Re: Password protection

On 11-Jun-2010 17:05, Simon Coulter wrote:
>
> Looking for suggestions:
>
> I want to protect access to an application via a password. I
> want the password to automatically change daily. I want the
> application to be able to determine today's password without
> having to read it from an external source (i.e.,
> algorithmically/programmatically derived). <<SNIP>>
>
> The "automatic daily change" requirement means the password
> generation/validation is tied to the date but obviously simple
> encryption linked to the date will not be very secure nor will
> each daily password be sufficiently different from the previous
> one.
>
> <<SNIP>>

   A pseudo-random number, generated from the current date value as 
its seed value, I expect could assist to make a generated password 
sufficiently different each day.?

   Your question has me curious about what limits would be placed on 
the password characters?  I suppose any code point except possibly a 
0x00 given a program-to-program communication of the previously 
dispensed password value, or perhaps only characters easily typed at 
a known-language keyboard given some user would actually have to 
provide [by typing] a replica of the previously dispensed password?

Regards, Chuck
_______________________________________________
This is the Security Administration on the AS400 / iSeries (Security400) mailing list
To post a message email: Security400-Zwy7GipZuJhWk0Htik3J/[email protected]
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/security400
or email: Security400-request-Zwy7GipZuJhWk0Htik3J/[email protected]
Before posting, please take a moment to review the archives
at http://archive.midrange.com/security400.