Be sure to look for Authen::PIN, which can help you create those PIN numbers. I wrote it for a similar purpose.
You might also consider using Random.org's services, as they are an excellent source of random numbers. Just don't use the numbers as they come. You need to do a suitable transformation to keep the PIN numbers unrelated to the real random seed.
You should try to avoid storing the PINs in a database, though. Those numbers make for a very tempting target. What I ended doing in my implementation is to store the MD5 of those PINs. That makes the database worthless for an attacker. If it gets compromised, the attacker still does not know about the real PINs. Checking for a valid PIN is easy, as you can always re-calculate the hash from the original PIN and look for it in the database.
Best regards
-lem, but some call me fokat
In reply to Re: can perl help me with secure PIN management via database?
by fokat
in thread can perl help me with secure PIN management via database?
by jcsimba
| For: | Use: | ||
| & | & | ||
| < | < | ||
| > | > | ||
| [ | [ | ||
| ] | ] |