Slashdot Mirror


Casio's Credit Card Watch

Takuryu writes "Casio, working with Japanese credit card company, JCB, has developed a combination credit card wristwatch. Workers at the main JCB office wear the RFID tagged watches and use them for security access at the office, as well as for paying for lunch in the cafeteria. I wonder what percentage of employees they have tagged?"

45 of 142 comments (clear)

  1. Bring on the comments by Dizzle · · Score: 5, Insightful

    We all know what's going to be said. The watch is easily stolen. Has been for years and years. That's what makes it so appealing to criminals. This isn't going to catch on and for good reason. The security on these devices sounds like nothing at all.

    --
    -Dizzle
    "I most likely AM so interested in myself."
    1. Re:Bring on the comments by lambent · · Score: 5, Insightful

      And what's the security on your regular plastic credit card? That there's a non-verifiable signature on it that most merchants never check? That sometimes, for an online sale, the merchant asks you to turn over the card and input that 3-4 number code on the back?

      If anybody ever gets physical access to your stuff, it's pretty much always game-over. Doesn't matter if it's your wallet, cc-watch, speedpass, or whatever you use.

    2. Re:Bring on the comments by icejai · · Score: 2, Insightful

      And don't forget this point:

      If you lose your watch, or if it gets stolen... chances are, the crook won't realise there's credit card information *in it*. There'll be a pretty good chance they'll think it's any other watch. Unless it says "CREDIT CARD WATCH" on the wristband...

    3. Re:Bring on the comments by AlphaPB · · Score: 5, Insightful
      The usual procedure after a theft of one's smart card is to cancel that particular card, just as one would cancel a credit card. However, since most smart cards are debit-based systems, there might not be any theft protection limit like that in regular credit cards (where the cardholder is responsible for $50, then the rest is taken care of by the company).

      Since this is a credit card watch, I suppose the credit card company would treat it as regular card. In that case, the only reason that this would be a bad idea is that it most likely won't have the cardholder's signature on it for verification purposes, making it easier for the thief to use the card. Most clerks in America don't bother to check the signature anyway, so I don't see this as much of a problem.

      The watch is easily stolen. Has been for years and years. That's what makes it so appealing to criminals.

      If you're saying that it's just easy to steal a watch that is in plain view, I'd say that it's mostly expected that people carry around wallets and cell phones, so it doesn't make a thief more likely to rob a person wearing a watch. Unless, of course, they target people wearing fancy-looking watches. In that case, the ugly plastic quartz watch in the article will have the unexpected benefit of deterring thieves.

    4. Re:Bring on the comments by Bryan+Andersen · · Score: 2, Insightful
      That's what looking over sholders is for. With enough determination anything is defeatable.

      The comment on wondering how many were tagged reminded me of the RFID tagsd we use on cattle. We know how much each steer in our feed lot eats and when they do it.

    5. Re:Bring on the comments by stupidwhiteguy · · Score: 2, Informative

      Good thing there is such a device as a passive RFID chip, where the VCC is powered via inductive coupling with the chip itself. The range can be "configured" to be quite small - thus you are safe. The scary thing is the credit card receipt copy that the merchant keep that actually contain your number and expiry date!

    6. Re:Bring on the comments by zurab · · Score: 4, Insightful
      The range can be "configured" to be quite small - thus you are safe.

      No, you are not. No matter how small the range, you can still get scanned in public places like crowded buses and other transportation as well as theaters, shopping malls, events with crowded people, or even while standing in line. The difference is that a thief does not have to pick your pocket. The thing should definitely have an on/off switch; except that that's not how most, if not all, passive RFID chips work.

      The scary thing is the credit card receipt copy that the merchant keep that actually contain your number and expiry date!

      That is why most relatively new credit card processing machines do not print the credit card number (maybe only last 4 digits) or an expiry date on the receipt. Obviously, manual processing of the credit card is not as "safe."
  2. Security?? by Drooling_Sheep · · Score: 5, Insightful

    Are the watches protected from simply scanning everyones as they walk past and collecting thousands of credit card numbers? Or someone could set up a series of stations throughout a mall that charge small innocuous looking charges to cars from "shell" corporations and do like they did in Office Space.

