#PC/SC over Network on Windows

Once configured to run the CCID profile / PC/SC mode, a network-attached SpringCore device is supported by SpringCard PC/SC Bridge virtual driver and its companion application.

The driver is made of three layers:

• A virtual PC/SC driver. The driver is said to be virtual, because it is not attached to a physical device that is wire-connected to the computer’s motherboard, but rely on an underlying user-land software to communicate with the device.
• The SpringCard.SpringCore.NetBridge.dll library is the software that runs in user-land and acts as the bridge between the network-attached device and the virtual PC/SC driver,
• The SpringCard PC/SC Bridge application is a lighweight utility that controls the driver, provides configuration screens, and runs the library in the tray of the user’s desktop.

Integrators may use the library to implement their own bridging application.

#Security considerations

The TCP channel used to convey the CCID protocol is intrinsically insecure: it provides neither confidentiality nor integrity protection. It must therefore only be used on a trusted local or private network.

However, the SpringCore device can be adapted to operate at a much higher security level, by using either

• A protocol-level encryption of the CCID messages, after a mutual authentication either with a shared AES key or through an ECDH key exchange.
• TLS encryption of the underlying channel, with password protection.

Integrators requiring such a level of security should contact SpringCard’s sales team since these features are only available as part as a dedicated project.