UK firm touts 'digital DNA' security

'Digital DNA' mapping is designed as an extra layer of security

A UK security firm has unveiled what it claims is the first "digital DNA" mapping technology to protect the identities and security of internet users.

ToroTech reckons that it can control security and online access by using a device's unique combination of chipset, disk drive, motherboard, DVD drive, screen, keyboard, serial numbers etc to create a 'digital DNA' of the device.

Every time the user logs-in to the system it compares the profile of the computer that is trying to connect against the stored profile and user ID. If the DNA does not match, access is denied.

The system is designed to be used in conjunction with traditional username and password verification to add an extra layer of security.

"There are a number of solutions that have been adopted by the UK banking industry to reduce the chances of online theft, but these rely on standard passwords/username access or smartcards, tokens or readers," said David Hawksworth, managing director of ToroTech.

"The current technology can easily be lost or stolen, and passwords are often not as secure as they should be. In addition the costs of administering and maintaining such solutions can be very high."

Hawksworth maintains that this new approach circumvents some of the problems with other multi-factor authentication systems such as one-time password generators which can be lost or stolen.

"Digital DNA is so unique, like our own DNA, that it is impossible to duplicate and therefore can be used to protect personal data and financial information to a much higher level than ever before," he said.

Critics have questioned the usefulness of this approach, however, as it limits user access to financial services to PCs that have been registered and profiled.

Furthermore, any changes to the device configuration will modify its digital DNA signature and render connection impossible.