GNOME Bugzilla – Bug 667490
Support aqbanking feature: optical chipTAN aka "Flicker code"
Last modified: 2018-06-29 23:04:40 UTC
aqbanking support the optical chip tan since version 5.0.19. This security system is quite common in Germany. A sample implementation can be found in AqFinance 0.9.121beta. For the communication with the chipcard use this system a flicker picture. Video: http://www.youtube.com/watch?v=U7PnC1S-j4I
There are also requests at https://gnucash.uservoice.com/forums/101223-feature-request/suggestions/2654889-support-for-chiptan-comfort-smarttan-optic-flicke The problem is most specs are in German while almost none coders are speaking German. I started https://wiki.gnucash.org/wiki/Flicker to collect and tranfer information to English.
*** Bug 785411 has been marked as a duplicate of this bug. ***
In Bug 785411 - Display chipTAN "flicker" code for HBCI John Ralls [reporter] [GnuCash developer] 2017-07-25 18:31:13 UTC wrote: Many banks offering HBCI require authentication using the "chipTAN" system. In this system the bank sends an challenge code for the user to enter into a code generator that uses it to generate a "Transaction Authentication Number" or TAN to validate the transaction. The challenge code can be entered by hand (already supported by GnuCash) but that is cumbersome and error-prone. The code generators can also read the number from the screen using a so-called "flicker code". Specifications are available from https://github.com/willuhn/hbci4java/blob/master/doc/tan_hhd_uc_v14.pdf An MIT-licensed javascript implementation is available at https://github.com/my-flow/fintex/blob/master/lib/tan/flicker_code.ex Proposal: Retrieve the challenge code from AQBanking and open an html tab/window containing the javascript and pass it the challenge code to display.
Reassign version to 2.4.x so that individual 2.4 versions can be retired.
(In reply to Frank H. Ellenberger from comment #3) > In Bug 785411 - Display chipTAN "flicker" code for HBCI > John Ralls [reporter] [GnuCash developer] 2017-07-25 18:31:13 UTC wrote: > > Many banks offering HBCI require authentication using the "chipTAN" system. > In this system the bank sends an challenge code for the user to enter into a > code generator that uses it to generate a "Transaction Authentication > Number" or TAN to validate the transaction. The challenge code can be > entered by hand (already supported by GnuCash) but that is cumbersome and > error-prone. The code generators can also read the number from the screen > using a so-called "flicker code". > > Specifications are available from > https://github.com/willuhn/hbci4java/blob/master/doc/tan_hhd_uc_v14.pdf > > An MIT-licensed javascript implementation is available at > https://github.com/my-flow/fintex/blob/master/lib/tan/flicker_code.ex > > Proposal: Retrieve the challenge code from AQBanking and open an html > tab/window containing the javascript and pass it the challenge code to > display. "Proposal: Retrieve the challenge code from AQBanking and open an html tab/window containing the javascript and pass it the challenge code to display." The proposal works in theory, but how can I retrieve the challenge code? I can't seem to highlight it (to copy&paste).
That's a programming proposal, not something that a user can do.
add to CC
additional info (in case you missed it): - AqBanking supports chipTAN Flickercode since version 5.0.19 (and Gwenhywfar 4.3.1, both Dec 2011, current versions 5.7.8/4.20). Extracting and decoding of the bank challenge is already done by AqBanking, all GnuCash needs is a new dialog that calls the libaqbanking code and displays the Flicker code - Javascript doing this is already available (see comment 3) - and provides a text entry receiving the TAN.
GnuCash bug tracking has moved to a new Bugzilla host. The new URL for this bug is https://bugs.gnucash.org/show_bug.cgi?id=667490. Please continue processing the bug there and please update any external references or bookmarks.