IDPrime .NET 7510 - Display Smart Card

The IDPrime .NET 7510 is made of a standard IDPrime .NET 510 smart card module embedded in an IDProve 700 Display card body. It is a unique credit card format device that combines the PKI technology of the IDPrime .NET card based on the Microsoft Base CSP and minidriver architecture and the PKCS#11 standard, with the standard OATH unconnected OTP technology. These two components of the IDPrime .NET 7510 are non connected and are independent from each other.

The main interest of the IDPrime .NET 7510 fulfils two use cases in one single badge format device:

• The user is working at the office on a PC connected to the local network. He inserts his smart card in a reader, logs on to the enterprise domain and performs other PKI based operations such as digital signature and encryption.
• The user is working externally on any kind of workstation, possibly a smart phone or a PC located in an uncontrolled environment and not equipped with a smart card reader. He authenticates to the corporate VPN successfully using an OTP number and therefore is able to access the company network. 

The IDProve 700 (ex OTP Display Card) includes:

• A flexible display
• A switch-on button.
• An embedded non rechargeable battery
•  A secure micro-controller

When the button is pressed, the device displays an OTP value, which is then typed by the user on his PC keyboard. On the remote application side, the OTP number is checked using the IDConfirm 1000 (ex SA Server). No other external connection, client software or specific PIN are required.

The OTP number is calculated according to the event-based and non connected OATH inter-industry standard and using some secret data securely stored in the device. This data is provisioned by Gemalto in batch mode (e.g. for each manufacturing lot). For more details about the OTP provisioning, please refer to the Protiva SA Solutions.