login via digital signature

[dhara]

hey...i want a login system in which all user login via digital signature...

could you please help me to do this??

Thanks..

[Temor]

What do you mean by digital signature?

[dhara]

I wants that user should login by Digital signature(DS)

Suppose anyone registers first time and submit his formation.he will also have to attach his digital signature , first time when

he submits his DS ,at that time I wants to store all his DS informaion in my server database...

It means if second time that person logins with the wrong DS he will not get the permission
to login in a website...
He will only be permitted to login with a right DS.

Now the main problem is that how can I verify this..

Thank in advance...

[jacek]

So is the signature a file he uploads ?

[Temor]

It sounds like you want to create a cookie of sorts that holds a users information and only logs him in if the information the user has matches the information in your database. Essentially a regular login script except the user won't pass in information manually, but rather store it in a file or cookie?

I'm very curious as to how you imagined the information would be passed and stored the first time around. The login bit I can help you with, the other bit you have to tell me

[dhara]

yaa..i am talking about file upload not cookie.
or we can do one thing allow user to draw signature on the screen and then check across server if it is correct or not.
but is it possible ???

[Temor]

Of course it's possible. You just need to figure out how you want to pass the information. After that it's pretty much like any other login script.

[jacek]

The simplest method would be to generate a random file, so just a string of random characters, when they register and let them download it.

Then for login they enter their username and upload the file which you check the contents of with the database, that would be basically like having their password in a file instead of being typed in.

The main problem is that people may want to log in from a PC that they don't have the file save on so to make it usable you would need a standard password as a backup which sort of makes the whole file thing a bit pointless.

[dhara]

Yuppie got it...

But how user can sign on the screen and verify that type of signature??...

[jacek]

Well you would have a file upload form then basically use

file_get_contents($_FILES['signature']['tmp_name']);

in place of

$_POST['password']