Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Can you set a website to look for a USB security code before opening?

Posted on 2013-02-01
3
Medium Priority
?
229 Views
Last Modified: 2013-02-16
Hi All,

Not 100% sure how to go about this one.

I am looking to secure a page on a web site, but what I am after is a way to make the web page look for a specific USB security key (like a hardlock of sorts) before the page will open.

Site is in PHP at the moment.

Is what I am after even possible? As i would prefer not to have the USB install anything onto their computer, I really just want it to look for the file that is hidden on the USB

Thanks

James
0
Comment
Question by:nullag
3 Comments
 
LVL 16

Accepted Solution

by:
Chris H earned 750 total points
ID: 38845329
I recommend talking to the sales engineers here:

http://www.yubico.com/


I know the yubikey does what you want, just don't know how to explain it well..
http://www.yubico.com/products/yubikey-hardware/yubikey-nano/
0
 
LVL 84

Assisted Solution

by:David Johnson, CD, MVP
David Johnson, CD, MVP earned 750 total points
ID: 38845607
You can't check a persons hardware directly using http.  So you are left with having part 2 of the security matrix of two factor identification (something you know and something you have).

This 2nd part could be an sms text message sent to their phone, the yubikey, RSASecurID or use a one-time pad

http://en.wikipedia.org/wiki/Two-factor_authentication#USB_tokens
0
 
LVL 84

Expert Comment

by:Dave Baldwin
ID: 38846090
Whatever is in the file has to go over the network to the server which means I can capture it with a network scanner.  Is your method secure enough to not be broken by that?
0

Featured Post

Threat Trends for MSPs to Watch

See the findings.
Despite its humble beginnings, phishing has come a long way since those first crudely constructed emails. Today, phishing sites can appear and disappear in the length of a coffee break, and it takes more than a little know-how to keep your clients secure.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Many companies are looking to get out of the datacenter business and to services like Microsoft Azure to provide Infrastructure as a Service (IaaS) solutions for legacy client server workloads, rather than continuing to make capital investments in h…
The conference as a whole was very interesting, although if one has to make a choice between this one and some others, you may want to check out the others.  This conference is aimed mainly at government agencies.  So it addresses the various compli…
This Micro Tutorial will demonstrate how to add subdomains to your content reports. This can be very importing in having a site with multiple subdomains.
Shows how to create a shortcut to site-search Experts Exchange using Google in the Chrome browser. This eliminates the need to type out site:experts-exchange.com whenever you want to search the site. Launch the Search Engine Menu: In chrome, via you…
Suggested Courses

885 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question