Chris Wilson Posted February 28, 2008 Share Posted February 28, 2008 How does this work, I have the number creating gizmo, but is there info on line about how it actually works, as I am curious Cheers. Quote Link to comment Share on other sites More sharing options...
supra matt Posted February 28, 2008 Share Posted February 28, 2008 put your card in press identify and it will give you a number you need to enter to access your account simply really . Quote Link to comment Share on other sites More sharing options...
BASHTHEBISHOP Posted February 28, 2008 Share Posted February 28, 2008 you might want to read this though... pin sentry for barclays Quote Link to comment Share on other sites More sharing options...
Sheefa Posted February 28, 2008 Share Posted February 28, 2008 You threw the booklet away didn't you Chris!!! As Matt said, you have to put your bank card in, press the identify button, enter your pin number and it will give you an 8 digit code which you use to access online banking at http://www.ibank.barclays.co.uk Alternatively, give me your card, account details and PIN and I'll do it for you (wink wink) Quote Link to comment Share on other sites More sharing options...
Chris Wilson Posted February 28, 2008 Author Share Posted February 28, 2008 No, no, I understand how to use it, I wanted to know how a random number is "known" at the other end to be "me". The way it works as an identifier, IYSWIM? Quote Link to comment Share on other sites More sharing options...
ellis Posted February 28, 2008 Share Posted February 28, 2008 Some form of algorithm - don't ask me how or what though! Quote Link to comment Share on other sites More sharing options...
Sheefa Posted February 28, 2008 Share Posted February 28, 2008 Well if anybody knew that then the hackers would be jumping with joy! Quote Link to comment Share on other sites More sharing options...
Chris Wilson Posted February 28, 2008 Author Share Posted February 28, 2008 I agree it's a total PITA and something I need to carry if banking from a PC away from home. the old way with 2 codes was far more convenient, but possibly less secure, I don't know (yet...) Quote Link to comment Share on other sites More sharing options...
Chris Wilson Posted February 28, 2008 Author Share Posted February 28, 2008 Someone must know the basics behind it though. I once understood how PGP worked, but I have forgotten, is it something like that? Quote Link to comment Share on other sites More sharing options...
RobSheffield Posted February 28, 2008 Share Posted February 28, 2008 How random i was thinking about it this morning! I thought it must be some sort of algorithm but i dont even have one so i dont know, i just remember the ones they used in some banks iv worked for to log in, used to have like a pocket calculator to type in a code and it brought out a new one each time Quote Link to comment Share on other sites More sharing options...
razza Posted February 28, 2008 Share Posted February 28, 2008 I know where you're coming from, it's good for security but is a PITA, and it was something I was wondering this morning as well. I wonder if it's similar to the code generators you get for logging into a pc network whilst being away from the site where it's at? Don't know really, bugs me though:think: Quote Link to comment Share on other sites More sharing options...
Pete Posted February 28, 2008 Share Posted February 28, 2008 Similar to RSA SecurID I guess - http://en.wikipedia.org/wiki/SecurID How geeky is this though: http://www.hackaday.com/2007/11/03/sms-pin-sentry-reader/ Quote Link to comment Share on other sites More sharing options...
Matt H Posted February 28, 2008 Share Posted February 28, 2008 (Having a guess) well, you have to input a number that the banks computer generates into your card reader to start with, then the card reader produces its own code, so i quess that dependant on the date, possibly even time, the card reader and the banks computer (being wired the same to produce the same codes for your individual card reader), should both produce the same codes for a specific date/ time etc. As long as you can tell the banks computer what it wants to know, i.e the other code its program has produced (which is both in the banks computer and your card reader) jobs a good'n Was thinking about this myself last night when i used it for the very first time , simple if you think about it, just two identical programs producing the same codes... (i would quess) Quote Link to comment Share on other sites More sharing options...
