1. Pengertian Smart Card

Smart Card adalah media penyimpan data dalam satu kartu yang merupakan pengembangan dari kartu magnetik dan mempunyai ukuran serupa dengan kartu pembayaran plastik masa kini. Beberapa jenis Smart Card masa kini memiliki chip Microprocessor serta Memory didalamnya sehingga Smart Card itu sendiri mampu menjalankan berbagai aplikasi seperti memproses

data, melakukan proteksi terhadap data, serta melakukan proses otentifikasi.

2. Contact Smart Card

Contact smart card memiliki chip kecil keemasan pada kartu, saat dibaca oleh reader, chip tersebut melakukan kontak dengan konektor yang dapat membaca informasi dari chip, dan dapat menuliskan informasi kembali kedalam chip.Pada contact smart card, beberapa standard ISO telah dikeluarkan untuk mendefinisikan bentuk fisik, posisi, karakteristik, protokol, format perintah yang dikirim dan respon yang dikembalikan, ketahanan kartu, hingga fungsinya. Kartu ini sendiri tidak memiliki baterai sebagai sumber tenaga, karena energi yang dibutuhkan akan dihasilkan oleh card reader, yang digunakan sebagai media komunikasi antara smart card dan host (misalnya komputer). Aplikasi yang melakukan proses dapat Anda letakkan pada host / komputer, bersamaan dengan database atau tools yang diperlukan oleh aplikasi.

3. Cara kerja Smart Card Secara Umum

PT Teknologi adalah layanan system proses menyimpan data absensi karyawan dengan menggunakan teknologi contact smart card berbasis smart card. Kelebihannya, memudahkan proses penyimpanan data absesnsi karyawan secara strutktur, dan memudahkan proses absensi secara cepat, dan mengurangi terjadinya kesalahan pada data absensi karyawan. Cara penggunaanya cukup mudah, kartu tinggal di sentuhkan pada reader Electronic Data Capture (EDC) dan dalam 3 detik proses data absensi telah selesai dan tersimpan.


4. Cara Kerja Smart Card pada Absensi

Cara Kerja smart card dalam kehadiran (absensi) seperti pada Gambar No 3. Aplikasi POS yang terhubung dengan EDC seperti pada Gambar No 2 Cara kerja dari aplikasi POS yang terhubung dengan EDC digambarkan pada Gambar di bawah ini sebagai berikut ;

5. Implementasi Smart Card

Untuk mudahnya, anggap Anda ingin membuat sebuah aplikasi absensi karyawan dengan menggunakan smart card, tentu saja Anda dapat membuat aplikasi yang tidak menggunakan media kartu, kartu hanyalah kemasan untuk tag atau chipnya.Tetapi untuk mudahnya kita akan berasumsi menggunakan kartu sebagai kemasannya.Untuk itu, setiap karyawan memiliki sebuah smart card agar dapat melakukan absensi. Sebuah card reader yang terhubung dengan sebuah komputer akan digunakan untuk membaca smart card tersebut, dan aplikasi Anda pada komputer tersebut akan melakukan proses pendataan yang diperlukan. Dari sisi hardware, Anda harus mengenal atau menentukan spesifikasinya, misalnya frekuensi yang digunakan (jika merupakan contactless atau RFID card), karakteristik dan kapasitas memory yang digunakan didalam chip, dan spesifikasi readernya. Dari sisi software, yang Anda butuhkan adalah interface yang mengirimkan output, dan diterima sebagai input pada aplikasi Anda. Interface ini dapat berupa API (Application Programming Interface), yang sering merupakan bagian dari SDK (Software Development Kit) yang disediakan oleh vendor hardware.Sedangkan “mantra” atau bahasa pemrograman yang Anda gunakan, adalah bahasa pemrograman favorit Anda, tentu saja jika Anda menggunakan SDK dari vendor, pastikan bahasa pemrograman yang Anda gunakan didukung oleh SDK tersebut. Agar aplikasi Anda dapat berkomunikasi dengan card reader dan memperoleh input darinya, aplikasi Anda harus terlebih dahulu mengenali card reader, untuk itu diperlukan proses inisiasi dengan card reader. Jika proses inisiasi telah berjalan, tugas berikut aplikasi Anda adalah menangkap data yang diberikan oleh card reader saat sebuah smart card terbaca. Jika sebuah smart card terdeteksi, Anda mungkin perlu melakukan beberapa validasi data yang diijinkan masuk dalam aplikasi. Mungkin Anda juga perlu mengambil beberapa informasi yang terdapat didalam smart card, mungkin berupa nomor induk karyawan atau informasi lainnya. Informasi disimpan didalam memory smart card berdasarkan blok-blok yang telah telah ditentukan. Jika diperlukan, aplikasi Anda dapat menuliskan kembali informasi pada lokasi blok memory tertentu pada smart card. Hingga langkah ini, beberapa perintah dasar yang harus Anda miliki berkaitan dengan hardware, adalah perintah-perintah:
1. Inisiasi card reader.
2. Validasi / Autentifikasi smart card.
3. Membaca informasi dari smart card.
4. Menulis informasi pada smart card.
Agar terdapat batas yang jelas, Anda perlu membuat suatu modul (mungkin Anda perlu memberikannya nama, misalnya modul Smart) yang mengakomodir kebutuhan hingga tahap ini. Perintah-perintah programming yang digunakan bisa jadi berbeda jika Anda menggunakan API atau SDK yang berbeda, tetapi fungsi dasarnya tetap sama. Selebihnya diluar modul Smart diatas, adalah aplikasi database yang umum, menyimpan dan memroses data, melakukan perhitungan yang diperlukan, menampilkan laporan, dan lain sebagainya.

