topic Securely store data, protected by passwords or other policies, Use se051. in Secure Authentication

Securely store data, protected by passwords or other policies, Use se051.

wenchao-zhang — Thu, 23 Jan 2025 05:26:15 GMT

Securely store data, protected by passwords or other policies, and delete after exceeding the number of retries. How should this be achieved?

Re: Securely store data, protected by passwords or other policies, Use se051.

Kan_Li — Fri, 07 Feb 2025 06:23:45 GMT

Hi @wenchao-zhang ,

I am sorry, but the SE051 could not automatically delete any secure object after exceeding the number of retries. Such function should be implemented on the host side, on application level, the application counts the error in total and decides whether it is time to delete the data.

Have a great day,
Kan

-------------------------------------------------------------------------------
Note:
- If this post answers your question, please click the "Mark Correct" button. Thank you!
- We are following threads for 7 weeks after the last post, later replies are ignored
Please open a new thread and refer to the closed one, if you have a related question at a later point in time.
-------------------------------------------------------------------------------

Re: Securely store data, protected by passwords or other policies, Use se051.

wenchao-zhang — Mon, 20 Oct 2025 01:55:52 GMT

If it exceeds, can it be locked? What if someone brute-force retries the chip? My requirement is very simple. I want to protect confidential data with a password. The password can be read or signed. There is a limit on the number of retries.

Re: Securely store data, protected by passwords or other policies, Use se051.

Kan_Li — Tue, 28 Oct 2025 03:25:40 GMT

Hi @wenchao-zhang ,

Yes, lock is possible with the SetLockState APDU command. but for your case, I think you may create an Auth ID as UserID/ECKey/AESKey, which support max attempts , and create the confidential data with policies that only allow the read/write operations within a session authenticated with the created Auth ID as above.

Hope that makes sense,

Have a great day,
Kan

Re: Securely store data, protected by passwords or other policies, Use se051.

jesssaid — Thu, 01 Jan 2026 02:45:53 GMT

If you have experience in developing the A1006 chip, please contact me. Thank you very much! v jesssaid