1 Proposed PIN P rotection Protection in Banner General 8.0

Transcription

1 Proposed PIN Protection in Proposed PIN Protection in Banner General 8.0 1

2 2 Proposed PIN Protection in Banner General 8.0 ~These Enhancements are under These Enhancements are under Development and may be modified prior to release~

3 Introduction Banner PIN enhancements for Banner 8.0 are currently being developed in response to the growing demand from institutions to protect PIN information in the database NOTE: This enhancement is currently under development. Data Structures and User Interface may be adjusted further prior to release. 3

4 Agenda Overview of Requirements Proposed Enhanced Characteristics of PINs Proposed PIN Encryption Methodology Proposed PIN Reset Mechanism Proposed PIN initial notification mechanism Self Service and Internet Native Banner Changes Summary Question and Answer Session 4

5 Overview 5

6 Overview The Banner General Team is developing Self Service PIN enhancements for Banner 8.0 Requirements for the project include: Enhance the characteristics of PINs to meet industry standards for strong passwords Store PINs in the database as Cryptographic Hash Provide a PIN reset mechanism that is based on providing answers to questions specific to the individual 6

7 Proposed Enhanced Characteristics i of PINs 7

8 Proposed Enhanced Characteristics of PINs Allow minimum PIN length to be configurable by the institution Allow maximum PIN length to be configurable by the institution Allow the institution to designate if an alpha and/or numeric character is required in PIN Ability to restrict re-using PINs (can be set to 0 to turn off this functionality) 8

9 Proposed PIN Encryption Proposed PIN Encryption Terminology and Methodology 9

10 PIN Encryption Terminology Cryptographic Hash Function A hash function with certain additional security properties to make it suitable for use as a primitive in various information security applications, such as authentication and message integrity. A hash function takes a long string (or 'message') of any length as input and produces a fixed length string as output, sometimes termed a message digest or a digital fingerprint. One-Way Hash Function Takes a variable-length input string, the data, and converts it to a fixed-length (generally smaller) output string called a Hash Value Original value cannot be recreated Hash Value Serves as a unique identifier (like a fingerprint) of the input data Can be used to verify whether data has been changed or not Salt Additional text appended to a password before hashing to make the password more random making decryption even enmorediffic difficult Salted Hash The hashed value generated from the original value appended with a salt. i.e. if the password was 'ABC' and the salt was '123' we would generate the hash on ABC123' HASH_SH1 Is a Secure Hash Algorithm (SHA) which produces a 160-bit hash Oracle package DBMS_CRYPTO New for Oracle 10g 10

11 Proposed PIN Encryption Methodology PINs will be stored as a Cryptographic Hash New package GSPCRPT will handle: Procedure for Generating Salt DBMS random function will be used for generating random string Procedure for Salted Hash DBMS_CRYPTO Package SHA-1 Hashing Third Party APIs being modified to handle PIN Hashing and Salt Login Packages being modified to handle PIN Hashing PINs will be converted to Hash Value and compared to the Hash stored in the DB 11

12 Proposed PIN Reset Mechanism 12

13 PIN Reset Mechanism Institutions choose number of questions which must be answered to reset PIN Questions and Answers will have a configurable minimum length (on GUAPPRF) Answers will be salted and hashed to increase security New Encryption Package (GSPCRPT) will handle procedure for salting and hashing of answers using DBMS_CRYPTO Package If a user forgets their PIN User is required to answer questions If Answers are correctly provided, PIN reset is forced User must enter a new PIN and confirm by re-entering 13