Gambar 5 [Implementasi Smart Card]

Jika suatu saat Anda membuat aplikasi lain yang menggunakan smart card, Anda dapat menggunakan kembali (re-use) modul Smart diatas, dan berkonsentrasi pada proses bisnis di aplikasi dan database. Informasi didalam smart card, mungkin memiliki format tertentu, misalnya tertulis dalam karakter hexadecimal, untuk itu seperangkat library atau function konversi perlu Anda siapkan. ntuk mendukung keamanan, ada baiknya Anda melakukan enkripsi pada informasi penting yang ingin disimpan pada smart card. ari sebuah aplikasi sederhana, bukan tidak mungkin berkembang menjadi aplikasi yang lebih rumit seperti contoh-contoh yang telah dijelaskan diatas. Dalam hal ini, segala kemungkinan yang dapat dipikirkan untuk menjadi celah keamanan sistem harus diantisipasi dengan baik.

e-book gratis
Implementasi Smart Card pada Absensi

more

In the prvious section, you learned that networks are susceptible to hackers and unauthorized access. As a result, organizations need to control access to the resources on a network. Most distributed netwroks supports multiple users, each with different access permissions to the resources and computers on the networks the informations and assets in an organization are crucial and keeping them safe constitues network security. The security model of a network should ensure

control on resources by using the following mechanisms :

• Authenctication
  

• Access Control
  

• Data encryption
  

• Auditing
  

• Intrusion detection
  

• Securing servers
  

more

Computers were intially used to simplify the task of computing, storing, and processing data. The number of computers and computer users was limited. As a result, the security of systems was not given much importance. The nature of computing has drastically changed over the past few years. With the introduction of network and the internet, there has been

an enormous increase in the number of computers users. Today, most organizations rely on computerized systems for storing data and coordinating businnes activities. In additions, a number of individual users use computers to avail different services, such as online shopping, online banking, and messaging.

Most computers connected to networks are vulnerable to attacks by viruses, worms, or unauthorized users. Individual users also face security threats, such as the theft and mususe of data and virus attacks.

What Is Security

The term security refers to the protection of system resources from intentional or accidental disclosure, destruction, or modification. The resources are infrastructure, hardware, software applications, files/directories, the data stored in the database, and the data in trainst. Securing resources involves implementing resource-usage policies to ensure that the resources are used per the organizational norms, unauthorized users are unable to misuse the resources, and authorized users are not denied access to the resources of the organizations.