    1. Re:Security?? by ryan89 · · Score: 2, Insightful

      I doubt the actual credit card number is stored on the watch. I have one of those SpeedPass keychains for Mobil gas stations that has an RFID like tag in it. It doesnt store the credit card number, but a unique ID that when I pump gas, it will read the number and charge the account associated with it. I would hope these work the same way. Kind of like how the PIN number for your debit card isn't actually stored on the magnetic strip of the card.

    2. Re:Security?? by PatHMV · · Score: 2, Insightful

      It's a number which, if transmitted in the proper format, will allow access to your credit. Thus, it is a credit card number for all intents and purposes. That it's a different number than the one printed on your old fashioned card doesn't matter.

  3. This should be standard by crem_d_genes · · Score: 2, Funny

    As a retirement watch.

  4. Chicken and the Egg by Basehart · · Score: 4, Funny

    Who will the be the first to buy a watch with a watch I wonder?

    1. Re:Chicken and the Egg by DAldredge · · Score: 2, Insightful

      No, putting ones credit card number in a device that is read remotely over an unencrypted connection isn't the next logical step, it is the next STUPID step.

    2. Re:Chicken and the Egg by vxvxvxvx · · Score: 3, Informative
  5. What is so difficult about using a credit card? by PatHMV · · Score: 2, Insightful

    I mean, how hard is it to just swipe a card? Are they that insecure about their appearance that they don't want to wear security ID badges around their necks? Using RFID for security badges and charge cards seems to me like a solution in search of a problem...

  6. So Store clerks swipe your watch now? by billstewart · · Score: 2, Insightful

    And does this means they're going to steal it, or just cram it into that narrow slot in the reader?

    --

    Bill Stewart
    New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
  7. Looks sweet by gid13 · · Score: 2, Insightful

    I find it ironic that, in my opinion, the main reason this has a good chance of catching on is that it looks really good.

  8. This is very efficient by Anonymous Coward · · Score: 2, Funny

    For muggers.

    Instead of "Give me your money and your watch!" they'll be able to just say "Give me your watch!" With the time the save, they'll be able to rob 50% more people.

  9. Good Concept but.... by Shivantrill · · Score: 3, Insightful

    This is a good concept on the surface. I know I hate having to wear my goofy security badge to gain access to our offices.
    One problem I see is privacy. I have always thought that having to key in and out of work insures security but also tracks your movements. My security badge has to be really close to the reader to register, RFID tags have more range right? So what is to stop an employer from tracking your every move. I know it sounds paranoid but some companies are really strict with breaks and things.
    The other problem I see is wearability and security.
    Security because watches are easily lost, stolen, left behind... Since there is no picture on the watch to verify the person, presumably anyone can use anyone else's.
    Wearability because as a female, I own at least 3 watches to suit my moods and clothing. With everyone having the same watch, we are one step closer to uniformity. This squelches uniqueness and creativity.

    --
    Karma, We don't need no stinkin' karma!
  10. Beware by buckhead_buddy · · Score: 3, Funny

    So if your boss calls you over for a second to talk to him in the lunch room, it'll probably be because he's trying to get a free meal off of your proximity to the cashier.

    When this idea is suggested for computer password replacements I always think of my sleazy coworkers from four jobs ago who would have someone distract me near my cubicle ("Can you dig that pen out from behind the desk? It's my favorite!") while someone else uses my logged in computer.

    Grrr...

    1. Re:Beware by SacredPhish · · Score: 2, Interesting

      Totally. I woudn't want one of these watches unless I could store all my credit cards on in, plus all my network passwords, social security number and my driver's license number. Maybe you can use the watch to scan your previous order at the caf, and have it paid for and waiting for you to pick up?

