Tcl

ScMinidriver - PIN Authentication for Smart Card or USB Token

See more ScMinidriver Examples

Demonstrates how to PIN authenticate with a connected smart card or USB token. Tcl

load ./chilkat.dll

set success 0

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

set scmd [new_CkScMinidriver]

# Reader names (smart card readers or USB tokens) can be discovered
# via List Readers or Find Smart Cards
set readerName "Alcor Micro USB Smart Card Reader 0"
set success [CkScMinidriver_AcquireContext $scmd $readerName]
if {$success == 0} then {
    puts [CkScMinidriver_lastErrorText $scmd]
    delete_CkScMinidriver $scmd
    exit
}

# If we are successful, the name of the currently inserted smart card is available:
set cardName [CkScMinidriver_cardName $scmd]
puts "Card name: $cardName"

# Perform regular PIN authentication with the smartcard.
# If authentication is successful, then the ScMinidriver session is authenticated and
# operations such as signing are permissible.

# The pin ID can be "user", "admin", or a number "3" through "7" (passed as a string).
# The possible pin ID's for a given smartcard are obtained via the GetCardProperties method.
# See Get Smart Card Properties for sample code.
# You should generally use the "user" pin ID.  You would only use the other pin ID's for very specific purposes.
set pinId "user"

# Change this to the PIN for your smart card.
set pin "0000"

set retval [CkScMinidriver_PinAuthenticate $scmd $pinId $pin]

# The return value is 0 for success.
# If the retval is greater than 0, it is the number of attempts remaining before the PIN is blocked.
# If the retval equals -1, then something else went wrong and you should consult the LastErrorText.
if {$retval < 0} then {
    puts [CkScMinidriver_lastErrorText $scmd]
    delete_CkScMinidriver $scmd
    exit
}

if {$retval > 0} then {
    puts "PIN authentcation failed, $retval attempts remaining before the PIN is blocked."
} else {
    puts "PIN authentication successful. Your session is now authenticated and you may proceed with operations such as signing."
}

# ...
# ...
# ...

# You may deauthenticate the session when finished with operations that required authentication.
set success [CkScMinidriver_PinDeauthenticate $scmd $pinId]
if {$success == 0} then {
    puts [CkScMinidriver_lastErrorText $scmd]
}

# Delete the context when finished with the card.
set success [CkScMinidriver_DeleteContext $scmd]
if {$success == 0} then {
    puts [CkScMinidriver_lastErrorText $scmd]
}


delete_CkScMinidriver $scmd