To understand the need for security, consider the scenario of an organization that is using the IT setup. This organization is in the business of developing computer games and allows customer to download the games from its web site, which is hosted on the Microsoft Internet Information Server (IIS) Web server. In case a virus infects the files on the web server, the other IT resources of the organization also become vulanerable to the virus attack. The virus can also infect the PCs of all users donwloading games from this Web site. To prevent this type of virus attack, it is important to implement security on the Web server. In addition, PC users must implemetn security on the web server. In addition, PC users must does not infect their computer systems.

more

A Web server is a process running on the operating system, which enables users to access Web pages by using a browser. When a user requests a browser for files, text, and images, the browser sends the request over the Internet to remote computers. The web server software that runs on the remote computers sends the requested data back to the browser.

Example of web server software applications are: National Center for Supercomputing Applications (NCSA), Apache, IIS, Netscape Enterprise Server, Novell Web Server, and others.

Intorducing Internet Information Server

Internet Information Server (IIS) is a web Server from Microsoft Inc., which provides a highly realible, manageable, and scalable Web application infrastructure. This Web Server is a group of Web services. IIS help host web sites and make applications available without increasing system administration costs.

IIS provides many Web services, which are :

• WWW service : The WWW service enable users to establish multiple Web sites on a single Web server. The integration of the WWW service with IIS provides a high level of security, better performance, and standards-based publishing protocols.
  

• File Transfer Protocol (FTP) Service : The FTP service enables users to set up FTP sites for uploading and donwloading files.
  

• Simple Mail Transfer Protocol (SMTP) Service : The SMTP service enables users to send and receive e-mail messages over the Internet.
  

• Network News Transfer Protocol (NNTP) Service : The NNTP service enables users to host electronic discussion groups or newsgroups.
  

• Front Page Server Extensions : Front Page Server Extensions enable user to create and edit HTML pages for a Web site directly on a server computer.
  

• Common Gateway Interface (CGI) and Internet Server Application Programming Interface (ISAPI) : CGI and ISAP are programming interfaces that enables client/server applications over the Internet.
  

more

Internetworking services are the services in a networking environment that are accessible to users within an intranet or the Internet. These services allow you to share or use the resources located across networks. The servers that provide these services are known as

Internetworking Servers. Examples of Internetworking Servers are Mail servers, News Servers, and so on.

The following are some of the services provided by the Internetworking servers:

• File Transfer - This service enables file transfer accross machines, using the HTTP protocol .
  

• WWW - This services enables users to access the HTML pages at a published site.
  

• E-mail - This services enables users to communicate with other users. The SMTP service needs to run for managing the receipt/delivery of mail messages.
  

• Telnet - This services enables users to logon remotely to a server. THe Telnet service has to run for allowing the clients to log on to a remote server.
  

• Usenet newsgroups - This service provides users a set of bulleting boards about different subjects. The NNTP service is neede for this purpose.
  

Other Internetworking Servers

Apart from web servers, mail servers, mailing list servers, and FTP servers, many other servers are used on an internetwork. Some of the internetworking servers are :

• Domain Name Servers (DNS)
• News Servers
• Proxy and caching servers
  
• Media servers
  
• Certificate servers
  
• Catalog servers
  
• FAX servers
  
• Transaction servers
• Mirrored servers

Domain Name Servers
DNS is a service used on the Internet to translate Fully Qualified Domain Names (FQDN) to their actual IP addresses.

News Servers
A news server stores, organize, and distributes the messages posted in newsgroup.

Media Servers
A media server is a server that maintains streaming audio/video content.

Certificate Servers
Certificate are digitaly signed documents that enable you to use smart card logon, send encrypted e-mail, and sign electronic documents.

FAX Servers
A fax server allows multiple users to send faxes over the network. A fax server usually consists of three components, a computer running a Windows OS connected to any network, fax server application software, and a fax modem or an intelligent fax board.

Transaction Servers
A transaction server manages applications and databse transaction request on behalf of client computers.

Mirrored Servers
Similar to redudant disk drives, mirrored servers provide the fault-tolerance and redudancy that mission-critical information systems need.

more

The Internet provides various of services to users, which include:

• Electronic mail (e-mail)
• Search engines
• File transfer services

E-mail

E-mail was one of the first services that were used for communicating over the Internet.

Exchange of messages between two computers by telecomunication is known as e-mail. E-mail messages can contain text, graphics, or a combination of both

There are a number of Web Sites on the Internet that provide free e-mail services, such as Hotmail and Yahoo. The user is asked to register at the site and an e-mail account is created for the user. An e-mail address is also allocated to the user. Using the e-mail account you can access your e-mail from anywhere in the world.

