Friday, August 26, 2011

Lookout: Hackers Focusing in on Smartphones

Beware: mobile payments create an extremely attractive target for attackers.

What took years to happen in the internet / personal computer (PC) evolution is taking mere months, says Lookout Mobile Security in their 2011 report on mobile security.
Quick facts from the Lookout 2011 Mobile Security Report:
  • Both web-based and app-based threats are increasing in prevalence and sophistication.
  • Android users are two and a half times as likely to encounter malware today than 6 months ago and three out of ten Android owners are likely to encounter a web-based threat on their device each year.
  • An estimated half million to one million people were affected by Android malware in the first half of 2011; Android apps infected with malware went from 80 apps in January to over 400 apps cumulative in June 2011.
  • Attackers are deploying a variety of increasingly sophisticated techniques to take control of the phone, personal data, and money. Additionally, malware writers are using new distribution techniques, such as malvertising and upgrade attacks.
Research Methodology
The findings in this report are based on data collected and analyzed by Lookout through our Mobile Threat Network, which includes the world’s largest database of applications and aggregates detection results from mobile devices throughout the world. The Lookout Mobile Threat Network gathers application data from a variety of sources including official application markets, such as the Android Market and Apple App Store, as well as alternative markets in which apps are distributed. 

CNET: Visa vs. Google Wallet War Begins

The digital wallet wars have begun. And credit card giant Visa and search behemoth Google are likely to be among the first to face off in the market as they each try to convince consumers to ditch their real wallets for ones that store credit cards and other information on their cell phones.  Bill Gajda, global head for Visa Mobile, said he doesn't necessarily view Google as a competitor, but the similarities in the company's strategies are striking.

Read more:

Dwolla’s Proxi does near-field mobile payments, no NFC chip required

While the promise of what NFC can provide is huge, the adoption of the technology depends on far more than just consumers picking up NFC-enabled handsets. The promise requires that businesses also adopt the technology, especially when it comes to paying for things with your phone.  This is the exact problem that Dwolla is looking to solve with its new feature called Proxi. Proxi is a peer-to-peer system that can enable you to send payments to nearby users, without the need for either of you to have NFC. How’s that? Think satellites.  read more

Mobile Payment Security Apps Coming to NFC-ready Smartphones

Mobile payment security apps coming to NFC-ready smartphones

Visa, MasterCard, American Express, Discover all expected to offer apps

By Matt Hamblen
Computerworld - Four major credit card companies are working with the Isis mobile wallet venture to install mobile payment security applications on upcoming NFC-ready smartphones in the U.S.  read more

QuickVault Awarded New Patent for Securing and Controlling USB Ports and "CloudVault" Trademark

ATLANTAAug. 25, 2011 /PRNewswire/ -- Adapt IP Ventures, LLC announces that its client, QuickVault, Inc., was recently issued U.S. Patent No. 8,011,013 titled "Method for Securing and Controlling USB Ports." The U.S. Patent and Trademark Office also awarded QuickVault the trademark of "CloudVault."
QuickVault ( is a privately-held IT security company based in Cumming, GA that offers a wide-ranging set of security and backup products and intellectual property for mobile devices, computers, networks and POS systems. As announced in May, QuickVault retained Adapt IP Ventures to assist with IP management and business development.
"The addition of this patent and trademark is yet another example of QuickVault's commitment to expanding and protecting their valuable IP rights," said Grant Moss, CEO of Adapt IP Ventures and Strategic Advisor to QuickVault. "In addition to this patent, QuickVault has two other issued patents and many pending patent applications that cover additional aspects of data security and mobile payments."
This new patent enables users to control and secure data integrity by monitoring USB ports for authorized devices based on security policies and parameter files. Potential uses of this patented technology could include controlling access of devices connected to a USB port including external storage drives, printers or other mobile devices. The original patent application was filed in July 2007, but has a priority date of July 2006.
QuickVault also received approval for the "CloudVault" trademark in July. The CloudVault product is a secure online file sharing service with a unique capability to protect data on a mobile storage device when it is lost or stolen. CloudVault also allows customers to monitor and report the movement of data to and from a mobile device. This capability is particularly relevant for compliance and breach disclosure purposes.
"We believe that this trademark provides considerable value to QuickVault as the market for cloud-based storage products continues to grow," said Moss.  
Companies interested in obtaining more information about QuickVault's intellectual property are encouraged to contact Adapt IP Ventures.
About Adapt IP Ventures, LLC
Adapt IP Ventures serves as a patent broker for its clients and develops custom strategies to sell, license or value patents. for more information.
Grant Moss
Adapt IP Ventures, LLC
Phone: 770-353-0756
SOURCE Adapt IP Ventures, LLC

