Risk
2/8/2009
07:29 PM
George V. Hulme
George V. Hulme
Commentary
50%
50%

Startup May Just Digitize Your Wallet

I despise having to carry paper. You also can add credit and ATM cards, driver's licenses, insurance cards -- all of this stuff we need to carry every day to that list, too. While we worry about hackers cracking retailers' Web sites and getting our credit card or financial information -- a lost wallet or purse can easily end up being a much bigger nightmare. A startup from Bend, Ore., believes it may have a solution.

I despise having to carry paper. You also can add credit and ATM cards, driver's licenses, insurance cards -- all of this stuff we need to carry every day to that list, too. While we worry about hackers cracking retailers' Web sites and getting our credit card or financial information -- a lost wallet or purse can easily end up being a much bigger nightmare.

A startup from Bend, Ore., believes it may have a solution.About 10 years ago, after exercising at a gym in Northeast Philadelphia, I returned to my locker and I noticed that my lock was on the floor -- in several pieces. Someone had, while I was on the treadmill, taken a pair of bolt cutters to the lock on my locker and stolen my wallet.

To say that caused a headache is an understatement. Countless hours were lost replacing my driver's license, insurance cards, canceling credit cards. But that wasn't as bad as learning that someone had opened several store charge cards in my name. I was able to stop the identity theft quickly enough. Some people aren't so lucky.

After that experience, I've ever since remained interested in any technology that could replace my physical wallet. I've managed, thanks to Roboform and 1Password, to get my online usernames/passwords and payment methods under control -- so why can't the same be done for physical transactions?

With that in mind, I recently had a conversation with John Giobbi, founder and CEO of startup Proxense. Proxense is in the process of bringing to market a proximity-based communication device that aims to provide a way to securely share information and conduct payments.

Years ago, I thought maybe some type of RFID technology would be able to get the job done, but cheap RFID chips, even those that do sport of little bit of power, can't perform the necessary encryption to transmit sizable chunks of data: at least not to any level that would satisfy my need for protecting important documents, or banking and credit card information. They just don't have the power to store everything, let alone provide the encryption and layers of security necessary for relatively secure transactions.

Proxense's technology, which the company calls TruProx, consists of RF-enabled keys and sensors. Proxense's "Personal Digital Keys," or PDKs can be carried by users, perhaps even within a cell phone, and can securely hold data and manage authentication. The PDKs can be read by retailers, for instance, or even used to store any type of record.

And, Giobbi explains, the data within the PDK also can be protected by additional layers of authentication, such as a biometric or passcode.

I can see plenty of potential uses for such a device. The device could be used by retailers and restaurants to automate payments, gas stations, and coffee shops. Plus, explains Giobbi, payments and reward programs could be managed on the device -- no more coupons or reward cards to fumble with. TruProx also could be used to store and share government documents and even health records. I covered the e-health potential, in some depth, in this post.

I'm not sure if Proxense will be the vendor that will successfully provide a secure digital wallet that can be used nearly anywhere. But I do know someone will do it eventually, and Proxense looks interesting to me. I also know that if it had of been an encrypted electronic wallet -- instead of a physical wallet -- that those thieves stole so many years ago during my workout -- I wouldn't have lost so many nights sleep.

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: This is a secure windows pc.
Current Issue
Security Operations and IT Operations: Finding the Path to Collaboration
A wide gulf has emerged between SOC and NOC teams that's keeping both of them from assuring the confidentiality, integrity, and availability of IT systems. Here's how experts think it should be bridged.
Flash Poll
New Best Practices for Secure App Development
New Best Practices for Secure App Development
The transition from DevOps to SecDevOps is combining with the move toward cloud computing to create new challenges - and new opportunities - for the information security team. Download this report, to learn about the new best practices for secure application development.
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2017-0290
Published: 2017-05-09
NScript in mpengine in Microsoft Malware Protection Engine with Engine Version before 1.1.13704.0, as used in Windows Defender and other products, allows remote attackers to execute arbitrary code or cause a denial of service (type confusion and application crash) via crafted JavaScript code within ...

CVE-2016-10369
Published: 2017-05-08
unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (preventing terminal launch), or possibly have other impact (bypassing terminal access control).

CVE-2016-8202
Published: 2017-05-08
A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) releases earlier than v7.4.1d and v8.0.1b could allow an authenticated attacker to elevate the privileges of user accounts accessing the system via command line interface. With affected version...

CVE-2016-8209
Published: 2017-05-08
Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including 06.1.00, when the Management Module is continuously scanned on port 22, may allow attackers to cause a denial of service (crash and reload) of the management module.

CVE-2017-0890
Published: 2017-05-08
Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS vulnerability in the search module. To be exploitable a user has to write or paste malicious content into the search dialogue.

Dark Reading Radio
Archived Dark Reading Radio
In past years, security researchers have discovered ways to hack cars, medical devices, automated teller machines, and many other targets. Dark Reading Executive Editor Kelly Jackson Higgins hosts researcher Samy Kamkar and Levi Gundert, vice president of threat intelligence at Recorded Future, to discuss some of 2016's most unusual and creative hacks by white hats, and what these new vulnerabilities might mean for the coming year.