Search Engine
A search engine is a program that allows you to search for a particular set of words specified by you, on the internet. A user interface is provide where a user can enter the word or the pharse that has to be searched. The search engine tries to locate the keyword in a large data source and returns the result of the search. Altavista, Google and Yahoo are commonly used search engines.

File Transfer Services

You can transfer file from one computer to another using the Internet. File transfer means uploading a file to a server or donwloading a file from server. File transfer services use File Transfer Protocol (FTP), which is an Internet protocol that help tp upload and donwload files. FTP is commonly used ti download files to a personal computer from other servers on the Internet.

uploading refers to sending a file from a personal computer to antoher computer on the network, and donwloading refers tp receiving a file from another computer on the network to a personal computer. Protocol is a set of rules used for communication between computers.

more

Some of the most commonly used terms with repect to the web are:

• Browser: This is a client software that allows the user to display and interact with a hypertext document.

• Web Server: This is a program that responds to request from Web browsers to retreive resources. It also used to refer to the computer that runs the server program.
  

• Web Site: This is collection of related files. Each Web site contain a home page, which is the first document that is displayed on the browser. A site might also contain additional documents and files. A site is owned and manage by an individual, company or organization/

• Home Page: This is first hypertext document (in HTML) that is displayed when the user opens a Web site. It contains links to other page or other sites.

• HTML (Hypertext Markup Language): This is the formating language used to present a Web document.

• HTTP (Hypertext Resourcer Locator): This is the protocol used on the Web to transfer hypertext documents.

• URL (Uniform Resource Locator): This is a Web addressing schema that spells out the exact location of a net resource on the Internet. Most URLs take the form:

protocol://host.domain/directory/filename

Internet Protocols

For effective communication, computers need to follow a set of rules known as protocols. Consider an example of how two people communicate with each other over the telephone. Smilarly, computers follow rules or protocols to communicate. Internet protocols are rules to communicate over the internet. Some of the protocols are:

• Transmission Control Protocol (TCP): Establishes a connection between computers before the transmission of data. It breaks the data into small packets and guarantees the transmission of data. TCP is a connection-oriented protocol.

• User Datagram Protocol (UDP): Enables fast but unreliable connectionless data transfers betweem the computers. UDP provides very few services for error recovery and is used mainly for sending the messages to multiple recipients on a network.

• Internet Protocol (IP): Routes data packets across the Internet. The process of dermining the correct path for data packets and transmitting them from one network to another is called routing. IP can route data packets because every network on the Internet has a unique network address. IP is a connectionless protocol.

• Internet Control Message Protocol (ICMP): Handles error and control messages.

• HTTP: Enables the exchange of information across the internet.

• The file Transfer Protocol(FTP) Allows the transfer of files on the Internet.

• Simpel Mail Transfer Protocol (SMTP): Enables sending e-mail messages on the Internet.

• Post Office Protocol (POP3): Enables receiving e-mail messages on the Internet.

• Internet Messages Access Protocol (IMAP) : Enables access to the e-mail messages kept on a mail server.

• Wireless Application Protocol (WAP): Provides exchange of information over wireless devices, such as mobile phone and Personal Digital Assistants.

more

Before loading a Web site, you first need to connect to the Internet.

To connect to the internet, you need the following :

• Access to phone line
• A modem
• An Internet account provided by an Internet Service Provider (ISP)
• Internet Brwoser

Modem
A modem is a device that helps the computers to communicate using phone lines. Computers can

interpret digital signals, and phone lines can interpret analog signals. Modems caonvert the outgoing digital signals from a computer to analog signals that can be transmitted via telephone cables. Modems also convert the analog signals from a phone line to digital signals for a computer. The speed of a modem at which the data transfer is done is measured in Kbps (Kilo bits per second).

Internet Service Provider

An internet service provider (ISP) is an organization that provides users access to the internet and other related services, such as hosting a Web site and providing space on the Web server to launch a Web site on the Internet. ISP provides users with usernames and passwords, which are required to connect to the Internet.

Internet Browsers

A browser is an application that helps you display and interact with the information the Internet. A browser uses HTTP to display information from the Web server. Mosaic was the first commercially used Web browser. Today, Netscape Navigation and Internet Explorer are the most popular web browsers.

more

The Internet is extensively used to search and exchange information that may be confiedential. Organizations, such as e-commerce service providers, require a mechanism to ensure that the data transferred is available only to authorized users.

