Aloaha Cardconnector (CSP/PKCS #11)

Read synchronous Memory Cards with Aloaha

Even though the focus of Aloaha is put on Smart Cards we do have APIs to read 2W, 3W, i2c Memory Cards such as the famous SLE4428, SLE4442, telephone cards, german KVK (Krankenversicherungskarte), Kinko, Student Card, etc.

The API to read such cards is included in the Aloaha Cardconnector, Credential Provider and Smartlogon. No license is required to just read them!

Code Sample:

dim cr
dim reader

set cr = createobject(“AloahaSync.SyncAPI”)
   reader = cr.ReaderNamesCSV
   reader=split(reader,”,”)(0)

   if reader<>”" then
      If cr.Connect(reader) = True Then
         msgbox cr.hexdump(cr.raw_content)
      end if
   end if
set cr = nothing

For german KVK Cards please also try API: cr.KVK_Content

 

Please note that for the new German Health Card (eGK / Gesundheitskarte) you should follow the instructions on: http://blog.aloaha.com/2012/03/21/deutsche-gesundheitskarte-auslesen/

KVK Specification

 

Please make sure that when you are using an HID/Omnikey Reader that you install the Sync API additionally to the reader driver. When using SCM Microsystems Reader you need to make sure that the MCARD API has been installed additionally to the reader driver!

 



CT-API and e-Health Terminal Support in Aloaha

Aloaha accesses per default the connected Smart Card Reader via the Windows PC/SC or CCID driver. In some cases it might be required to use the reader via CT-API. For example in cases that no PC/SC or CCID driver exists. That is the case for most health terminals used in the german health system.

To be able to use CT-API it is required that a recent version of the Aloaha Smartcard Connector is installed. If you find the file AloahaCSPPlugin.exe in <common files>\Aloaha your Version is recent enough to be switched to CT-API.

To activate CT-API there have to be entries in the file CTAPIINI.ini in <program files>\wrocklage and entries in the registry.

CTAPIINI.ini:

[Settings]
activated=1
CTAPI=c:\windows\system32\ct8751.dll
[HID OMNIKEY 8751 e-Health LAN]
port=1
Units=01,02,03,04,40,50

Please note the the settings section is required. The rest Aloaha will try to fill in automatically.

Once the above seetings are done you you re-logged on into your machine you will see your CT-API eHealth Terminal in the Aloaha Systray as shown below:

 

Aloaha System Tray with e-Health Terminal

Aloaha System Tray with e-Health Terminal

 

Even though any CTAPI Reader should work currently ONLY the ORGA 6041 eGK and OMNIKEY 8751 eHealth terminals have been accredited to work perfectly with Aloaha. More will follow on request!

Windows Logon with e-Health Terminal

Obviously the Aloaha Smartlogon does support Windows Logon via CTAPI based Smartcard Reader. That means that it is possible to use a HID 8751 or Orga 6041 eHealth Terminal to logon to with the german HBA (Health Professional Card).

Per default the e-Health Terminal is NOT connected to the Windows Logon Credentials Provider. To activate that you need to create the following entry in our CTAPIini.ini in your installation folder:

[Settings]
CTAPIAsSystem=1

After you create the key and set your credentials via Aloaha GUI you can logon via the Aloaha Tile as shown below:

Aloaha Windows Logon

Aloaha Windows Logon

 

You can download the Aloaha Middleware/Credential Provider from http://www.aloaha.com/download/credentialprovider.zip

Please make sure to request an evaluation key from info@aloaha.com

German cutomer should also read: http://blog.aloaha.com/2012/01/03/wie-richte-ich-mein-ehealth-terminal-ein-um-mich-mit-meinem-hba-oder-smc-karte-an-windows-anzumelden/

 


PKCS7 Validation now automatically decrypts encrypted p7m files

One popular feature is Aloaha’s shell integrated PKCS7 Validator. The user can just right click on the p7s/p7m file and Aloaha will validate the signature and if that is correct will display the signers certificate.

