Chris Gourlay
Enter our Snapshots of Summer photography competition
Out with pass codes, in with pass shapes. A new method of withdrawing money or making payments will upgrade chip and pin technology by using sudoku-style shapes to generate random numbers.
Instead of memorising a four-digit number, users will need to recall the fixed position of four squares on a grid and type in the random numbers appearing in them.
Less than two years after the introduction of chip and pin to replace magnetic strips for reading cards at a total cost of more than £1 billion, banks and retailers are considering using the grid-based system to stay ahead of fraudsters.
The problem of high-tech crime was highlighted yesterday by parliament’s all-party group on identity fraud, which reported that in 2006 170,488 cases were logged, costing more than £1.7 billion.
The committee called for an identity fraud czar to be appointed to coordinate efforts against the crime by police, businesses and the government.
Under the proposed system, when a credit or debit card is inserted in a terminal a grid of 25 squares appear on the screen with random numbers in each square.
The user then types in the numbers appearing in the squares of their chosen shape. Different numbers are generated each time for each square, so potential fraudsters would not be able simply to copy the numbers entered by other users.
Gridsure has been devised by Jonathan Craymer, 57, a journalist and website designer, and Stephen Howes, 44, a software engineer and IT director. The idea has received initial support from at least one government department and industry bodies.
Craymer worked out the idea after a friend asked whether it was possible to produce a new number for every transaction. “Like a crossword clue that bugs you, it sat in the back of my mind for weeks. In the end we cracked it in half an hour on the kitchen table,” he said.
A pilot study by University College London found that 93% of participants could remember their personal shape and the transaction process five weeks after being introduced to the system.
However, a spokesman for Apacs, the UK payments association, warned that people with poor spatial awareness might find it harder to remember. Mastercard has examined the system and is considering whether to endorse it as an upgrade to chip and pin.
Bank machines would only require a software upgrade to handle the new system. However, bigger screens would be needed to accommodate the graphic.
The system can also be used in conjunction with mobile phones by flashing up the grid whenever users make a payment. Masabi, a British mobile phone security company, is putting a system incorporating Gridsure on sale later this year.
Technical trials began last week in Cumbria.
Overseas card fraud more than doubled to £109m in the first half of this year, a rise of 48% on the year prior to the introduction of chip and pin.
Shape of the future New card payment system uses shapes as well as numbers
1 User remembers ‘pass shape’ of four squares in grid of 25
2 Each time card is inserted, random numbers appear in each square of grid
3 User authorises payment by entering numbers according to the pass shape
Win a luxury weekend to Newcastle and its neighbour Gateshead, find out more here
Risk, resilience and embracing new technology
Industry sectors news at a glance. Interactive heatmap, video and podcast
Discover the collective power of smart thinking. Submit a solution and be in with a chance to win a Flip MinoHD Camcorder
The inside track on current trends in the charity, not for profit and social enterprise sectors
Everything the Business Traveller needs to know to make a better trip
Make the most of the summer and enter our fabulous photographic competition, you could win a £5000 holiday
Corsica is an island of beauty and contrast, an ideal holiday destination
Enjoy further reading from Travel to Fashion, Business to Sport, discover more
Shortcuts to help you find sections and articles
The clever way to lease a new car is with Car leasing made simple™
2009
42,945
2008
71,450
Car Insurance
Not Specified
MI6
UK-based
£60,000
The Environment Agency
Bristol
Up to £90K
Boots
Midlands
OTE £85k
Credit Protection Association
Nationwide Opportunities
Completely London
Luxury Condo's in Manhattan with NYC views
The best new homes in Wimbledon?
Nationwide
Save up to £1,000 per couple with Elite Vacations at the five-star Constance Lemuria Resort
and do the British Isles this Summer.
Save up to 60% with Oxford Hotels and Inns
Try our inspiring luxury holidays to the Indian Subcontinent and South East Asia.
Great offers available
8 fabulous Canadian cities ...you won’t find cheaper
Contact our advertising team for advertising and sponsorship in Times Online, The Times and The Sunday Times, or place your advertisement.
Times Online Services: Dating | Jobs | Property Search | Used Cars | Holidays | Births, Marriages, Deaths | Subscriptions | E-paper
News International associated websites: Globrix Property Search | Property Finder | Milkround
Copyright 2009 Times Newspapers Ltd.
This service is provided on Times Newspapers' standard Terms and Conditions. Please read our Privacy Policy.To inquire about a licence to reproduce material from Times Online, The Times or The Sunday Times, click here.This website is published by a member of the News International Group. News International Limited, 1 Virginia St, London E98 1XY, is the holding company for the News International group and is registered in England No 81701. VAT number GB 243 8054 69.
There's a demo on www.gridsure.com
It's a way of creating one time pass-codes, without additional hardware, so we caould use it for ATM & chip & PIN machines, with a software upgrade.
OTP V PIN? We all know which is stronger, and this looks easy enough to use generally.
Neil, King's Lynn, Norfolk
We have a slideshow demo of how it works here:
http://www.gridsure.com/slideshow
and then you can register and try it out for yourself. (you may need to ensure that your machine has Java turned on to see the slideshow)
I'm sure you will pick up the concept very easily.
One of the key features of GrIDsure is that it delivers much higher security than a PIN but *without* making things more complicated for the user.
If you have any questions contact us via our website and we'd be happy to answer them.
Steve, Huntingdon, UK
Does anyone understand the explanation of how this is supposed to work? A bit more detail or a diagram might help. I suspect the reporter doesn't understand either.
zeno, Glasgow,
For me, this would work fine. Here in the US I have the hardest times trying to read the letters on the keys, as the code I memorized is a four-letter word rather than four numbers. Someone pointed out to me not to look for the letters on the keypad but rather to memorize the direction my finger takes to push the keys. Ha! So simple, much more so than having this old brain try to remember yet another bunch of numbers.
Mona Bee, Florida US,