Solved

Can you set a website to look for a USB security code before opening?

Posted on 2013-02-01
3
226 Views
Last Modified: 2013-02-16
Hi All,

Not 100% sure how to go about this one.

I am looking to secure a page on a web site, but what I am after is a way to make the web page look for a specific USB security key (like a hardlock of sorts) before the page will open.

Site is in PHP at the moment.

Is what I am after even possible? As i would prefer not to have the USB install anything onto their computer, I really just want it to look for the file that is hidden on the USB

Thanks

James
0
Comment
Question by:nullag
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 16

Accepted Solution

by:
choward16980 earned 250 total points
ID: 38845329
I recommend talking to the sales engineers here:

http://www.yubico.com/


I know the yubikey does what you want, just don't know how to explain it well..
http://www.yubico.com/products/yubikey-hardware/yubikey-nano/
0
 
LVL 82

Assisted Solution

by:David Johnson, CD, MVP
David Johnson, CD, MVP earned 250 total points
ID: 38845607
You can't check a persons hardware directly using http.  So you are left with having part 2 of the security matrix of two factor identification (something you know and something you have).

This 2nd part could be an sms text message sent to their phone, the yubikey, RSASecurID or use a one-time pad

http://en.wikipedia.org/wiki/Two-factor_authentication#USB_tokens
0
 
LVL 83

Expert Comment

by:Dave Baldwin
ID: 38846090
Whatever is in the file has to go over the network to the server which means I can capture it with a network scanner.  Is your method secure enough to not be broken by that?
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

As a financial services provider, your business is impacted by two of the strictest federal regulations on record: the Sarbanes-Oxley Act and the Gramm-Leach-Bliley Act. Correctly implementing faxing into your organization to provide secure, real-ti…
Many companies are looking to get out of the datacenter business and to services like Microsoft Azure to provide Infrastructure as a Service (IaaS) solutions for legacy client server workloads, rather than continuing to make capital investments in h…
How to create a custom search shortcut to site-search Experts Exchange using Google in the Firefox browser. This eliminates the need to type out site:experts-exchange.com whenever you want to search the site. Launch your Bookmark Menu: Press 'Ctrl +…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

615 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question