comment on this article

Secure transaction technology developed by Cambridge spin out

Cambridge University spin out Cronto has developed a security solution which protects online banking customers against 'man in the browser' attacks from Trojan malware

Cambridge University spin out Cronto has developed a security solution which it says protects online banking customers against 'man in the browser' attacks from Trojan malware.

Cronto's solution uses a visual channel to transfer data securely from the bank to the customer. The bank generates a proprietary 2d barcode containing the relevant data, which is decoded by the customer using Cronto's mobile application or a standalone hardware device. According to Cronto, the technology provides a secure 'envelope' around the data, which means that, while the Trojan can see the image being sent by the bank, it cannot change the secure data inside.

Cronto says that, in 2012, the Eurograbber Trojan transferred more than €36million from unsuspecting banking customers into other accounts. Igor Drokov, Cronto's ceo, says online banking security has to go beyond identifying who a customer is, whether via a password, the street they grew up on or the name of their pet. "To combat the level of sophistication poised by Trojan malware, the bank also needs to verify the action that the customer is trying to perform, whether it's a purchase, a transfer or a change of address."

Using the application or hardware device, the customer scans the image sent from their bank. Providing the security conditions are met, the customer will see the message. To confirm the transaction, the customer enters a six digit code generated by the app or device into their browser, which validates the transaction.

Author
Graham Pitcher

Comment on this article


This material is protected by MA Business copyright See Terms and Conditions. One-off usage is permitted but bulk copying is not. For multiple copies contact the sales team.

What you think about this article:


Add your comments

Name
 
Email
 
Comments
 

Your comments/feedback may be edited prior to publishing. Not all entries will be published.
Please view our Terms and Conditions before leaving a comment.

Related Articles

Raspberry Pi IPO

Reports suggest that Raspberry Pi is planning an IPO in the Spring that would ...

Silicon carbide R&D

The Institute of Microelectronics (IME) at the Agency for Science, Technology ...

A critical issue

With more cyber-attacks than ever on critical infrastructure, how can utilities ...

Changing the paradigm

Innovating in semiconductors is seen as being a critical component of the UK’s ...

Buck LED drivers

Diodes Incorporated has announced the AL8843Q and AL8862Q automotive-compliant ...

Always innovating

Check out this brief video promo for an all new website that explores TI ...

Over the worst?

It’s been a torrid few months for Tesla, with a series of mishaps, reality ...

Dialogue is Key

Last month TechWorks, the UK’s industry association for deep tech connected ...