From this Aloaha Signator/Cardconnectors Version on Aloaha will automatically detect if a file is signed only or encrypted and/or signed. Encrypted files will be automatically decrypted! An easy way to test that out is to save the mime.p7m of an s/mime mail as mail.p7m and then right click on it to choose Validate PKCS7!

PKCS7 Validation


Aloaha Crypto Card now also available as contactless card!

The Aloaha Crypto Card is now also available as Contactless Card. Please contact info@aloaha.com for further information.

Details for the Crypto Card can be found on: http://www.aloaha.com/smartcard-software-en/aloaha-crypto-card.php



OpenPGP Cards now supported!

All Aloaha products are now natively supporting the OpenPGP Cards (v2.0) and GPF Crypto Stick

To use your OpenPGP Card in Windows does not require any non Aloaha Software anymore!

Many thanks to Achim & Jan!

More on http://www.privacyfoundation.de/aktuelles/detail/zurueck/akutelles/artikel/crypto-stick-in-kommerzieller-software-integriert/

 


Smartcards as a secure replacement for the plain old password

Over the past several weeks a huge wave of cyber attacks targeted high profile companies such as Sony, Google, Lockheed Martin and others.

“For us this wave of attacks does not come as a surprise. The rise of cheap and extremely powerful GPUs (graphical processing unit) just rendered passwords completely useless,” said George Gauci, Business Developmenet Manager of Aloaha, a Malta-based software and smart-card technology development company.

“A fairly standard graphics card today can brute force a five-letter NTLM (Microsoft security protocol) password in less than a second, seven-letter passwords are cracked in just under 20 minutes. Currently passwords must be at least nine characters to increase the cracking time to more than 30 days. But with 500 Gigaflop netbooks around the corner it will be just a question of months that the minimum password length must be 15 characters or more,” warned Mr Gauci.

He does not believe that OTP (one-time password) tokens are the solution as the attack on Lockheed Martin has shown that OTP can never be secure since the algorithm of the token has to be known by the server and thus could be known also by an intruder.

“This case has shown that OTP stands more for ‘Obscurity Takes Privacy’ rather than ‘One Time Password’”, according to Mr Gauci.

Aloaha suggests that the only secure way of authentication must be based on asymmetric cryptography, for example with smartcards.

Smartcard authentication is already available for any Windows-based machine that is a member of a domain. All the user requires is a smartcard and middleware software such as the Aloaha Smartcard Connector. Once correctly configured the unsecure password authentication can be even disabled completely. For machines which are not member of a domain, there is AloahaSmartlogin, a package which allows the user to encrypt his/her password with the smartcard. Like that the user can choose a very long 100 character password and encrypt it with the smartcard. AloahaSmartlogin will take care of passing this password to the logon process. Even a 500 Gflop netbook will take years to crack such a smartcard encrypted password.

Strong passwords can also be extended to include hard disk and document encryption.

Published on: http://www.timesofmalta.com/articles/view/20110707/technology/Smartcards-as-a-secure-replacement-for-the-plain-old-password.374367


New generation of PDF and smart card applications

Aloaha Limited, a Malta-based provider of content security, PDF and digital signature software, has announced the new generation or version 2.5 of its popular PDF and smart card applications.

The Aloaha PDF Tools such as the Aloaha PDF Suite are now based on a complete new and faster PDF Engine, its own PDF printer, printer port and print processor.

The new PDF engine introduces new embedded commands. Those new commands are now able to customise outgoing e-mails based on commands embedded into the original document.

A small overview of those commands can be seen on http://www.aloaha.com/cache/aloaha-automation-example.pdf

Other major improvements are also experienced with the Aloaha Smart Card Connector. The Aloaha PKCS11 module supports now more APIs to support also very popular applications such as Lotus Notes. A flash video demonstrating how to use Aloaha in Lotus Notes to sign, encrypt and decrypt e-mails can be found on http://www.aloaha.com/movies/notes.htm

Times of Malta: New generation of PDF and smart card applications


  • RSS Aloaha on Twitter

  • Copyright © 1996-2012 Aloaha Software. All rights reserved.
    RSS Feed
    Powered by WordPress