funsec mailing list archives

VeriSign to Offer One-Time Passwords on Bank Cards


From: "Fergie" <fergdawg () netzero net>
Date: Tue, 1 May 2007 05:46:31 GMT

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Very, very smart move.

Via Yahoo! News (AP).

[snip]

A leading provider of digital-security services wants to make disposable
passwords easier for consumers to accept by squeezing the technology into
the corner of a regular credit or ATM card.

Fran Rosch, vice president for authentication services at VeriSign Inc.,
said the one-time passwords haven't taken off in the United States partly
because consumers need to carry a small device that generates passwords on
the fly. That barrier is removed, he said, by having the technology built
into cards consumers already carry.

VeriSign was expected to announce a deal Tuesday with Innovative Card
Technologies Inc. to outfit banks and e-commerce sites with cards that work
with VeriSign's password system.

With the card, consumers logging on to an online bank account, for
instance, would type in their regular username and password, along with a
six-digit code that appears on the card's display window. That code
constantly changes, meaning the customer needs to have possession of the
card to access the account.

[snip]

More:
http://news.yahoo.com/s/ap/20070501/ap_on_hi_te/verisign_disposable_passwor
ds

- - ferg

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.1 (Build 1012)

wj8DBQFGNtQ0q1pz9mNUZTMRAvWmAJ94WweY3AA7f6Vuh/Lv/0KmANpOaQCgsI+f
/e/BICk3pMiwWWIuMzBnmbA=
=614c
-----END PGP SIGNATURE-----


--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawg(at)netzero.net
 ferg's tech blog: http://fergdawg.blogspot.com/


_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: