FED: Secure internet stored in your pocket

AAP General News (Australia)
02-19-2008
FED: Secure internet stored in your pocket

By Darren Osborne, Technology Writer

SYDNEY, Feb 19 AAP - Australian scientists have developed a device that will allow
people to work on any computer without having to worry about whether it contains internet
nasties that could steal private information.

Known as a Trust Extension Device (TED), the device consists of software loaded onto
a portable device, such as a USB memory stick or a mobile phone.

The device could be useful for business users or travellers, who have to use public
computers in airport lounges or internet cafes, which may be infected with viruses or
trojans.

"The problem is that trust is currently tied to specific, well-known computing environments,"

CSIRO scientist Dr John Zic said.

"TED makes that trust portable, opening the way for secure transactions to be undertaken
anywhere, even in an internet cafe."

The TED contains a small operating system, a set of applications and encrypted data.

When plugged into an untrusted computer the device connects with a remote server that
the user wishes to work on, bypassing the computer's own system software.

Once the TED and the remote server prove to each other they are trustworthy, the user
can begin working with the server.

The technology could be used by banks to provide authorised customers and employees
with secure access to financial data, or conduct financial transactions over the internet.

"Wherever you go, whichever machine you run on, you and the issuer can be confident
both parties are known to each other, cannot engage in any malicious acts, and that the
transactions are trusted," Dr Zic said.

The device could also used at home on computers that may also harbour malicious software.

"Unless you're very diligent and run your virus scanner to ensure there are no trojans
or viruses present before you do your transaction, people can even snoop the information
on the wire going out," Dr Zic said.

CSIRO is currently looking to license the technology and make it commercially available.

AAP dpo/maur/de

KEYWORD: SECURITY (PIX AVAILABLE)

2008 AAP Information Services Pty Limited (AAP) or its Licensors.