New Credit Card Includes Display and Keypad 118
First time accepted submitter pev writes "A new credit card released in Singapore includes a screen and keyboard in order to generate one-time passwords for your online banking. From the article: 'The card has touch-sensitive buttons and the ability to create a "one-time password" - doing away with the need for a separate device sometimes needed to log in to online banking. Future versions of the card could display added information such as the remaining balance.' Lets hope they've put more thought into the implementation than with chip and pin."
Re:What am i missing? (Score:5, Informative)
No, they're to prevent the used of the information on the card without the card itself. These basically replace the CVV on the back of the card for determining that the user actually has it in their possession.
Re:What am i missing? (Score:5, Informative)
What they did here is integrate a secure terminal like this one [bayimg.com] directly on the card.
These terminals are used for online banking. Every time you log in, you receive a different challenge. You then insert the card into the terminal and enter both the pin and the challenge and get the response back. Then you enter the response in the browser.
The goal of the system is to provide two-factors authentication. You need both something you have (the card) and something you know (the PIN).
The reason you need a secure terminal is that typing the PIN directly on the computer would allow a keylogger to steal it.
Overall it is a pretty solid system.
Re:similar to Sweden, where all banking is electro (Score:5, Informative)
Yes, we have the same thing here in the UK.
it's called CAP, Chip Authentication Programme [wikipedia.org]. I was the designer of the system that used by a big UK bank. It requires a self powered sleeve reader (that looks alike a calulator) and it's an open standard so that all EMV cards can use any branded reader device (they don't tell you that). Some of the readers have a "MENU" button and you can read off the transaction counter etc on your card. A handy way to tell if someone close has been using the card while you're not looking. if you do muck around with your card, be careful. I changed my PIN to be 6 digits on some test gear and ended up having to get a new bank card because the UK ATM network is hard coded to 4 digits. EMV cards support 6 digits.
SmartDisplayer (Score:3, Informative)
Basically we have "news" of a product by SmartDisplayer [smartdisplayer.com.tw], that they have been producing for the last 7 years, already implemented by some 30 banks, used by Visa in some markets, which I have been using with the in-house TOATH authentication systems for the last four years. So where's the news? Slow news day?