14 Initial PIN Notification Mechanism Instead of storing PIN as clear text, PIN is stored as salted hash When PIN is initially set, it is stored as a salted hash. Since we cannot retrieve that value, when we need to deliver the value to a user, the PIN will be reset again and the reset function will deliver the unhashed value via the API to a letter generation functionality (either baseline or homegrown) Initial generation of PIN will insert a record in GURMAIL to indicate that this user has not yet received a PIN Running letter generation will cause the reset function to run again and will deliver the reset value to the.lis file to be used in letters. Two additional Letter Code fields have been added d to GUAPPR. This will allow the institution to specify which letter and/or gets sent to a user when the Admin changes the password or the User changes the password. By providing these separate fields, the institution can send a letter containing i the new PIN if the Admin has set the PIN or they can choose to send a different letter which does not contain the PIN if the PIN has been set by the user. This would alert the user that their PIN has been changed via SS to be sure it was changed by the real user. 14

15 15 Self Service and Internet Native Banner Changes

16 Self Service Changes All packages in Web Tailor/Forms currently call Third Party API for Create and Update Third party API will be modified to store PIN as Salted Hash Self-Service GOATPAD GB_THIRD_PARTY (API) P_CREATE P_UPDATE GSPCRPT (Hash Function) GOBTPAC (Table) DBMS_CRYPTO HASH_SHA 1 16

17 Self Service Changes Login Packages (twbkwbis / twbklogn) will be modified Combine password, Salt and convert to a Hashed Value Gobtpac_pin is retrieved from gobtpac as a hash h value and the two hashes are compared If comparison does not match then Login page is displayed d again for ID/Password re-entry Login Page ID/Password twbkwbis. P_ValLogin GB_THIRD_PARTY F_get_hash GOBTPAC (TABLE) Hash Compare 17

18 Self Service Changes Security Question page will be modified to allow users to choose a predetermined question from a drop down list or create their own question Number of Questions required is configurable Minimum Question and Answer length are configurable 18

19 INB Changes - GUAPPRF Configurable PIN preferences to be added: Minimum Length Maximum Length Digit Required Character Required Restrict Re-Use of Pin (when not being reset by a process or when reset value is set via inb) Configurable Question and Answer preferences to be added: Number of Questions Minimum Question Length Minimum Answer Length Allow User Defined Questions 19

20 INB Changes - GUAPPRF 20

21 INB Changes - GUAPPRF Addition of letter code fields to give institution the ability to send a different letter via hard copy and/or when the PIN is reset by the administrator or the user 21

22 INB Changes - GOATPAD/GOBTPAC Two New Fields for PIN on GOATPAD PIN is shown as ****** to user User must enter identical PIN in both fields If both PINs match, call Third Party API to add salt and hash the PIN Option to create GURMAIL record or not Create a separate tab/block for question/answer so that tab level security can be applied Answers are salted hash Answers displayed as ******** 22

23 23

24 New Data Structure - GOBQSTN New table to store list of questions Table will store Question ID Description Web Display Indicator 24

25 New Data Structure GOBANSR New table will store PIN responses for Self-Service User can either create their own questions or they can choose question from GOBQSTN Table will store PIDM ID of Question Editable Question Hashed Answer Salt 25

26 Modified Data Structures GOBTPAC New column gobtpac_salt Increase length of GOBTPAC_PINPIN GORPAUD Increase length of GORPAUD_PIN PIN GUBPPRF New columns added to GUBPPRF to set new rules for creating PINs Minimum Length Maximum Length Character Required Number Required Restrict Re-use 26

27 Summary PIN Enhancements Available in Banner 8.0 Enhanced Protection for PIN PIN Stored as Salted Hash Answers Stored as Salted Hash More Flexible Settings for Creation of PIN More Flexible Question and Answer Settings Initial PIN or reset PIN to user will be delivered via reset function and GURMAIL record 27

28 Questions & Answers 28

29 Thank You! Cyndy Bunte Rajesh Kumar Les von Holstein Please complete the online class evaluation form Course ID 1351 SunGard, the SunGard logo, Banner, Campus Pipeline, Luminis, PowerCAMPUS, Matrix, and Plus are trademarks or registered trademarks of SunGard Data Systems Inc. or its subsidiaries in the U.S. and other countries. Third-party names and marks referenced herein are trademarks or registered trademarks of their respective owners SunGard. All rights reserved. 29