A study of a widely used security system for Internet shopping, banking and other services showed that it failed to work correctly in a small number of cases.