  11. Higher Math by crem_d_genes · · Score: 2, Funny

    "I wonder what percentage of employees they have tagged?

    100%.

  12. Hide your money. by twitter · · Score: 3, Informative
    At first glance, this looked really dumb. Why not put the silly RFID into the ID card most corporate types are forced to wear around their necks like so many tagged cows? Sure, there's a picture of one like that on the linked article. How about people who have a sentimental attachment to their current watch? Then the brain kicked in, this is just a demo and there may be something good about RFIDs after all.

    Being able to hide your credit anywhere has an appeal. Sure, a mugger might ask for your cheap watch, but would they bother with your ink pen? Kinda cool to be able to give one your wallet without fear. Of course, in my case, the mugger will know which object has my credit. It will be the one wrapped in tin foil.

    RFIDs creep me out. Someone being able to identify me by a device in my shoes, in my car's tires, in my shirt? It's weird and the nasty part is that no one I care about will have the ability, just big dumb companies that want to milk me. Vending machines that can take my money while I walk by are more bothersome still. I have a feeling that foil liners will become very fashionable soon, but it won't really work.

    --

    Friends don't help friends install M$ junk.

  13. security by Sinful_Shirts · · Score: 2, Insightful

    Ok, I'm not an expert but if your watch is emitting your credit card information.... how can that be secure?

  14. Discovery Channel by Tokerat · · Score: 4, Funny


    ...the engineers are then released back into the wild so that scientists can study their movements. One day, it may lead to the discovery of just how Casio is surviving in the wild this day in age.

    /commercial break

    --
    CAn'T CompreHend SARcaSm?
  15. I can wait... by radd0 · · Score: 2, Funny

    I'm holding out for the JCB creditcard hand and forehead.

  16. Foil liners, little than a fasion statement! by twitter · · Score: 2
    The worry is that someone will set up a scanner in a vending machine and rob people who walk by. I'm not sure how these things will practically work, especially if everything has an RFID tag in it. A scammer can collect all the numbers it can and try them out one at a time. The legitimate vendor has the same problem. It will be creepy enough to have the billboard recognize you by the RFID in your shoes. Lining your wallet with foil might keep you from being ripped off, but I doubt it.

    I'm going to patent the RFID equivalent of "one click shopping" . A system of readers will record all items on a customer, so that a profile can be generated and saved. The customer's means of payment will also be stored in the profile so that the customer can purchase anything in my store, or at a computer monitor without any special credit card on their person. Theives and legitimate companies who use this method to vend must call me "Exalted Inventor" and pay me a portion of the proceeds. Advertisers who abuse this system, as grocery stores do now, to push brands that I never buy will be forced to bathe in honey and dance naked on fire ant mounds. Vendors dumb enough to purchase said advertising will be separated from their money and require no further punishment. They are invited to the mound dance.

    --

    Friends don't help friends install M$ junk.

  17. I can't wait... by lewko · · Score: 5, Funny

    [Waving hand at RFID reader adjacent to cash register]

    Me: You will give me french fries

    Clerk: Yes, I will give you french fries...

    --
    Do you or your partner snore? - Visit www.snoring.com.au
  18. The wristwatch has had its day... by lewko · · Score: 4, Interesting

    The article mentions one of the more popular timepieces for Japanese kids is "NTT Docomo" (their mobile phone).

    I haven't worn a watch since I last sat an exam. between my computer when I'm at my desk or PDA, phone and until recently pager when I'm not (all banned from aforesaid exam room), I always know what the time is. Indeed most of the time I don't really need to know what the time it is as my PDA will beep when I need to be somewhere. The rest of the time, who cares?

    Unless vendors can integrate existing devices into a wristwatch, I suspect its days might be numbered. Even this possibility seems unlikely as the screens and data-entry possibilities for wristwatches are somewhat limited.

    Then again... They said we'd be in the paperless office by now. I don't see the pencil on the way out.

