Feeds

SanDisk to secure online sales with USB Flash drives

Crypto on your keychain

Top three mobile application threats

SanDisk will next year bring secure computing to its USB Flash drives in a bid to persuade online banks, auction houses and retailers to use them to minimise unauthorised and fraudulent transactions.

The technology is called TrustedSignins and essentially embeds a "high performance" encryption engine into the Flash drive. SanDisk's pitch to financial and retail institutions is that they will be able to provide customers with drives containing log-in software and highly-secure keys that provides a level of protection above and beyond the user's own password and log-in name.

The first time the user logs on, the website checks for the presence of a TrustedSignins device. If it finds one, it generates a one-time password (OTP) which is stored on the device's secure storage partition in an encrypted form. Later, access is granted only if the user's log-in details are verified and the OTP is too.

SanDisk said the technology would be made available to banks and the like in 2007, for their evaluation. It also said it was working with security companies RSA and Verisign to allow the technology to be supported by websites that already those firms' authentication services, giving anyone who buys and uses a TrustedSignin device added peace of mind. ®

Seven Steps to Software Security

Whitepapers

Top three mobile application threats
Prevent sensitive data leakage over insecure channels or stolen mobile devices.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.
Designing a Defense for Mobile Applications
Learn about the various considerations for defending mobile applications - from the application architecture itself to the myriad testing technologies.
Build a business case: developing custom apps
Learn how to maximize the value of custom applications by accelerating and simplifying their development.