Chris Gourlay
Your last chance to get tickets to Top Gear Live
Out with pass codes, in with pass shapes. A new method of withdrawing money or making payments will upgrade chip and pin technology by using sudoku-style shapes to generate random numbers.
Instead of memorising a four-digit number, users will need to recall the fixed position of four squares on a grid and type in the random numbers appearing in them.
Less than two years after the introduction of chip and pin to replace magnetic strips for reading cards at a total cost of more than £1 billion, banks and retailers are considering using the grid-based system to stay ahead of fraudsters.
The problem of high-tech crime was highlighted yesterday by parliament’s all-party group on identity fraud, which reported that in 2006 170,488 cases were logged, costing more than £1.7 billion.
The committee called for an identity fraud czar to be appointed to coordinate efforts against the crime by police, businesses and the government.
Under the proposed system, when a credit or debit card is inserted in a terminal a grid of 25 squares appear on the screen with random numbers in each square.
The user then types in the numbers appearing in the squares of their chosen shape. Different numbers are generated each time for each square, so potential fraudsters would not be able simply to copy the numbers entered by other users.
Gridsure has been devised by Jonathan Craymer, 57, a journalist and website designer, and Stephen Howes, 44, a software engineer and IT director. The idea has received initial support from at least one government department and industry bodies.
Craymer worked out the idea after a friend asked whether it was possible to produce a new number for every transaction. “Like a crossword clue that bugs you, it sat in the back of my mind for weeks. In the end we cracked it in half an hour on the kitchen table,” he said.
A pilot study by University College London found that 93% of participants could remember their personal shape and the transaction process five weeks after being introduced to the system.
However, a spokesman for Apacs, the UK payments association, warned that people with poor spatial awareness might find it harder to remember. Mastercard has examined the system and is considering whether to endorse it as an upgrade to chip and pin.
Bank machines would only require a software upgrade to handle the new system. However, bigger screens would be needed to accommodate the graphic.
The system can also be used in conjunction with mobile phones by flashing up the grid whenever users make a payment. Masabi, a British mobile phone security company, is putting a system incorporating Gridsure on sale later this year.
Technical trials began last week in Cumbria.
Overseas card fraud more than doubled to £109m in the first half of this year, a rise of 48% on the year prior to the introduction of chip and pin.
Shape of the future New card payment system uses shapes as well as numbers
1 User remembers ‘pass shape’ of four squares in grid of 25
2 Each time card is inserted, random numbers appear in each square of grid
3 User authorises payment by entering numbers according to the pass shape
Explore your passion for food with the delights of Thai, Indian & Chinese cooking
In our new series, Tony Hawks takes a dry, wry look at modern life - junk mail, interminable meetings and snooty sales assistants
Read the training tips and advice that helped our London Triathletes
Read our exclusive 100 Years of Fleming and Bond interactive timeline, packed with original Times articles and reviews
The latest travel news plus the best hotels and gadgets for business travellers
Shortcuts to help you find sections and articles
2007
£30,000
2006
£14,337
2008
£39,937
Great car insurance deals online
c.£75,000
GlosFirstmeansbusiness
Gloucestershire
£32,795 - £41,545
Universitry of Southampton
Southampton
£
£32,795 - £41,545
Universitry of Southampton
Southampton
Competitive Package
Npower
West Midlands
1 & 2 Bed apartments
From £249,995
Great Investment, River Views
Great Dubai Investment Opportunities
from £89,950
low-cost ownership homes in London
Las Vegas SALE!
£POA
With Ramblers Worldwide Holidays!
£POA
List your property with two leading travel websites
£POA
Great travel insurance deals online
Contact our advertising team for advertising and sponsorship in Times Online, The Times and The Sunday Times. Globrix Property Search - search houses for sale and rooms and property to rent in the UK. Milkround Job Search - for graduate careers in the UK. Visit our classified services and find jobs, used cars, property or holidays. Use our dating service, read our births, marriages and deaths announcements, or place your advertisement.
Copyright 2008 Times Newspapers Ltd.
This service is provided on Times Newspapers' standard Terms and Conditions. Please read our Privacy Policy.To inquire about a licence to reproduce material from Times Online, The Times or The Sunday Times, click here.This website is published by a member of the News International Group. News International Limited, 1 Virginia St, London E98 1XY, is the holding company for the News International group and is registered in England No 81701. VAT number GB 243 8054 69.
There's a demo on www.gridsure.com
It's a way of creating one time pass-codes, without additional hardware, so we caould use it for ATM & chip & PIN machines, with a software upgrade.
OTP V PIN? We all know which is stronger, and this looks easy enough to use generally.
Neil, King's Lynn, Norfolk
We have a slideshow demo of how it works here:
http://www.gridsure.com/slideshow
and then you can register and try it out for yourself. (you may need to ensure that your machine has Java turned on to see the slideshow)
I'm sure you will pick up the concept very easily.
One of the key features of GrIDsure is that it delivers much higher security than a PIN but *without* making things more complicated for the user.
If you have any questions contact us via our website and we'd be happy to answer them.
Steve, Huntingdon, UK
Does anyone understand the explanation of how this is supposed to work? A bit more detail or a diagram might help. I suspect the reporter doesn't understand either.
zeno, Glasgow,
For me, this would work fine. Here in the US I have the hardest times trying to read the letters on the keys, as the code I memorized is a four-letter word rather than four numbers. Someone pointed out to me not to look for the letters on the keypad but rather to memorize the direction my finger takes to push the keys. Ha! So simple, much more so than having this old brain try to remember yet another bunch of numbers.
Mona Bee, Florida US,