Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Risk

2/8/2009
07:29 PM
George V. Hulme
George V. Hulme
Commentary
50%
50%

Startup May Just Digitize Your Wallet

I despise having to carry paper. You also can add credit and ATM cards, driver's licenses, insurance cards -- all of this stuff we need to carry every day to that list, too. While we worry about hackers cracking retailers' Web sites and getting our credit card or financial information -- a lost wallet or purse can easily end up being a much bigger nightmare. A startup from Bend, Ore., believes it may have a solution.

I despise having to carry paper. You also can add credit and ATM cards, driver's licenses, insurance cards -- all of this stuff we need to carry every day to that list, too. While we worry about hackers cracking retailers' Web sites and getting our credit card or financial information -- a lost wallet or purse can easily end up being a much bigger nightmare.

A startup from Bend, Ore., believes it may have a solution.About 10 years ago, after exercising at a gym in Northeast Philadelphia, I returned to my locker and I noticed that my lock was on the floor -- in several pieces. Someone had, while I was on the treadmill, taken a pair of bolt cutters to the lock on my locker and stolen my wallet.

To say that caused a headache is an understatement. Countless hours were lost replacing my driver's license, insurance cards, canceling credit cards. But that wasn't as bad as learning that someone had opened several store charge cards in my name. I was able to stop the identity theft quickly enough. Some people aren't so lucky.

After that experience, I've ever since remained interested in any technology that could replace my physical wallet. I've managed, thanks to Roboform and 1Password, to get my online usernames/passwords and payment methods under control -- so why can't the same be done for physical transactions?

With that in mind, I recently had a conversation with John Giobbi, founder and CEO of startup Proxense. Proxense is in the process of bringing to market a proximity-based communication device that aims to provide a way to securely share information and conduct payments.

Years ago, I thought maybe some type of RFID technology would be able to get the job done, but cheap RFID chips, even those that do sport of little bit of power, can't perform the necessary encryption to transmit sizable chunks of data: at least not to any level that would satisfy my need for protecting important documents, or banking and credit card information. They just don't have the power to store everything, let alone provide the encryption and layers of security necessary for relatively secure transactions.

Proxense's technology, which the company calls TruProx, consists of RF-enabled keys and sensors. Proxense's "Personal Digital Keys," or PDKs can be carried by users, perhaps even within a cell phone, and can securely hold data and manage authentication. The PDKs can be read by retailers, for instance, or even used to store any type of record.

And, Giobbi explains, the data within the PDK also can be protected by additional layers of authentication, such as a biometric or passcode.

I can see plenty of potential uses for such a device. The device could be used by retailers and restaurants to automate payments, gas stations, and coffee shops. Plus, explains Giobbi, payments and reward programs could be managed on the device -- no more coupons or reward cards to fumble with. TruProx also could be used to store and share government documents and even health records. I covered the e-health potential, in some depth, in this post.

I'm not sure if Proxense will be the vendor that will successfully provide a secure digital wallet that can be used nearly anywhere. But I do know someone will do it eventually, and Proxense looks interesting to me. I also know that if it had of been an encrypted electronic wallet -- instead of a physical wallet -- that those thieves stole so many years ago during my workout -- I wouldn't have lost so many nights sleep.

 

Recommended Reading:

Comment  | 
Print  | 
More Insights
Comments
Oldest First  |  Newest First  |  Threaded View
COVID-19: Latest Security News & Commentary
Dark Reading Staff 8/10/2020
Researcher Finds New Office Macro Attacks for MacOS
Curtis Franklin Jr., Senior Editor at Dark Reading,  8/7/2020
Lock-Pickers Face an Uncertain Future Online
Seth Rosenblatt, Contributing Writer,  8/10/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
Special Report: Computing's New Normal, a Dark Reading Perspective
This special report examines how IT security organizations have adapted to the "new normal" of computing and what the long-term effects will be. Read it and get a unique set of perspectives on issues ranging from new threats & vulnerabilities as a result of remote working to how enterprise security strategy will be affected long term.
Flash Poll
The Changing Face of Threat Intelligence
The Changing Face of Threat Intelligence
This special report takes a look at how enterprises are using threat intelligence, as well as emerging best practices for integrating threat intel into security operations and incident response. Download it today!
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-13288
PUBLISHED: 2020-08-12
In GitLab before 13.0.12, 13.1.6, and 13.2.3, a stored XSS vulnerability exists in the CI/CD Jobs page
CVE-2020-13290
PUBLISHED: 2020-08-12
In GitLab before 13.0.12, 13.1.6, and 13.2.3, improper access control was used on the Applications page.
CVE-2020-13291
PUBLISHED: 2020-08-12
In GitLab before 13.2.3, project sharing could temporarily allow too permissive access.
CVE-2020-6294
PUBLISHED: 2020-08-12
Xvfb of SAP Business Objects Business Intelligence Platform, versions - 4.2, 4.3, platform on Unix does not perform any authentication checks for functionalities that require user identity.
CVE-2020-6295
PUBLISHED: 2020-08-12
Under certain conditions the SAP Adaptive Server Enterprise, version 16.0, allows an attacker to access encrypted sensitive and confidential information through publicly readable installation log files leading to a compromise of the installed Cockpit. This compromise could enable the attacker to vie...