picture of padlock
Egg claims its PIN system is hack-proof

Egg shares online PIN security secrets

The firm hopes to improve confidence in online banking security

Written by Angelica Mari

Online bank Egg is sharing the secrets of its internet-based PIN checking facility with the credit card industry, in an attempt to improve confidence in web banking and increase its customer base.

The introduction of chip-and-PIN two years ago prompted the bank to develop a packaged system of hardware and software, to securely transmit PINs between an encrypted storage facility and a web customer.

A message is sent down the same security pipeline that erases all the transaction history stored on the computer receiving the information seconds after the customer has viewed the passcode online.

"The system was used as a competitive advantage for a couple of years, but Egg eventually came to the conclusion that other banks ought to use it, so we didn’t mind if others used the same method,” Egg's head of procurement David Boyle told Computing.

Egg allowed vendor SafeNet to use the intellectual property rights of the system to market it to other banks late last year. But the uptake of the extra security layer has been slow and credit card operator MBNA is the only bank trialling the system, according to industry sources.

“The more people who understand that such systems can be perfectly secure, the more business we should get out of it as we are already positioned as the largest internet bank in the UK,” said Boyle.

“But there are other cards issuers around that do not use the secure pipeline and cannot guarantee that what they transmit is then erased from the terminal looking at the information on the customer end.

“It may be possible for criminals to hack in some of these systems and find out what the PIN was but in our system it is impossible to do that.”

reader comments

related articles

Bank vault

Banks more trustworthy than government over data security

Consumers lack confidence in Whitehall security 13 Mar 2008

 

HSBC boosts e-banking security

Bank hopes to strengthen security for customers using internet services 25 Apr 2008

Online banking numbers stutter

Surveys show that mobile banking is up while online banking has gone flat 16 Apr 2008

UK web users fear privacy invasion

Online shopping and dating web sites are key areas of concern, says study 28 Mar 2008

Card fraud factory raided

Devices for stealing Chip and PIN card details found by police 13 Aug 2008

US cracks 'largest ever' ID theft ring

Gang allegedly stole millions of dollars using 40 million stolen credit and debit card numbers 06 Aug 2008

Data Scooter provides missing link in Iceland's green datacentre vision

New technology aims to answer critics who claim bandwidth issues will hamper Iceland's emergence as a provider of zero carbon datacentres 16 Apr 2008

related whitepapers

today's top stories

Body Shop rolls out PCI system

Retailer hopes to benefit from improved customer data analysis 07 Oct 2008

Where to offshore (and why not here?)

Tholons, the research firm founded by well-known offshoring guru Avinash Vashistha , has just published some new research in Global Services magazine... 07 Oct 2008

The future of Ethernet

Where is Ethernet going? We look at the future of the widely-used networking technology. 07 Oct 2008

The pIT stop Q&A: How can I measure the business success of IT applications?

Ou expert panel answers readers' real-life IT questions 07 Oct 2008

National Identity Fraud Prevention Week

Every Monday seems to mark the beginning of a new awareness drive and this week’s theme has particular importance to small businesses... 06 Oct 2008

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Jobs

Related jobs

Job of the week

Job alerts

Sign up here

Find your next job

Advertisement

White papers

Search white papers

Top categories

VPN, Extranet and Intranet Solutions

WAN/ LAN Solutions

Network Security

Interoperability-Connectivity

Grid/ Utility Computing

Latest poll

Would you apply for a job that was advertised on Facebook or a similar social networking site?

Would you apply for a job that was advertised on Facebook or a similar social networking site?

The government is using Facebook to recruit IT staff - would you apply to such an ad?

Previous poll results

Latest audio and video articles

Ethernet cableVideo

The future of Ethernet

Where is Ethernet going? We look at the future of the widely-used networking technology. 07 Oct 2008

Podcast imageAudio

Computing podcast - Next-generation broadband Britain; and we report from Gartner's IT security summit

In our latest podcast, we discuss the hurdles that a national fibre-optic network must overcome, and look at the issues discussed at the recent IT security conference 02 Oct 2008

Latest in-depth articles

credit cardAnalysis

Body Shop rolls out PCI system

Retailer hopes to benefit from improved customer data analysis 07 Oct 2008

Features

How to ensure progress in programming

Best practice advice from Forrester Research 02 Oct 2008

Advertisement

Primary Navigation