E-Mail Security

E-Mails are the key to exchange information on the Internet. Therefore, it is necessary to secure

them for authenticty and confidentiality. To mainatain e-mail messaging privacy, the security considerations are as follows:

• Delete the chace files tha pertain to your login and e-mail Web pages.
• Perform a virus scan before you download attachements.
• Delete any unwanted e-mails by emptying the Trash folder.
• Encrypt or digitally sign your messages by using the tools provided by security organizations, such as VerSign. These tools are used to ensure the confientiality of your e-mail messages by authenticating and authorizing users to access and read your e-mails.
• Do not choose an option that saves your user name and password on the computer

User Authentication
A secure computer system must ensure that only authentic users can access a server or an application. Authentication is the process of confirming the identity of a user.
The most common method to implement authentication is to use the user name and password pairs. The authentication types include the following:

• Anonymous access: When the authenctication mode is set to this type, no user name password is used to confirm the user identity. Any user can access any resource available on the site.
• Basic authentication: When the authentication mode is set to this type, the user name and password are used to confirm the user identity. The limitation of this method is that the data is transmitted in plain text format across the internet. As result, anyone who happens to intercept the data will be able to read it.
• Secure authentication: When the authentication mode is set to this type, a user name and password are required to confirm the user identity. In addition, the data is transmitted in an encrypted format si that anyone whoe interpets the data should not be able to read it.
• Digital certificates: Digital certificates are electronically signed documents used to establush the identity of the user accessing a resource.

Digital Certificates
A digital certificates is a way to establish your identity on the Internet. You require a digital certificate for financial transactions or the transfer of confiential Information on the Internet. A certification authority, such as VerSign and Thawte, issues a digital cerificate. It is issued for a specific period after which the certificate expires. The following figure displays a sample digital certificate for the Yahoo! Web site:

Encryption
Encryption provides integrity and privacy of information for the data that is exchanged on networks. For example, intelligence bureaus make use of coded signals to communicate with each other. Only authrized users can decipher these codes. Similary, you can encode the data transmitted through a computer using encryption.

An encryption system is a set of rules or operations that are applied to the message to convert plain text into ciphertext (encrypted form of messages). Decryption is the process of converting chipertext into plain text by using a key. This key is a string of digits used to encrypt or decrypt the data.

more

The Intranet, like the Internet, is used to share and access information. However, unlike the Internet, the sharing and accessing of information on an intranet is limited to a private network. You can consider the intranet as the Internet within an organization. The intranet is more secure

as compared to the Internet because the information is shared within an organization. The internal network of a commercial bank is an example of an internet. All the computers in a bank are interconnected. This enables real-time sharing and updating of information, such as account balance.

The Extranet is a network that allows authorized users outside an organization to access and share information. Users can include clients, business partners, and vendors taking resource to electronic transactions. An Automatic Teller machine (ATM) is an example of an extranet. ATMs allow account holders to check the status of their bank accounts and deposit and withdraw money.


Proxy Servers
Proxi servers are software programs that act as an intermediary link between the client, such as a Web browser, and the Web server that stores the information that the client requests for. Proxy servers enable sharing of the same Internet connection among multiple Clients.

FireWalls
A firewall is a security mechanism to protect the data in a networked computer from the other networks with which it interacts, such as the internet.

A firewall can be:

• Hardware-based
• Software-based

In addition, a firewall can be a combination of both the above-mentioned types. Regardless of the way in which it is implemented, a firewall prevents the computers within a privat network form being accessed directly by a public network or other external or unauthorized users. All communication takes place through the firewall, which examines all the incoming data before allowing it to enter the network, as shown in the following figure:

Picture [Implementation of Firewall in a Network]

As depicted in the preceding figure, a request to access a network resource passes through the firewall. The firewall authenticates the user who makes the request and allows or denies the reuquest.

Viruses
A virus is a destructive computer program that infects computers by replicating itself and spreading across the network. Viruses can easly hide within a computer by attaching themselves to other files or programs because they are small. Viruses normally either destory data or affect the function of the software applications on a computer.

more