    --
    Do you or your partner snore? - Visit www.snoring.com.au
  19. 666 by TheLoneCabbage · · Score: 4, Funny

    When I was a teenager one of my good friends was a Christian fundamentalist. (I'm NOT) His high school would suspend anyone who purchased a pager (this was just before cell phones were ubiquitous). Their reasoning wasn't that it disrupted class or was a drug dealer thing (sheesh), but that it was the mark of the Devil. You know 666. The theory was that beepers were just the first stage in a series of moves by the DEVIL HIMSELF to accustom us to being tagged, and that eventually we would all be given the mark of the devil.

    Now I'm not about to start following his bizarre religious practices (especially since they lead him to being institutionalized), but you gotta give the wing nut some credit. We all started carrying pagers, cell phones, then GPS, and now people aren't even thinking twice when they are asked to stick a radio transceiver on their person (or in it!).

    It's like cooking a frog. Stick it in while the pan is hot and he'll just jump out. But if you turn up the heat slowly he never knows it till it's too late.

    1. Re:666 by TheLoneCabbage · · Score: 2, Insightful


      ok. Let's get a few things straight.

      1) He didn't go to a public school. It was private. My school did ban it because the disrupted class. And I thought he was full of it too, until I was standing next to him one day in the mall and he got 'demerits' because he was caught outside school wearing shorts. (All the more so, he couldn't where them in school either)

      2) I don't hate religion. You can check my previous posts. I'm quite the advocate of it. I'm a practicing Orthodox Jew. Ritual, custom, belief are all good things. But when a religion teaches you to hate yourself (or others), as his did (he was/is gay) I can't condone it. There are many ways to G_d, and I do not claim an exclusive. But I'm d@mn sure after what they did to him, it was NOT the way!

  20. I can here it now! by katchins · · Score: 3, Funny

    Honey, can I borrow your watch? I need to do some shopping!

    --
    if (!sig) { printf("Signature Unavailable\n"); }
  21. Momentary RFID tags? by Anonymous Coward · · Score: 2, Interesting

    I'd like to see something like this where it was inactive by default, so that you HAD to turn it on for it to be visible to the sensors. All I'm asking for is a button, rather than constant on. I have no interest in having a little tag telling anything that asks who I am, and leaving footprints behind me.

    This kinda makes me feel ashamed to admit, but I've actually thought of whipping up a wallet or portfolio that would block/disrupt anything such as RF, active broadcast, etc. It's feeling like we're getting to the point where most of the things we carry(ID, licenses, credit cards, money) are going to have the ability to give out more information than I'm comfortable with.

    I'm sure going to modify the next briefcase I buy with some goodies. Forget just lead, foil and copper lined, it's time for some active interference.

  22. What happened by aussie_a · · Score: 3, Insightful

    to the days when not everyone had a credit card? I abhore the concept of credit cards as they encourage people to buy things they don't have the money for. For this reason I don't like taking out loans, and if I could live life without doing so I would (unfortunately if you want to own your house it is impossible for the average person to achieve this without a loan). There are two ways to spend money: 1. Save it up and then spend it 2. Borrow then spend then repay it I prefer to do the first thing myself. After all, you're eventually going to have to pay for the thing (and possibly with interest) so why not do without for a time until you can afford it. But new technology is only favouring the second payment option with credit cards getting all this new fandangled tech, but bank cards aren't getting anything. Seems strange to me.

  23. Prior art by jayratch · · Score: 4, Interesting
    I was under the impression this has been available in America for quite some time from Timex. and Exxon.

    Granted Speedpass isn't accepted everywhere by any means but gas and nowadays many McDonalds and a few supermarkets (in certain areas.)

    The standard unit is small enough to just ditch the keychain and tuck the bead in my wallet; in fact with a bit of crazy glue I'm sure I could turn anything into a credit card of sorts. Since Mobil gives them away free (no fees, just a draw to their places) the tech must be cheap as hell- little more than an inductor/antenna and a simple IC with a serial number... it's basically less circuitry than a typical disposable camera, and far less than a digital watch.

