Physical security keys

Jack Warden · Apr 10, 2015

Hi, i am building a computer and getting windows 8, but i want very good security! I dont want to use third party software for USB keys and want to use a smart card, am i able to do this, how much does it cost, do i need special third party software and, can i do it with just a normal computer that isnt setup to a special network like schools have? Please help!

Thanks
Jack

COLGeek · Apr 10, 2015

Aside from having a card reader and the drivers necessary to access it, Windows has built-in support for smart card login.

Have you given thought as to where you will get a programmed smart card from? That may be your greatest issue.

Jack Warden · Apr 10, 2015

COLGeek :

Thanks for responding, I don't have much knowledge on smart cards and I've seen many sites selling them, what do you mean by programmed and also, will any reader work with any card? Are these correct http://www.smartcardsource.com/contents/en-ca/d6_basic-smart-cards.html ?

Jack Warden · Apr 10, 2015

It's also or a stand alone computer if that changes anything

Jack Warden · Apr 10, 2015

anonymous1 :

I am looking for a lot of security because I have lots of important designs i have that simply cant be stolen plus i have a bad memory and wont be able to memorize anything that isnt easily guessed

COLGeek · Apr 10, 2015

Those are all blank cards. Programming a smart card really just puts your login credentials (x.509 certificate) on the smart card. These cards can then be used as a login device, and the digitally sign/encrypt messages (typical uses).

Just from what is posted here, it sounds more to me like you should consider encrypting your files (like with bitlocker) vice using a smart card solution.

Jack Warden · Apr 10, 2015

Also, would the smart card log me out when it is removed and can i use it when i need to enter my password to do a download? I have also seen people download stuff before they use smart card for stand alone, would that be a driver? https://m.youtube.com/watch?v=L_P3u3xvOuI

Jack Warden · Apr 10, 2015

Doesnt windows program it once it has been set up?

COLGeek · Apr 10, 2015

Jack Warden :

No, it doesn't. The cards are programmed via a separate device and programs.

In fact, I am using one on the system I am using right now.

COLGeek · Apr 10, 2015

Jack Warden :

Yes, you can set up your system to log you out when the smart card is removed. My office systems are configured to do that.

Jack Warden · Apr 10, 2015

COLGeek :

An advice on where to get a programmed one or how to program it?

Jack Warden · Apr 10, 2015

Ok the log off part is good

COLGeek · Apr 10, 2015

Consider these links:

http://www.infoworld.com/article/2612812/security/don-t-put-all-your-faith-in-smart-cards.html

http://www.smartcardsource.com/contents/en-ca/d5_programming.html

Where are you located (for a possible smart card source)? Location matters as laws/rules for use vary by country.

Jack Warden · Apr 10, 2015

COLGeek :

Canada

Alabalcho · Apr 10, 2015

@Jack, you are putting the wagon in front of the horse.

There are several factors to consider:
- Physical security -you don't want someone to break into your house/office, and grab the whole PC
- Data security - you want your data to be (a) encrypted, and (b) regularly backed up
- Windows security - you want secure password and/or token (USB key, smart card) to authenticate you

Just remember: Once you encrypt your data, it will be as difficult (read: impossible) for you as for the thief to decrypt it if you forget the password / key, so having regular backups (stored offsite) is important.

Get a cheap $150 computer you can practice your solution on (encryption, backup, restore, decrypt - whole nine yards) before going on with your precious data.

Jack Warden · Apr 10, 2015

i see your points, and i agree, what is a bios password it sounds interesting

Jack Warden · Apr 10, 2015

anonymous1 :

what is a bios password?

COLGeek · Apr 10, 2015

A BIOS password is one you configure in your BIOS. It restricts access to your OS until entered. However, if someone has physical access to the PC, it is easily bypassed. Also, if you are logged into the system, an intruder could access via the network.

COLGeek · Apr 10, 2015

Instead of a smart card reader, you might also consider a biometric scanner (fingerprint). Regardless, you still need to consider encryption of sensitive folders/files as previously discussed.

Something like this: http://www.newegg.com/Product/Product.aspx?Item=N82E16800996148

I am sure you can get from Newegg or NCIX in Canada.

Physical security keys

Reputable

Cybernaut

Reputable

Reputable

Reputable

Cybernaut

Reputable

Reputable

Cybernaut

Cybernaut

Reputable

Reputable

Cybernaut

Reputable

Titan

Reputable

Reputable

Cybernaut

Cybernaut

Share this page