Other Directory Sites: SeekWonder | Directory Owners Forum
The following archive was created by hippie-mail 7.98617-22 on Sat Apr 10 1999 - 01:10:56
Andi Kleen (ak@muc.de)
06 Aug 1998 19:47:12 +0200
Martin Grap <mgrap@concord-eracom.de> writes:
>
> If you do it properly there is simply no technical reason to store the PIN
> or any other secret information in any form on the mag stripe of an ATM card.
> In the worst case (ATM offline), the ATM has to know the PIN generation key.
> If the ATM operates only online the ATM not even has to know the PIN
> generation key.
You mean there is a single secret protecting all the PINs (based on
information from the card)? If the PIN can be deducted somehow from the
card without doing a database check this would be equivalent to storing the
encrypted PIN on the card.
Or do I miss something here?
-Andi
The following archive was created by hippie-mail 7.98617-22 on Sat Apr 10 1999 - 01:10:56