot find any vendor that sells these.
Any help would be appreciated.
Thanks.

Hi,
try with Lenovo sales team
We do sale also smart Card readers. Although I know, that usually we sell them with systems, but you need to ask whether they can sell it separatelly. I think they do.
Sorry for the confusing answer, but for Lenovo technicals it's easy to get separate parts, like this one.
Cheers

Smart card door locks ?

Hi
Doe's anybody know about a door lock system using smart cards (or magnetic stripe cards) which may be programmed with java ?
Most vendors only sell their door lock with software, useless in my case is I want to programm the smart card my self via internet using normal card readers.
Thanks
Marc

The scenario is, you have a door that requires an authentication. Behind the door is a workstation that is attached to a server/db.
A user scans or inserts their smart card and the firmware in the reader will prompt the user for their authentication. This can be a biometric or a PIN. The authentication is used for the card's access NOT the door. Once the authentication is successful, the proper identification will be retrieved from the card, probably an ID certificate. The workstation will query the server/db with that ID certificate to see if the person is authorized to this area, and unlock the door. ( I've omitted a few steps to simplify the example )
I say this because there's nothing to gain deploying that solution in Java. There's no multiple platform issues, and the companies doing it are so financially strapped, that C/C++ on Windows/DOS is easier and cheaper. Also most of the clients want a cheap solution and are running Windows/DOS as well.
I'm not saying you can't do it in Java, just you won't find many or any clients running the middleware on different platform workstations.

Using smart card/nfc tag for authentication on Windows 8 devices NOT in a domain

Title says it all. We have Sony RC-S380 readers and Acer Iconia W510 tablets with builtin Broadcom NFC chips. We can read tags and configure them for the usual proximity stuff (URIs, mail, etc.) but we are looking for authentication purposes, however without
using ADFS or domain security. Can anyone point us in the right direction?

Hi,
By default, smart card is not available for stand alone computer and local account.
This authentication technology might be helpful to you:
EIDAuthenticate - Smart card logon on stand alone computers and local accounts
http://www.mysmartlogon.com/products/eidauthenticate.html
Please Note: Since the website is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
Karen Hu
TechNet Community Support

Need advice for an application that restricts access to other applications using a smart card

Hello everybody,
I am developing a system that uses a smart card reader attached to a USB port of a PC.
What the system should provide is:
When computer boots up and shows the users login screen, a user, previously registered, can use his smart card to access the system, instead of entering his password
Once the user is logged in, when he tries to launch an application, which has previously marked as "secured", a dialog box is shown indicating that the user has to present his smart card. If the smart card has access to the application, the application
is launched, otherwise an error message is shown to the user and the application is not executed.
I develop in C++ and C#. I have already created a library (in Visual C++) that manages the smart card reader and provides the card presented to it.
Now I am developing the applicastion (in C#) that will configure the security (assigning cards to users and applications).
Concerning this, I have 2 questions regarding each point above:
Is it possible to create the centralized application that lists all users and allows to assign cards to them? Then, when the users login screen is shown, the system must access that data before logging in, so that it can check which card was presented and
what user it corresponds to. I have seen in laptops, that have embedded fingerprint readers, a user must login to his account first and then he can register his fingerprints. In fact, what I need to do is something similar but with smart card reader instead
of fingerprint reader. So, perhaps, user must login into his account first and then he will be able to add his card and store that information somewhere (in windows registry maybe).
How can I launch my application when other application is executed but before its interface is actually shown? this is similar to what antivirus programs do, because they check the executable before it is actually ran. What is the best method to address
the application? by executable file name? process name? or other? if the best is by process name, how can I know the process name without actually running the application?
Well, that is all what I need to do. Please advice regarding this subject.
I look forward to hearing from you,
Best regards,
Jaime
Powered by C++

> what was the guidance?
1. Research other software that does similar things (not just exactly the same) as you need. If you like something in their solutions, copy it :)
The only software I know that does that is an antivirus, but I am unlucky to find some code in c++ that allows to intercept the program execution before actually executing it.
2. If a kernel driver would fit in your solution, go for it (google for what is available for free, or find a consultant to write it for you).
There are a lot of information about kernel drivers, but the question is, is that really the solution?
Otherwise, you can just hide the application from user's reach and substitute the executable in shortcuts, etc. to run your program instead.
Definetly this is not the way to go
What is the best method to address the application? by executable file name? process name? or other?
By executable file name, like in the Windows Applocker, I think. Processes do not have names (they are artifact of Task manager and debugging tools, to represent the processes for user somehow). Or, only by the filename part of the full path.
I agree with that
if the best is by process name, how can I know the process name without actually running the application?
When the user runs the application, the driver will detect this and do its magic.
I have found this page: http://stackoverflow.com/questions/3556048/how-to-detect-win32-process-creation-termination-in-c. They mention WMI, but I will study it tommorow... it is so late for today :-)
Regards,
-- pa
Regards
Jaime
Powered by C++

