search

biometricITC / cPP-CMFA

Repository for work on the CMFA PP-Module and Supporting Documents
0 stars 0 forks source link

Greg Ott Q5 #26

Closed woodbe closed 1 year ago

woodbe commented 1 year ago

How does the CMFA system know the user has successfully authenticated to the computer via PIN/Password? It must receive a notification from the computer authentication system. This must be a trusted signal on a trusted path. We need to add another input to account for this.

https://github.com/biometricITC/cPP-CMFA/blame/1626eefdedcbbe4fc09fd4bc1dd189ddfbb8ad08/MOD/MOD-CMFA.adoc#L108

woodbe commented 1 year ago

I'll add that to the On-board status block since it would fit well there instead of an entirely new block. And since that information is something determined in the SEE, it would have a trusted path to it.