Chris Wilson Posted February 28, 2008 Author Share Posted February 28, 2008 That sounds a very reasonable hypothesis Matt, cheers. The time can't be tied together very tightly, I entered my PIN, generated a code, answered the front door, and went back and entered the code generated on line about 5 minutes later, and it worked fine. Quote Link to comment Share on other sites More sharing options...
Sheefa Posted February 28, 2008 Share Posted February 28, 2008 I take it ANY card reader will work? I.e if I popped over someones house and used my card in their PIN Sentry I could still use those codes to logon? Not individually bespoke then! Quote Link to comment Share on other sites More sharing options...
Matt H Posted February 28, 2008 Share Posted February 28, 2008 That sounds a very reasonable hypothesis Matt, cheers. The time can't be tied together very tightly, I entered my PIN, generated a code, answered the front door, and went back and entered the code generated on line about 5 minutes later, and it worked fine. no i wouldnt have thought so, maybe just dates then Quote Link to comment Share on other sites More sharing options...
Matt H Posted February 28, 2008 Share Posted February 28, 2008 I take it ANY card reader will work? I.e if I popped over someones house and used my card in their PIN Sentry I could still use those codes to logon? Not individually bespoke then! Good point, dont know the answer to that, that would throw a spanner in the works, but perhaps the banks computer is the bespoke part, only churning out codes relevant to your account Quote Link to comment Share on other sites More sharing options...
Pete Posted February 28, 2008 Share Posted February 28, 2008 I take it ANY card reader will work? I.e if I popped over someones house and used my card in their PIN Sentry I could still use those codes to logon? Not individually bespoke then! You can use anyones Pin sentry. We have two here and they're identical. Quote Link to comment Share on other sites More sharing options...
Sheefa Posted February 29, 2008 Share Posted February 29, 2008 Ah Thanks Pete. Quote Link to comment Share on other sites More sharing options...
Gaz Walker Posted February 29, 2008 Share Posted February 29, 2008 How geeky is this though: http://www.hackaday.com/2007/11/03/sms-pin-sentry-reader/ Very. Plus surely you'd have to leave your bank card in the machine which kinda defeats the object if your away from home? Regards, Gaz. Quote Link to comment Share on other sites More sharing options...
Thorin Posted February 29, 2008 Share Posted February 29, 2008 Similar to RSA SecurID I guess - http://en.wikipedia.org/wiki/SecurID I should imagine so too, but I haven't bothered looking into it. It's tried and tested so would make more sense for them to go down that route. Quote Link to comment Share on other sites More sharing options...
ivan Posted February 29, 2008 Share Posted February 29, 2008 Very. Plus surely you'd have to leave your bank card in the machine which kinda defeats the object if your away from home? Regards, Gaz.You can leave ANY Barclays card in the machine though as long as you put in the right last digits. EG, I have one for my own account and one for the joint account (which only her indoors ever uses). Not that I'd ever be so geeky. Quote Link to comment Share on other sites More sharing options...
Matt H Posted February 29, 2008 Share Posted February 29, 2008 You can leave ANY Barclays card in the machine though as long as you put in the right last digits. EG, I have one for my own account and one for the joint account (which only her indoors ever uses). Not that I'd ever be so geeky. Indeed, its a great idea, if you have to cards (like i do) then you are laughing, altough, if it sends you a text? who pays for the air waves?! interesting Quote Link to comment Share on other sites More sharing options...
SBDJ Posted February 29, 2008 Share Posted February 29, 2008 No, no, I understand how to use it, I wanted to know how a random number is "known" at the other end to be "me". The way it works as an identifier, IYSWIM? I suspect it works in a similar way to the RSA SecurID system - the number isn't actually random but based on an algorithm incorporating a seed number and time. On SecurID you would add a token to the system identified by it's serial number from which the system would know the seed. Should be plenty of information on this type of system available on the internet if you fancy googling it - I used to install SecurID systems 10 or so years ago. I suspect very little has changed apart from the algorithms used... EDIT: Whoops, too late - I'll read all the posts next time!! Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.