This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 2.0 License.
RFID Pass is a single executable security program designed to integrate with a Phidgets RFID Reader.
With RFID Pass you can use your RFID Tag to save and recall encrypted passwords for websites or any other windows application. It also features a Screen Lock which prevents unauthorised use of your computer while you are away from your desk and is deactivated simply by swiping your tag over the RFID reader when you get back.
It is recommended you place the program in the Startup folder of your Start Menu under “All Programs” so that it will load automatically with your computer.
The first time you run RFID Pass you will need to inform the program your Authentication Tag. This tag will be used to add and recall passwords, access settings and also lock/unlock your computer.
Note: The 10 digit code of your tag is used to encrypt your stored passwords but is never saved on your computer. It is instead passed through a one way hashing algorithm, this hash is then saved for authorisation purposes. It is recommended that you write down your Tag ID and store it in a safe location as you will need it should you ever loose your tag.
If this is your first run of the program, you will then be shown the Menu Screen. Scan your tag across the reader to unlock the display. Later on when you have saved passwords you will be able to view or delete entries here.
From now on when the program is run it will load silently in the taskbar. Double click on its taskbar icon to view the Menu Screen it and click Minimise when you are done to send it back. Right click on it to lock the computer.
When you have authenticated yourself and the screen is unlocked you can perform the following actions.
Show Passwords – Ticking this box will display your saved passwords on the screen.
Remove Entry – Removes the currently selected entry in list.
Lock Computer – Will activate Screen Lock (see below).
Change Access Tag – Changes the RFID Tag used to authenticate you to the program. This also re-encrypts all of your stored passwords to the new Tag ID.
Change Lock Settings – Changes settings associated with Screen Lock (see below).
Add New User – Allows a new Limited user account to be created. You may need to be logged in with the Master Account to use this option (see User Management).
Change User Settings – Only available if logged in with the Master Account. Allows administration of user accounts set up in the program.
Automatically Submit Username and Password – If checked, the program will finish inputting your username and password by pressing the Enter key to submit the data.
Minimise – Send program to the Taskbar. The next time the Menu Screen is displayed you will need to re-authenticate yourself to it.
Exit – Quits the program.
Manual Authentication – Should you ever loose your Authentication Tag then as long as you have previously made a note of your Tag ID, you can enter it manually by clicking “Manual Authentication”
Saving and Recalling of Passwords
RFID Pass remembers usernames and passwords for specific windows. Hence it can be used on web pages or any other application with a unique title. When you are on a page you wish to store the password for, scan your Authentication Tag and the following window will display.
Enter your username and password (if you only have just a username or just a password, enter it in the password box and leave username blank). You can un-check "Mask Password" to view what you have entered for your password. When you are done click OK to save the details.
All password data is encrypted using the 10 digit ID on your tag, this Tag ID is never saved on your computer.
You can press Cancel to dismiss the screen or “Never Save Password For This Window” which will make the program ignore any future tag scans while the window is active. If you choose Never Save and later change your mind then you can remove the window's entry from the list on the Menu Screen.
To recall saved details into a window, place the cursor in the username box and scan your Authentication Tag. Your username will automatically be entered into the box followed by a virtual Tab key to move down to the password box. Your password will then be entered and the program will send a virtual Enter key (If the option is checked on the Menu Screen) to log you in.
If you want to update an entry, go to the Menu Screen and remove the saved details for the window then go back to the window, re-scan and re-enter the details.
Lock Computer
RFID Pass also contains Screen Lock, a utility to quickly secure your computer while you are away whilst leaving all tasks running for when you get back.
Choose “Change Lock Settings” on the authenticated Menu Screen to configure how Screen Lock works.
The computer can only be unlocked by the user that locked it. The name of the user who initiated the lock is displayed in the top left corner.
Set Background Colour – Sets the colour of the screen while Screen Lock is active.
Set Text Colour – Sets the colour of the display text while Screen Lock is active.
Backup Password - If you enter a password in this box then typing it while Screen Lock is active will disable Screen Lock as if your Authentication Tag were scanned. This can be a useful backup if you need to unlock without your tag for whatever reason.