  24. Gives a new meaning ... by InternationalCow · · Score: 3, Funny

    To being watched :)

    --
    ----- One learns to itch where one can scratch.
  25. Doesn't use RFID by line.at.infinity · · Score: 4, Informative

    It uses an embedded IC chip FeliCa by Sony, according to the actual article.

  26. And I wonder if RFID readers are DDoS'able... by SharpFang · · Score: 3, Interesting

    Imagine the day when RFID tags are so common every coke bottle has one. Now cut them off and pack, say, 1000 or more int a match box. Carry them with you at all times. A reader sends a request and gets 1000 replies. 1000 not enough? Get 10.000. I wonder how many replies the reader would be able to handle simultaneously and how efficiently the chips could jam each other.

    --
    45 5F E1 04 22 CA 29 C4 93 3F 95 05 2B 79 2A B2
  27. It's a problem with processes... by Gordonjcp · · Score: 2, Interesting
    ... not technology.


    If your petrol station reads a unique ID that *isn't * your credit card number off the card, and hands it off to the bank, it's far easier to check that card 0144829 (belonging to Patrick Martin) was scanned by reader 2841 (pump 4) at retailer 22019 (Esso Canniesburn Road, G61 ???). Now, since the credit authorisation bureau know that Esso are allowed to accept your card, that's great, it works. If J Random Crook gets hold of the number he would also have to spoof the reader and store number. So, we apply a little bit of public-key encryption, and it makes it pretty much impossible.


    This is where customer profiling (yes, I know the redneck gun nut privacy freak survivalists will howl and gibber) comes in handy. You *always* get petrol from that petrol station, filling up every Friday when you get paid. So, since that particular transaction always takes place with about 40 quid's worth of petrol, at around 7am on a Friday morning, at that store, then it isn't "interesting".


    Then you can bring the (can't be arsed making it a link, find the article yourself) RFID number plates in. So, the credit authorisation system is unfazed by you filling up an 02-reg Fiat Seicento once a week. One particular week your card is used much later, about 0830, and instead of 40 quid's worth of unleaded you put about 60 quid's worth of 98-octane into an F-registered Citroen CX. Eep! That's interesting. It will let you do it just the same, but if it turns out that your card/watch/whatever had been stolen, you would be able to see any "out of character" transactions highlighted on your bill. In this case, of course, your car didn't start so you've borrowed someone else's, and returned it with the tank full 'cos you're a kind and thoughtful person.


    Now, this kind of logging would be excessive and possibly intrusive. But - if you could selectively enable what stores are allowed to log your transactions (supermarkets and petrol stations would be a good bet), as well as set "warning" flags ("Hang about, I certainly *don't* want to buy 200 quid's worth of cheap and nasty gold jewellery from Half Price Jewellers in $rough_part_of_town!") that would request additional checks before authorising the payment.


    Just a thought.

  28. This isn't new. Hong Kong has 'Octopus' already... by B747SP · · Score: 2, Informative
    From the article Casio is very big on the fact that you now don't have to root around in your bag for a credit card or cellphone in order to pay for things or get in and out of the office.

    It would also appear that Casio are very big on conveniently ignoring the fact that this isn't anything new. The Hong Kong public transport system has been running on an RFID card called 'Octopus' for several years now. I've used it lots of times, and it works really really well. The Octopus system used a credit-card sized card with an embedded RFID chip by default, but there are also wristwatches and wear-around-your-neck-on-a-lanyard-watches that perform the same function.

    You can pay for bus and train (MTR) trips using the Octopus card, make purchases at 7-Eleven, and top up the card at railway stations and 7-Elevens, and make purchases from an increasing array of other stores, vending machines, parking, ferries, cabs, supermarkets, even school tuck shops!!!. The system works really really well - despite the potential privacy issues, I'm a BIG fan of HK's Octopus.

