For this data to be secure, these keys should be stored on hardware as well, nCipher says. It has been accepted for over 30 years, that hardware is essential for adequate security of key data. Few e-businesses take the issue seriously, with the one exception being banks and financial institutions, who have had several years experience of key storage. Cost to business Those most at risk are small businesses who share web servers and hence rely on someone else to provide the hardware storage. While as yet no breaches of security have been reported, nCipher warns that successful attacks leave no trace.
Successful attackers can access past and present transactions.
Mr Van Someren says that hardware key storage should become best practice and e-businesses should pressure service providers to offer it. Some analysts have interpreted the research as a call for small businesses to stop sharing web servers. Others have welcomed the research. The BBC is not responsible for the content of external internet sites.