Risk
2/8/2009
07:29 PM
George V. Hulme
George V. Hulme
Commentary
50%
50%

Startup May Just Digitize Your Wallet

I despise having to carry paper. You also can add credit and ATM cards, driver's licenses, insurance cards -- all of this stuff we need to carry every day to that list, too. While we worry about hackers cracking retailers' Web sites and getting our credit card or financial information -- a lost wallet or purse can easily end up being a much bigger nightmare. A startup from Bend, Ore., believes it may have a solution.

I despise having to carry paper. You also can add credit and ATM cards, driver's licenses, insurance cards -- all of this stuff we need to carry every day to that list, too. While we worry about hackers cracking retailers' Web sites and getting our credit card or financial information -- a lost wallet or purse can easily end up being a much bigger nightmare.

A startup from Bend, Ore., believes it may have a solution.About 10 years ago, after exercising at a gym in Northeast Philadelphia, I returned to my locker and I noticed that my lock was on the floor -- in several pieces. Someone had, while I was on the treadmill, taken a pair of bolt cutters to the lock on my locker and stolen my wallet.

To say that caused a headache is an understatement. Countless hours were lost replacing my driver's license, insurance cards, canceling credit cards. But that wasn't as bad as learning that someone had opened several store charge cards in my name. I was able to stop the identity theft quickly enough. Some people aren't so lucky.

After that experience, I've ever since remained interested in any technology that could replace my physical wallet. I've managed, thanks to Roboform and 1Password, to get my online usernames/passwords and payment methods under control -- so why can't the same be done for physical transactions?

With that in mind, I recently had a conversation with John Giobbi, founder and CEO of startup Proxense. Proxense is in the process of bringing to market a proximity-based communication device that aims to provide a way to securely share information and conduct payments.

Years ago, I thought maybe some type of RFID technology would be able to get the job done, but cheap RFID chips, even those that do sport of little bit of power, can't perform the necessary encryption to transmit sizable chunks of data: at least not to any level that would satisfy my need for protecting important documents, or banking and credit card information. They just don't have the power to store everything, let alone provide the encryption and layers of security necessary for relatively secure transactions.

Proxense's technology, which the company calls TruProx, consists of RF-enabled keys and sensors. Proxense's "Personal Digital Keys," or PDKs can be carried by users, perhaps even within a cell phone, and can securely hold data and manage authentication. The PDKs can be read by retailers, for instance, or even used to store any type of record.

And, Giobbi explains, the data within the PDK also can be protected by additional layers of authentication, such as a biometric or passcode.

I can see plenty of potential uses for such a device. The device could be used by retailers and restaurants to automate payments, gas stations, and coffee shops. Plus, explains Giobbi, payments and reward programs could be managed on the device -- no more coupons or reward cards to fumble with. TruProx also could be used to store and share government documents and even health records. I covered the e-health potential, in some depth, in this post.

I'm not sure if Proxense will be the vendor that will successfully provide a secure digital wallet that can be used nearly anywhere. But I do know someone will do it eventually, and Proxense looks interesting to me. I also know that if it had of been an encrypted electronic wallet -- instead of a physical wallet -- that those thieves stole so many years ago during my workout -- I wouldn't have lost so many nights sleep.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-7896
Published: 2015-03-03
Multiple cross-site scripting (XSS) vulnerabilities in HP XP P9000 Command View Advanced Edition Software Online Help, as used in HP Device Manager 6.x through 8.x before 8.1.2-00, HP XP P9000 Tiered Storage Manager 6.x through 8.x before 8.1.2-00, HP XP P9000 Replication Manager 6.x and 7.x before ...

CVE-2014-9283
Published: 2015-03-03
The BestWebSoft Captcha plugin before 4.0.7 for WordPress allows remote attackers to bypass the CAPTCHA protection mechanism and obtain administrative access via unspecified vectors.

CVE-2014-9683
Published: 2015-03-03
Off-by-one error in the ecryptfs_decode_from_filename function in fs/ecryptfs/crypto.c in the eCryptfs subsystem in the Linux kernel before 3.18.2 allows local users to cause a denial of service (buffer overflow and system crash) or possibly gain privileges via a crafted filename.

CVE-2015-0890
Published: 2015-03-03
The BestWebSoft Google Captcha (aka reCAPTCHA) plugin before 1.13 for WordPress allows remote attackers to bypass the CAPTCHA protection mechanism and obtain administrative access via unspecified vectors.

CVE-2015-2168
Published: 2015-03-03
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue in customer-controlled software. Notes: none.

Dark Reading Radio
Archived Dark Reading Radio
How can security professionals better engage with their peers, both in person and online? In this Dark Reading Radio show, we will talk to leaders at some of the security industry’s professional organizations about how security pros can get more involved – with their colleagues in the same industry, with their peers in other industries, and with the IT security community as a whole.