Need a recommendation about java smart card and a reader

I've been posting some message in this forum and others and haven't gotten a clear response.
I want to experiment with java smart card technology.
From what I gathered, Gemplus is a leading company in this field so I thought about buying a smart card reader from it and a java smart card.
I thought about buying the "USB Smart Card Reader/Writer Plug n Play (GemPC430)" reader which costs 69$.
Is this a reasonable price?
I need an answer from someone with experience using it.
Now then, which one should I buy?
I only want to do smart card to desktop application interaction without anything on the web (e-commerce or anything to do with encryption).
I can buy 5 "GS2.2 Standard Crypto GPK8000su512 RED"
cards which cost 87.50$
THATS A LOT OF MONEY!!!!
Are all java smart cards that expensive?
There is a list of other cards on their site but I haven't been able to locate their price and don't know which to buy.
Finally, there is the "Kit, GemSAFE Enterprise Workstation 2.21 Standard Cryptography Serial Port Reader" which as I read consists a GPK8000 card.
Is this card a java card?
Or do I need to buy the reader and java card seperately.
Any help and insight would be greatly appreciated.
Thanks.

I've looked closely at the Cyberflex 32K cards + SDK from Schlumberger.
My criteria was:
* Javacard 2.1 support
* visa open support (or whatever it is called now)
* complete sdk (develop, test, deploy)
* exportable
* upgradable
* customer support
I tried to get someone from Gemplus to contact me, but was unable to ever get even an
email response.
Schlumberger, on the other hand, won me over with the quick responses over email.
They offer fairly inexpensive upgrades after you buy the product, and technical support
is free.
For simple experimentation, you can get the JavaCard SDK for free. At JavaOne, several
years ago, they were giving away JavaRings with Card Readers (which presumably
means these are cheap to buy) from SCM or some company in Texas. You might
try to get one of these. They don't have much memory, but are an interesting twist
on the Java Card thing.
If you want to dive in, the Smart Card SDK from Schlumberger will run you about $499.
This includes the reader, 5 cards, and the SDK. Likewise, Metrowerks puts out an
IDE for Java Card which runs about $1200, and may be available as a bundle from
vendors like Schlumberger.
dk

ACR122U smart card reader not recognized after reboot...

I am new to POS Windows and have been working with wondows for ever. I was using ACR 122u contactless usb smart card reader with windows XP and communicating with it using java with no problems. Then our I changed the OS to windows Pos ready 2009 and we found out that USB card reader has to be unplugged and plugged back in after rebooting the computer. other than the OS everything else is identicle (driver, reader, java program, ect..). Can any one tell me what could cause this problem and what I can do to solve this.
I have cheked the device manager and under USB controllers it says that it is unrecognized deivice..I tried changing the reader, changing the port and(actually the reader is pluged in to a linksys external usb hub, but changing this to a internal port did not make any difference) tried chagning some settings in control panel.
1. I checked the power option of the root usb hub.
2. Changed the driver.cab to a normal driver.cab obtained from the normal xp version. Uninstall the driver and reinstall it.
So far this hasnt been working.
I hope someone could help me with this.
~Tharanga

After extensive tests with Win 7 Embedded and ACR122U, I can confirm the same problem. It seems that reader firmware hangs and the only way to recover is to unplug and plug again the reader. We shall repeat the tests with readers from other manufacturers.
For the tests, we use a Win7 Embedded Standard PC with an ACR122U connected. We installed and configured the ACS Monitor program to start automatically with windows. We made a small utility to restart the PC every minute and we placed it on the Startup directory.
Within the first 5-10 reboots, the reader fails and the ACS monitor program shows " No reader connected" and no reaction from the reader. If we shall unplug and plug the reader again to the USB port everything works fine again.
Kostas P.

Looking for a smart card reader compatible with Mac OS X 10.5

Hi there,
I am looking for a smart card (card with microCPU) reader which is compatible with Mac OS X 10.5 .
In substance, what I need is a little space to store all my passwords in, due to the fact that I might forget one: I have many to remember!
I have an USB key, but I use it in many computers, even in ones whose security cannot be 100% trusted.. and I want no doubt when talking about safety.
Here's an image of what I want in poor words:
http://www.ordnas.it/prodotti/lett_mem/imgpr1592-01-3.jpg
The main issue is that most SC readers are /not/ Mac compatible.
So what brand should I opt for ? What costs should I expect ?
Thank to everyone who'll help.
Tyrexionibus

Thank you for your answer.
This might be a solution, I'll take it seriously.
Can this other be a solution too ?
http://www.athena-scs.com/product.asp?pid=1
On the manufacturer's page, it's stated that it's compatible with Mac OS X.
41 bucks + shipping + the price of a smart card..

Multiple Smart Card Readers

Similar Messages

Maybe you are looking for