Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Risk

2/8/2009
07:29 PM
George V. Hulme
George V. Hulme
Commentary
50%
50%

Startup May Just Digitize Your Wallet

I despise having to carry paper. You also can add credit and ATM cards, driver's licenses, insurance cards -- all of this stuff we need to carry every day to that list, too. While we worry about hackers cracking retailers' Web sites and getting our credit card or financial information -- a lost wallet or purse can easily end up being a much bigger nightmare. A startup from Bend, Ore., believes it may have a solution.

I despise having to carry paper. You also can add credit and ATM cards, driver's licenses, insurance cards -- all of this stuff we need to carry every day to that list, too. While we worry about hackers cracking retailers' Web sites and getting our credit card or financial information -- a lost wallet or purse can easily end up being a much bigger nightmare.

A startup from Bend, Ore., believes it may have a solution.About 10 years ago, after exercising at a gym in Northeast Philadelphia, I returned to my locker and I noticed that my lock was on the floor -- in several pieces. Someone had, while I was on the treadmill, taken a pair of bolt cutters to the lock on my locker and stolen my wallet.

To say that caused a headache is an understatement. Countless hours were lost replacing my driver's license, insurance cards, canceling credit cards. But that wasn't as bad as learning that someone had opened several store charge cards in my name. I was able to stop the identity theft quickly enough. Some people aren't so lucky.

After that experience, I've ever since remained interested in any technology that could replace my physical wallet. I've managed, thanks to Roboform and 1Password, to get my online usernames/passwords and payment methods under control -- so why can't the same be done for physical transactions?

With that in mind, I recently had a conversation with John Giobbi, founder and CEO of startup Proxense. Proxense is in the process of bringing to market a proximity-based communication device that aims to provide a way to securely share information and conduct payments.

Years ago, I thought maybe some type of RFID technology would be able to get the job done, but cheap RFID chips, even those that do sport of little bit of power, can't perform the necessary encryption to transmit sizable chunks of data: at least not to any level that would satisfy my need for protecting important documents, or banking and credit card information. They just don't have the power to store everything, let alone provide the encryption and layers of security necessary for relatively secure transactions.

Proxense's technology, which the company calls TruProx, consists of RF-enabled keys and sensors. Proxense's "Personal Digital Keys," or PDKs can be carried by users, perhaps even within a cell phone, and can securely hold data and manage authentication. The PDKs can be read by retailers, for instance, or even used to store any type of record.

And, Giobbi explains, the data within the PDK also can be protected by additional layers of authentication, such as a biometric or passcode.

I can see plenty of potential uses for such a device. The device could be used by retailers and restaurants to automate payments, gas stations, and coffee shops. Plus, explains Giobbi, payments and reward programs could be managed on the device -- no more coupons or reward cards to fumble with. TruProx also could be used to store and share government documents and even health records. I covered the e-health potential, in some depth, in this post.

I'm not sure if Proxense will be the vendor that will successfully provide a secure digital wallet that can be used nearly anywhere. But I do know someone will do it eventually, and Proxense looks interesting to me. I also know that if it had of been an encrypted electronic wallet -- instead of a physical wallet -- that those thieves stole so many years ago during my workout -- I wouldn't have lost so many nights sleep.

Comment  | 
Print  | 
More Insights
Comments
Threaded  |  Newest First  |  Oldest First
COVID-19: Latest Security News & Commentary
Dark Reading Staff 9/25/2020
Hacking Yourself: Marie Moe and Pacemaker Security
Gary McGraw Ph.D., Co-founder Berryville Institute of Machine Learning,  9/21/2020
Startup Aims to Map and Track All the IT and Security Things
Kelly Jackson Higgins, Executive Editor at Dark Reading,  9/22/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Special Report: Computing's New Normal
This special report examines how IT security organizations have adapted to the "new normal" of computing and what the long-term effects will be. Read it and get a unique set of perspectives on issues ranging from new threats & vulnerabilities as a result of remote working to how enterprise security strategy will be affected long term.
Flash Poll
How IT Security Organizations are Attacking the Cybersecurity Problem
How IT Security Organizations are Attacking the Cybersecurity Problem
The COVID-19 pandemic turned the world -- and enterprise computing -- on end. Here's a look at how cybersecurity teams are retrenching their defense strategies, rebuilding their teams, and selecting new technologies to stop the oncoming rise of online attacks.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-25136
PUBLISHED: 2020-09-25
An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory traversal and local file inclusion due to the fact that there is an unrestricted possibility of loading any file with an inc.php extension. Inclusion of other files (even though li...
CVE-2020-25135
PUBLISHED: 2020-09-25
An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to Cross-Site Scripting (XSS) due to the fact that it is possible to inject and store malicious JavaScript code within it. This can occur via the graph_title parameter to the graphs/ URI.
CVE-2020-25134
PUBLISHED: 2020-09-25
An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory traversal and local file inclusion due to the fact that there is an unrestricted possibility of loading any file with an inc.php extension. Inclusion of other files (even though li...
CVE-2020-25133
PUBLISHED: 2020-09-25
An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory traversal and local file inclusion due to the fact that there is an unrestricted possibility of loading any file with an inc.php extension. Inclusion of other files (even though li...
CVE-2020-25132
PUBLISHED: 2020-09-25
An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to SQL Injection due to the fact that it is possible to inject malicious SQL statements in malformed parameter types. Sending the improper variable type Array allows a bypass of core SQL Inject...