I would recommend a sercure (SSL) web server and certificate
authentication. If the machines that the users are using cannot be
trusted, put the certificate on a smart card. The smart card contains
a small CPU and memory, and all the calculations involving the private
key happen on the card - the private key cannot be read directly. We
looked at Webid and related products, but the smart cards are both
more secure and easier to use. Litronics and Datakey
(http://www.datakey.com), among others, make smart cards and readers.
Steve Gaarder Network and Systems Administrator
gaarder @
cmold .
com C-MOLD, Ithaca, N.Y., USA
References:
|
|
