ATM Security Using Fingerprint Biometric Identifer: An Investigative Study

Authentication based on biometric provides various advantages in ATMs (Automated Teller Machine) systems. The weakness of existing authentication scheme in ATM is the usage of PIN (Personal Identification Number) numbers as password. Because PIN numbers are easily traceable and misused. In order to achieve security and to overcome these illegal activities, our proposed system is developed to provide better security to the ATMs. Here, the PIN numbers are replaced with biometric security. The main objective of the work is to eliminate the use of ATM cards completely and to ensure better security. In this proposal, we provide the idea of using Aadhaar number as user ID and fingerprint as password. After biometric verification, the user will be allowed to proceed with the transaction. In case of three successive wrong attempts, the account will be blocked.

In recent years, Automated Teller Machines (ATMs) are witnessed as the most widely used gadgets which required personal identification numbers (PINs) for authentication along with ATM cards. But PINs are suspected of many threats like a man-in-the-middle attack, spoofing, and eavesdropping, etc., which can affect secure and private information. In this paper, we present a novel secure authentication system for ATMs. In this paper, we replace ATM card with facial expression authentication and makes ATMs intelligent enough to recognize users and give them access to their accounts. Replacement of cards will solve the current problem of skimming data from cards with the use of skimmers.

Providing security to bank customers is the prime responsibility of banking institutions. These institutions upgrade their services to provide convenience-based banking exposure. Automatic Teller Machines (ATMs) assist the bank's customers to operate independently. ATMs verify the authenticity of the user through a 4-digit personal identification number (PIN) only. The State Bank of India (SBI) has initiated a double security check system to minimize the probabilities of banking frauds through ATMs. SBI customers must provide a one-time password (OTP) along with a PIN to complete the cash withdrawal transaction through the SBI ATM. The objective of the study is to analyze the impact of financial security enhancement in ATMs cash transactions through one-time password on the probabilities of banking frauds through ATMs. The study has used primary data collected through a questionnaire from 422 respondents. The study resulted that one-time password has enhanced the financial security function of ATMs and now the probabilities of ATM frauds has been reduced substantially.

With the increase of automated teller machine (ATM) frauds, new authentication mechanisms are developed to overcome security problems of personal identification numbers (PIN). Those mechanisms are usually judged on speed, security, and memorability in comparison with traditional PIN entry systems. It remains unclear, however, what appropriate values for PIN-based ATM authentication actually are. We conducted a field study and two smaller follow-up studies on real-world ATM use, in order to provide both a better understanding of PIN-based ATM authentication, and on how alternative authentication methods can be compared and evaluated. Our results show that there is a big influence of contextual factors on security and performance in PIN-based ATM use. Such factors include distractions, physical hindrance, trust relationships, and memorability. From these findings, we draw several implications for the design of alternative ATM authentication systems, such as resilience to distraction and social compatibility.

BackgroundDisease registers aim to collect information about all instances of a disease or condition in a defined population of individuals. Traditionally methods of operating disease registers have required that notifications of cases be identified by unique identifiers such as social security number or national identification number, or by ensembles of non-unique identifying data items, such as name, sex and date of birth. However, growing concern over the privacy and confidentiality aspects of disease registers may hinder their future operation. Technical solutions to these legitimate concerns are needed.DiscussionAn alternative method of operation is proposed which involves splitting the personal identifiers from the medical details at the source of notification, and separately encrypting each part using asymmetrical (public key) cryptographic methods. The identifying information is sent to a single Population Register, and the medical details to the relevant disease register. The Population Register uses probabilistic record linkage to assign a unique personal identification (UPI) number to each person notified to it, although not necessarily everyone in the entire population. This UPI is shared only with a single trusted third party whose sole function is to translate between this UPI and separate series of personal identification numbers which are specific to each disease register.SummaryThe system proposed would significantly improve the protection of privacy and confidentiality, while still allowing the efficient linkage of records between disease registers, under the control and supervision of the trusted third party and independent ethics committees. The proposed architecture could accommodate genetic databases and tissue banks as well as a wide range of other health and social data collections. It is important that proposals such as this are subject to widespread scrutiny by information security experts, researchers and interested members of the general public, alike.

