Government ID, Smart Cards, Identification and Authentication

IBM develops USB token for secure transaction

Thursday, March 5, 2009

IBM’s Zurich research laboratory has released information on a USB token that can be used to ensure secure banking transaction even if a PC is infected with viruses and malware, according to a PC Advisor report.

The ZTIC (Zone Trusted Information Channel) is on display at the Cebit trade show. IBM is marketing the device to financial institutions. When plugged into a computer, the device is configured to open a secure connection with a bank’s servers. ZTIC is also a smart card reader and can accept a person’s bank card for verification. Once a PIN is verified, a transaction can be initiated through a Web browser.


The ZTIC bypasses the Web browser and connects to the bank to ensure data accuracy. Web browsers, however, are a point of weakness for online banking because of so-called man-in-the-middle attacks.

Read the full story here[end] 

Precise Biometrics has developed a new line of “smart cases” for brands of tablets and smart phones to be released in 2012 and 2013. The new smart cases have built-in card reader and fingerprint sensor enabling users to both secure their devices as well as replace various password-based security for protected online sites and applications.

read more »

The Web Authorization Protocol (OAuth) has submitted OAuth 2.0, a framework for using security identity access tokens for native mobile application and API security, to the Internet Engineering Task Force’s (IETF) Internet Engineering Steering Group (IESG), reports ZDNet.

read more »

GlobalPlatform released a white paper explaining how technology can be leveraged to enhance the flexibility and security of electronic transaction systems, such as a public transport authority or electronic identity provider.

read more »

Bedford, Mass.-based RSA announced that its SecurID can be integrated with the Microsoft Windows Active Directory Federation Services 2.0 (AD FS 2.0). This will enable organizations to provide secure user access to Office 365 cloud-based Web applications such as Microsoft Exchange technology.

read more »

The Indian start-up ArrayShield Technologies has entered the two-factor authentication market in India and is looking for value-added resellers, managed service providers and system integrators to help it become a player in this field, which it estimates to be nearly Rs 2 billion.

read more »

Watchdata Technologies has recieved Level 2 FIPS 140-2 validation certificate to Watchdata for its WatchKey USB Token under the Cryptographic Module Validation Program (CMVP) by NIST and the Communication Security Establishment of Canada.

read more »