Universal Secure Registry Issued Key Electronic Wallet Patent

August 24, 2011 10:13 ET
Covers 3+ Factor Security for Individual and Peer-to-Peer Secure Mobile Financial Transactions
NEWTON, MA--(Marketwire - Aug 24, 2011) - Universal Secure Registry™ LLC (USR), an enablingmobile payment security technology and identity authentication company, today announced that the United States Patent and Trademark office issued the company patent US 8,001,055 B2 on Tuesday, August 16, 2011, covering key aspects of USR's proprietary technology for secure financial transactions. Reliable identity authentication is critical to mobile transactions. This new patent covers authenticating an individual's identity using three canonical identification factors (token, secret, biometric,) plus an additional biometric, a digital photo of the purchaser, sent from a remote secure server to a vendor. This 3+ FACTOR SECURITY™ system authenticates identity in a fast, convenient, and secure way. This technology also extends to multiple transaction types, including peer-to-peer, individual-to-vendor and multiple traditional credit cards. The original patent application was filed in February 2006 by Kenneth Weiss, a renowned identity authentication and computer security expert.
Patent US 8,001,055 B2 includes technology for a unique undefeatable handshake from a secure remote server to vendors, requiring that the server also be positively authenticated before any transaction occurs. This approach helps prevent computer-based fraud, exacerbated by activities such as "spoofing," which exploit the vulnerabilities of both internet- or cloud-based platforms.
"USR was developing technology for the electronic wallet six years ago, long before the current stampede of interest in mobile wallets," said Kenneth Weiss, CEO and founder, of USR. "USR not only anticipated the significance of cloud computing for both businesses and individuals, but also identified a new class of potential security exposures. The electronic handshake component of the new patent enables the technology to address these previously unaddressed security vulnerabilities."
The USR electronic wallet provides a reliable way to authenticate identity with 3+ FACTOR SECURITY™ making mobile payment transactions fast, convenient, and secure. Building on the "two-factor" security Weiss invented for the SecurID token in 1984, Weiss has now developed USR's patented 3+ FACTOR SECURITY™ system that generates, after three factors are satisfied, a time-synchronized 16 digit pseudo random number to identify the purchaser. As an additional security feature an image of the purchaser is then sent to the vendor's system or point of sale device. Only after the identity of an individual is positively established will the funds be transferred using the remote secure server as a trusted agent.
The USR electronic wallet is the only mobile transaction technology that does not allow sensitive or potentially exploitable information to be either transmitted from or stored on the mobile device. This technology is currently available to third parties including credit card companies, wireless carriers, banks, retailers and others for licensing purposes.
About Universal Secure Registry LLCUniversal Secure Registry™ LLC (USR) is an enabling-technology company that holds a series of new personal identification, authentication, and mobile phone transaction application patents invented by Kenneth Weiss. More than 100 million people worldwide rely on computer security and identity authentication systems such as SecurID tokens invented, designed, and patented by Weiss, including most Fortune 500 companies, large and small corporations, individuals, governments, and banks in more than 30 countries. USR technology provides a secure, remote universal electronic repository for personal, private, and sensitive information. This integrates the convenience of a mobile phone with the security of a protected remote server to create a secure system for transactions ranging from funds transfers to credit card purchases, and also has the added benefit of streamlining secure access to remote computers/networks, the cloud or physical facilities. The USR electronic wallet uses near field communication (NFC) and/or Bluetooth. It is the only mobile payment technology that does not transmit sensitive or exploitable information from the mobile device or store information on it. Leveraging its patented 3+ FACTOR SECURITY™system, USR's proprietary enabling identification technology designed for smart phone applications is available to third parties for licensing. USR was established in 2000 and is based in Newton, Massachusetts.
SecurID is a trademark of RSA, the Security Division of EMC.

GETI and Alliance Payment Systems Announce Partnership for Point of Sale Check Processing

SOURCE: Global eTelecom, Inc.
August 26, 2011 05:00 ET
FT. WALTON BEACH, FL--(Marketwire - Aug 26, 2011) - Global eTelecom, Inc. (GETI), an electronic check processor and gift/loyalty card provider, announced today a new partnership with Alliance Payment Systems. GETI will provide processing for point of sale (POS) check conversion and Check 21 remote deposit capture transactions. As part of this partnership, Alliance Payment Systems will provide its own funding guarantee to merchants, while utilizing GETI's transaction processing technology.
"This partnership with Alliance Payment Systems will substantially enhance payment processing options for their clients by integrating GETI solutions into the Alliance Payment Systems processing engine," said Henry Mort, Director of Sales-Check Services at GETI. "Partnering with Alliance Payment Systems offers us the opportunity to serve more businesses in their niche markets in the grocery and convenience store arena and beyond."
"We are pleased to work with GETI because this partnership will allow Alliance Payment Systems to expand our check processing solutions," said Robert Padron, Sales Manager at Alliance Payment Systems. "We now have a complete suite of payment solutions to meet the needs of our clients and their customers, whatever their needs."
About Global eTelecom, Inc. (GETI)Global eTelecom (GETI) provides proprietary electronic Check processing and Gift/Loyalty services to over 55,000 merchants nationwide. GETI's products are marketed through sales channels of banks, independent sales offices and credit card processors. Global eTelecom's value added solutions include: Electronic POS Check Conversion, Paper Guarantee, ACH Debit, Checks-By-Phone, Checks-By-Web, Check 21 rdc, mobile Tele-Debit and Gift/Loyalty Card Processing. GETI is part of Sage North America. For information, please visit
About Alliance Payment SystemsAlliance Payment Systems (APS) is a leading provider of transaction processing services. APS offers innovative and cost-effective solutions to merchants who need to accept credit cards, debit cards, and checks for the goods and services they sell. To find out more about APS, please

Disqus for ePayment News