Path: utzoo!utgpu!jarvis.csri.toronto.edu!mailrus!tut.cis.ohio-state.edu!pt.cs.cmu.edu!andrew.cmu.edu!sr16+
From: sr16+@andrew.cmu.edu (Seth Benjamin Rothenberg)
Newsgroups: comp.dcom.lans
Subject: Re: Ethernet security
Message-ID: <gYyPIsO00WB4IKX54d@andrew.cmu.edu>
Date: 28 Aug 89 21:57:12 GMT
Organization: Hunt Library, Carnegie Mellon, Pittsburgh, PA
Lines: 18


The Security currently used is: Users do not have the ability
to log in.  Pocesses monitor terminals for wake-up requests, then
use lookup tables to get password, run progs. T ese processes are started
at boot time.  Users never actually log into the (TI) operating system.
If a certain number of login failures occur, our software locks out the
terminal until our department is called.  Since these are RS-232,
mostly in secure areas, we know where the user was.  This is not so
with an ethernet.

I figure a simple hashing algorithm is possible, but I guess it hasn't been
done yet.  (Assume the terminal concentrator is in a secure area).

We handle patient medical records and billing, and payroll.  That's
what the security is for.

Thanks
Seth