Pincentry

aardvaak

Can someone please explain how this works?

I know how to use it, what I want to know is how does the website know the correct code has been entered even though the pincentry is not connected to the computer.

I have put the wrong number in and the site knew it was wrong.

victor2

I believe it's some sort of formula using your card number and the current date/time. Get a valid number today and try using it tomorrow.... I haven't done that, but it would support the theory if it failed!

DazedAndConfuzed

A lot of these 2 factor authentication solutions like PINcentry can be a really complicated algorithm (possibly working with some kind of internal clock inside the device?) to work out the code on the device and on the website. Some are as simple as a counter on the handheld device and the server (or wherever) which should be in sync, you get the number on one and it checks for a match on the other.

These sorts of things are becoming increasingly popular for a lot of businesses too who have remote workers, etc and some are so complex they make my eyes roll into the back of my head when it's explained to me!