But you do not trust the host computer (that's the point of the discussion), so you cannot trust it for actually sending this command. You could imagine a specific command sent from the computer, which tells to the keyboard: "now, key presses should be sent to the smart card, not to me". The keyboard, by itself, won't be able to guess whether you are about to type a PIN code. For your PIN entry scenario, you not only need the key presses to be sent to the smart card, but you also want the same key presses not to be sent to the operating system. When a keyboard is plugged in a machine, then the operating system on that machine is made aware of every key press and key release event, and the OS maintains the knowledge of which key is pressed at any time. The problem with what you ask for is about sharing the keyboard with the OS.
0 Comments
Leave a Reply. |