Note: If "Lock When Tag NOT Detected" is enabled, then exiting Screen Lock using the Backup Password will automatically disable it.
Note: You will not be able to use your backup password if Screen Lock is activated before you have scanned your tag for the first time after the program is run. This is because RFID Pass requires your Tag ID to decrypt the backup password.
Lock Again After X Seconds - If Screen Lock exits using the Backup Password then you can set the program to automatically re-lock after a set number of seconds. The program will then only accept a Tag Swipe to unlock.
Text to Display on Lock Screen – Two lines of custom text can be displayed in the middle of the screen while Screen Lock is active, these can be set here.
Blink LED – If checked, the LED on the RFID reader will blink every 5 seconds while Screen Lock is active.
Lock when Desktop Scanned – If checked, Screen Lock will be activated if you scan your tag with no windows selected. I.E. if you scan the tag whilst on the desktop.
Lock on Unauthorised – If checked, any tag other than a recognised Authentication Tag which is picked up by RFID Pass will automatically activate Screen Lock.
Lock Button Always Enabled – If checked, the Lock Computer option on the Menu Screen will always be available. Otherwise you must first authenticate yourself before the option becomes available. Also, by leaving this box unchecked, you will no longer be able to lock the computer by right clicking on RFID Pass's task bar icon.
Lock When Tag NOT Detected - While this box is checked,
Note: In lock mode key combinations such as Alt-Tab, Alt-F4 and Ctrl-Esc will be disabled as will the task manager and all but “Lock Computer” and “Cancel” on the Windows Security screen. Disabling the task manager and Windows Security screen is achieved by setting registry keys. If the computer crashes or is reset while in lock mode, they will not be re-enabled until RFID Pass is started again.
Note: RFID Pass can lock the screen as soon as it is run. To have the program lock the screen when it starts, simply run the program using a shortcut with the command line argument –lock added to the end of the Target line.
User Management
You can now have multiple user accounts within RFID Pass, each with their own saved password list and collection of program settings. The initial account created during the first run of the program is known as the Master Account and administrates any future Limited Accounts. Choose “Add New User” to create a new Limited Account associated with another tag.
RFID Pass will use the settings of the account whose tag was most recently swiped. When RFID Pass loads, it uses the Master Account settings by default.
When logged in with the Master Account, the “Change User Settings” option becomes available.
New User Creation - This lets you choose when a new user can be added to the system. Either only when the Master Account holder is logged in, when any account holder (Master or Limited) is logged in. Or, at any time no matter if someone is logged in or not.
Account Management - Choose a user from the list to be able to change their name and also view their account type, account status and the number of passwords saved in the account.
Enable/Disable - This allows you to temporarily disable access to any Limited account. Upon attempted login, the user will be notified that the account has been suspended.
Reset - This will clear all saved password data and reset all program settings to default for any user. Use with care.
Revision History
Update V2.0
New Feature – Multiple user support added.
New Feature – If Screen Lock is terminated using the Backup Password then you can now set it to automatically reinitiate in a set amount of time. Once reinitiated, Screen Lock will require a Tag Swipe to unlock.
Bug Fix – Miscellaneous minor bug fixes throughout version upgrade.
Update V1.3
New Feature - Manual Authentication. You can now manually enter your 10 digit Tag ID to unlock RFID Pass in the event that you loose your tag. It is therefore recommended that you take note of your Tag ID and store it in a safe place.
Update V1.2
Bug Fix - Screen Lock backup password is now re-encrypted with the rest of your passwords if you change your access tag.
Bug Fix - If "Lock When Tag NOT Detected" was enabled and "Lock on Unauthorised" was disabled then it was possible to use any tag to prevent the system auto-locking after 5 seconds. This has been resolved.
New Feature - If "Lock Button Always Enabled" is checked then you can lock you computer by right clicking on RFID Pass's task bar icon.
Update V1.1
Bug Fix - Proper object handling means the program will no longer crash if the RFID Reader is unattached unexpectedly. This prevents the user getting around Screen Lock by simply disconnecting the reader.
New Feature - A Backup Password can now be set as an alternative to scanning your Authentication Tag in order to disable Screen Lock.
New Feature - At the loss of password management, you can now set