Slashdot Mirror

For the short term, using a number that could be changed by the consumer (like a password) would go a long way towards solving the problem. Any identifier that is difficult to change is ripe for abuse once it's been revealed.

If it's flash, why can't you use it in Linux? Flash is one of the few plugins that firefox will install with it's auto-plugin thingy.

Anyway, I've never heard of disposable CC numbers, it does sound handy. I think I'll have to look into too.

And for the "why ask slashdot, when you can google it in two minutes" aswer, it looks like, American Express, and MBNA offer them, but without signing up, I don't know what kind a mechanism they use. The PCworld article says something about "Orbiscom's O-power" application, but I can't find technicle details on it. Orbiscom's clients page says that most of the bigger CC people are dabbling in this sort of tech.

Have fun.

MBNA, Citi and Discover all use the same platform, it is provided by Orbiscom. I think there are probably some other banks too, those are just the big ones I know of. Oddly enough American Express used to have a similar program and cancelled it.

I've been using the MBNA version for many years and hundreds of transaction, and have not had a single fraudulent charge since I started. If they would come up with a version that let me use it at brick & mortar stores, with real plastic, I would be ecstatic.

Sorry to reply to my own post, but the other two providers posters have mentioned, Cahoot and Discover, also use Orbiscom, along with (to quote from their website) "Discover, MBNA, Citibank, ABN-AMRO, Abbey National, Credit Lyonnais, Swedbank, Citi EU and Nippon Shinpan".

Here's a list of their clients for anyone who is interested.

Orbiscom are an Irish company that have pioneered single use credit card numbers, and provide the technology to MBNA and Citi among others. As another poster mentioned, AIB has been providing this service for a number of years now and it's invaluable (although I don't see them promoting it much any more). It works through an application that sits in your tray; you just call it up when you want to pay, enter your username/password, set a limit, and it gives you your single use number. I think they were one of the first banks to provide it; the application is called an 'O-Card' and is as much Orbiscom branded as AIB.

Apparently AMex has stopped offering the service; this article also points out the problem of using such a number to purchase travel if the original credit card is needed to pick up the tickets.

Orbiscom are an Irish company that have pioneered single use credit card numbers, and provide the technology to MBNA and Citi among others. As another poster mentioned, AIB has been providing this service for a number of years now and it's invaluable (although I don't see them promoting it much any more). It works through an application that sits in your tray; you just call it up when you want to pay, enter your username/password, set a limit, and it gives you your single use number. I think they were one of the first banks to provide it; the application is called an 'O-Card' and is as much Orbiscom branded as AIB.

Apparently AMex has stopped offering the service; this article also points out the problem of using such a number to purchase travel if the original credit card is needed to pick up the tickets.

The credit card paradigm is whats causing the problem, not securing the cc numbers!

No matter what you do, or how you do it, there is always the potential for loosing the information...either by theft, fire, fraud, etc.

The only sensible way to "charge" things are, IMHO, by changing the way credit cards work.

Before anyone mods this as off topic, consider aquiring the ability to accept a credit card that does one time transaction numbers and when you enter into a selling relationship with a customer who does not utilize this kind of credit card ... suggest it!!!

This not only ensures your customer that you care about the security of thier transactions it also serves as an opporitunity to explain that there is always a chance, even if it's a remote one, that thier current credit card numbers can be comprimised.

I do not know the answer to your original question. I personally think using the above suggestions with the system you currently are working to secure would be an option to consider.

Even if the customer does not want, or can not get a credit card that utilizes "one time transaction numbers" the fact you take the time to explain it to them should be a little reassuring to them..I know it would for me!

Here are a few more links to info on one time cc numbers:

American Express offers disposable credit card numbers for online shopping
Frequently asked questions about American Express Private Payments System
The O-Card

This service has been available in Ireland since August. It's offered as part of AIB's online banking service. The technology is provided by orbiscom. I haven't actually used it, but there is a demo available.