UBB Private Forum Security Mod-Enhancement - 04/26/2002 7:12 PM
I am not sure if this is the right place to post/ask this/these questions, but I'll ask anyways!
I am "attempting" to create a very secure UBB private forum.
My "goal" is to require a "key disk" be present in the users computer before he/she can gain access to the private forum.
Here's what I want to do.
When the "potential" user clicks on the private forum and gets the log in page (USER NAME, PASSWORD, FORUM PASSWORD), I want a SCRIPT program (JSCRIPT, PERL, ????) to generate a random "seed" (string of numbers and or letters) that is automatically sent to the users computer.
I have a program which will then pass the seed to a program that is resident on one of the drives (floppy/CD).
That program "encrypts" the seed into a PASSWORD which is displayed on the users screen (window).
The user than enters that PASSWORD into the UBB screen where it is compared to the required password (which is computed in parallel i.e. same calculation using same seed as user's program).
If there is a match, the user is granted access to the private forum.
Every time that the user signs into the forum a new "random seed" is generated and passed to the host.
Or a "time out" cookie is generated so that he will have access for a limited period of time before having to sign in again (new seed-password cycle).
What I need advice/assistance/hire some one in modifying UBB to have log in screen generate and pass the seed to the user's computer, calculate password on server (UBB side) from seed, and then compare passwords and grant/deny access. And possibly generate short lived cookie.
Anyone who would like to discuss this project (offer their services) can contact me.
Please forgive me for posting on more than one forum.
I am "attempting" to create a very secure UBB private forum.
My "goal" is to require a "key disk" be present in the users computer before he/she can gain access to the private forum.
Here's what I want to do.
When the "potential" user clicks on the private forum and gets the log in page (USER NAME, PASSWORD, FORUM PASSWORD), I want a SCRIPT program (JSCRIPT, PERL, ????) to generate a random "seed" (string of numbers and or letters) that is automatically sent to the users computer.
I have a program which will then pass the seed to a program that is resident on one of the drives (floppy/CD).
That program "encrypts" the seed into a PASSWORD which is displayed on the users screen (window).
The user than enters that PASSWORD into the UBB screen where it is compared to the required password (which is computed in parallel i.e. same calculation using same seed as user's program).
If there is a match, the user is granted access to the private forum.
Every time that the user signs into the forum a new "random seed" is generated and passed to the host.
Or a "time out" cookie is generated so that he will have access for a limited period of time before having to sign in again (new seed-password cycle).
What I need advice/assistance/hire some one in modifying UBB to have log in screen generate and pass the seed to the user's computer, calculate password on server (UBB side) from seed, and then compare passwords and grant/deny access. And possibly generate short lived cookie.
Anyone who would like to discuss this project (offer their services) can contact me.
Please forgive me for posting on more than one forum.