3
edits
PSM/Chinese Banking: Difference between revisions
Jump to navigation
Jump to search
→Open Questions / Action Items
| Line 49: | Line 49: | ||
# What is the exacty purpose of CCB's root certificate? After installing the helper package, if we remove the root certificate from the certificate database using the Certificate Manager UI, then what specific parts of the website break? | # What is the exacty purpose of CCB's root certificate? After installing the helper package, if we remove the root certificate from the certificate database using the Certificate Manager UI, then what specific parts of the website break? | ||
# What protocols and/or APIs are being used for the security of the bank? Are they using standard SSL client authentication? Are they using a solution with an API similar to the one used in Korea? | # What protocols and/or APIs are being used for the security of the bank? Are they using standard SSL client authentication? Are they using a solution with an API similar to the one used in Korea? | ||
##They are using standard SSL client authentication | |||
# Wei mentioned that CCB uses three vendors for identity tokens. Who are these three vendors? | # Wei mentioned that CCB uses three vendors for identity tokens. Who are these three vendors? | ||
## [ | ## [watchdata]: [contact information] [http://www.watchdata.com/] | ||
## [ | ## [bdtech]: [contact information] [http://www.bdtech.com.cn/en/] | ||
## [ | ## [HuaDaZhiBao]: [contact information] [http://www.bhz.com.cn/en/] | ||
# Get somebody in Mountain View (e.g. bsmith) access to a CCB bank account and hardware identity token, so that Platform/PSM can better support Mozilla China's efforts. | # Get somebody in Mountain View (e.g. bsmith) access to a CCB bank account and hardware identity token, so that Platform/PSM can better support Mozilla China's efforts. | ||
# There are several plugins in the CCB helper package. What are these plugins and what do they do?: | # There are several plugins in the CCB helper package. What are these plugins and what do they do?: | ||
## [ | ## [npCCBEnckey.dll] [password input control instead of W3C password input] | ||
## [ | ## [npCCBInfoScan.dll] [check users' laptop enviroment, OS version, Firefox version, IE version and so on] | ||
## [ | ## [npCCBNetSignCom.dll] [signing transaction data] | ||
## [ | ## [npdmwritecert.dll] [update certificate into bdtech's smart card, provided by bdtech.] | ||
## [ | ## [npdmccbplugin.dll] [read infomation from bdtech's smart card, provided by bdtech.] | ||
## [ | ## [npHDZBCertCtrl.dll] [update certificate into HuaDaZhiBao's smart card, provided by HuaDaZhiBao.] | ||
## [npHDZBSNCtrl.dll] [read infomation from HuaDaZhiBao's smart card, provided by HuaDaZhiBao.] | |||
## [npWDImportCertCtrl.dll] [update certificate into watchdata's smart card, provided by watchdata.] | |||
## [npwdkctrl.dll] [read infomation from watchdata's smart card, provided by watchdata.] | |||
= Generalized Solution for Other Banks = | = Generalized Solution for Other Banks = | ||