    The system is, by default, largely anonymous. There's nothing to stop them putting a camera near a reader I guess, but I've never been asked to prove who I am when purchasing an Octopus card. The company acknowledges customer fears in respect of anonimity in various ways, they offer a 'personalised' octopus card with your photo on it if you want it, but there doesn't seem to be any pressure to adopt the personalised version.

    Clearly, it would be trivial to extend the Octopus system to access control. In fact, it wouldn't actually require any 'extension' of the system, just get your own RFID readers that speak the same frequencies and 'language' as Octopus uses (RFID is still very 'unstandardised', there's a lot of 'standards' to choose from), and make them respond appropriately to the unique IDs in the Octopus cards/watches you happen to own.

    I'm from Australia. A friend of mine is sending me my first Octopus watch next week. I already have a handfull of Octopus *cards* here to play with. Where can I get the RFID kit I wonder!

    --
    I find your ideas intriguing and I wish to subscribe to your newsletter.
  29. not a new concept by shin0r · · Score: 2, Interesting


    I worked for a firm that used Javacards to do a simliar thing. You set a debit limit via the intranet, and your food, gym, purchases and the car valet were all taken from your wages each time you swiped.

    It came off gross too, for great tax efficiency, plus no banking details were ever transmitted.

    Administrators could call the lift (elevator) when they swiped in to work in the morning :)

  30. timex has released watches with speedpass by emptybody · · Score: 2, Interesting

    If you take a look at Timex you will see the new line of speedpass enabled watches. This means that when I mug someone I can just get their watches - (which gives me the credit card and spedpass for US gas stations!!!)
    Rock On!!

    --
    comment directly in my journal
  31. Re:Mark of the beast, v.01 by adzoox · · Score: 2, Insightful

    I am a religious man, but I have to say the Mark of the Beast is WAY overhyped with the RFID.

    What you don't understand (or maybe you do) is that "even better" technology exists to facilitate such a "mark". You have thumbprints, you have unique DNA.

    Watch the movie Gattaca - it will show you how we will be tracked in the future. There's nothing about RFID there. THis said, I think we will also be able to be located by thermal scan or biorythm as easily as GPS. This is already somewhat possible. All it would take is required thermal/biorythm monitors in all public places. These would be cameras, but identifiers. They could be pitched as "identification control" - see it wouldn't record that you did a crime, but if a crime were committed - your biorythm could be placed at the crimescene.

    The future of payment lies within the "number of his name" as the mark of the beast.

    --
    Yell & scream & rant & rave... it's no use... you need a shaaaave ~ Bugs Bunny
  32. Signature experts? by slashname3 · · Score: 2, Interesting

    I read several comments about how most cashiers don't even check the signatures.

    I always get a big laugh when one of them does check the signature. Why would management think that a cashier that can't make change if the cash register is down is suddenly a signature expert when someone uses a credit card?

    Several years ago one of the news magazine shows on TV did a story where they took some of those credit cards with the people's pictures on them and gave them to staffers and sent them into stores in New York. If I recall correctly non of them had any problems using the credit cards, even the Asian lady using one with the picture of an African American man on the front of the card.

    I figured this was one of those conspiracies that the big corporations (in this case the credit card industry and big companies) did not want you to know about. The fact that either it is impossible to create a truly secure system either due to cost or technical issues, or that the credit card companies have calculated that it is not worth the cost to do so and that the general public has been conditioned to pay high interest fees which cover all the losses incured by credit card theft. As such the credit card companies encourage poor credit card handling and poor use of cards by the consumer (example: the get a card here to repair your poor credit scams).

    And the debit card scam is even worse! Why the heck would I want something that can suck my hard earned money directly out of my check account? Or is this just another way to get those poor souls that can't get a regular credit card? When you lose a debit card the panic has to be 100 times worse. I don't think many banks will restore your money in that case, unlike a credit card which is the credit cards money not yours.

  33. Re:Mark of the beast, v.01 by alex_ware · · Score: 2, Funny

    Just be careful when someone says that'll cost you an arm and a leg.

    --
    If you have nothing useful to say post as AC.