A Fingerprint-based Authentication Framework for ATM Machines The security of the transactions on the Automated Teller Machine (ATM) has been raising many concerns in some parts of the world. These concerns are due to series of limitations in the existing designs of the various service points. The current use of Personal Identification Number (PIN) for ATM user’s verification and identification has been susceptible to unauthorized access, misplacement, forgetfulness, card swallowing among others; thereby narrowing down the machine’s acceptability and patronage. In this paper, a framework for fingerprint authenticated ATM application is presented. The framework comprises of modules for fingerprint enrolment, database and verification. The verification module comprises of fingerprint enhancement, feature extraction and matching sub-modules, which all rely on suitable mathematical models to function. There is also platform for financial transaction including withdrawal and balance enquiries. The implementation was carried out using Windows 7 as operational platform while C# and Microsoft SQL server served as the frontend and backend engines respectively. Tests conducted on the evaluation of the application using False Rejection Rate (FRR), False Acceptance Rate (FAR) and Average Matching Time (AMT) show the adequacy and the suitability of the proposed framework for ATM user verification and authentication.

An automated teller machine (ATM) is an electronic device that allows customers of a financial institution to access their account and to perform financial transactions such as checking their account balance and withdrawing cash without the need for a bank teller. The customer is issued with a plastic card with a magnetic stripe (or a chip) that contains a card number and security information that uniquely identifies the customer. The customer inserts the card into the machine and enters the personal identification number (PIN), which must match the PIN stored in the card. There are several million ATMs in use around the world.

The increasing reliance on Automated Teller Machines (ATMs) has highlighted the urgent need for advanced authentication mechanisms to safeguard user transactions against fraud and unauthorized access. However, traditional methods such as Personal Identification Numbers (PINs) and passwords remain vulnerable to attacks, while unimodal biometric systems face challenges of inter-class variance, environmental interference, and non-universality. Specifically, single-modality approaches and conventional ATM cameras fall short in capturing reliable biometric features under varying conditions, while the effectiveness of bimodal approaches in such environments has not been adequately investigated. Therefore, this study developed a bimodal biometric authentication system integrating face and iris recognition with Gray Level Co-Occurrence Matrix (GLCM) for enhanced ATM security. The system leverages GLCM for powerful texture feature extraction from both modalities, capturing intricate spatial relationships that are difficult to spoof. The extracted feature vectors were used to train Support Vector Machines (SVM) with a Radial Basis Function (RBF) kernel as classifiers for both face and iris recognition. The final authentication decision was made using Boolean OR rule fusion. The system achieved a remarkable accuracy of 98.2%, with a False Acceptance Rate (FAR) of 1.8% and a False Rejection Rate (FRR) of 1.2%. These results demonstrably outperformed comparable unimodal systems and existing biometric ATMs, validating the proposed framework as a highly secure and efficient solution for financial authentication systems.

Nowadays we are experiencing a radical increase in skimming in the Automated Teller Machine (ATM) systems. So, actuation in advancement and security of the ATM machines is required.An automated teller machine (ATM) is an electronic telecommunications device that helps customers of banking departments in transactions and transfer of money in their accounts. The customer enters their unique personal identification number (PIN), i.e. stored in the chip of the card. Due to an increase in the installation of ATM and the number of ATM cardholders, the number of cases of fraudulence has also increased radically. The advancement in technology has resulted in an increase in various skimming activities.So, developments are incorporated in the existing systems to make it more secure, convenient and reliable. The employed secured system must have high speed and must be durable. The presented design is unique because of biometric scanners such as Iris scanner and the two-way check with fingerprint scanner makes it more reliable. The iris scanner being the primary security check lets the system access the further steps for transaction. Fingerprint scanner embedded in the ATM card acts as the secondary security check for the system. The transaction procedure is successful only if the input data by the card holder matches with the database. It consumes less energy that makes it suitable for use. The suggested modified system is pragmatic moreover economical when correlating to the alternative existing classification and affirmation processes of ATMs.

비밀번호를 입력하는 과정에서 가장 큰 보안 위협은 비밀번호를 훔쳐보는 것이다. 비밀번호 훔쳐보기는 비밀번호를 입력하는 과정을 옆에서 지켜보고 비밀번호를 획득하려고 하는 행위로서 비밀번호를 획득하는 가장 전통적인 방법이며 강력한 보안 위협이다. 본 논문에서는 인지심리학에 기초한 비밀번호 훔쳐보기로부터 안전한 기술인 역동 인증 체계(DAS)라 불리는 비밀번호 입력 기술을 제안하였다. 그리고 제안한 역동 인증 체계의 비밀번호 훔쳐보기에 대한 안전성을 직관적인 관점, 훔쳐보기 실험, 이론적인 분석으로 구분하여 검증하였다. 비밀번호 훔쳐보기로부터 안정성이 입증된 역동 인증 체계를 내장시킨 비밀번호 입력기를 설계하여 구현하였다. 구현한 비밀번호 입력기는 일반 패스워드 입력방식 보다 훔쳐보기 공격자의 비밀번호 획득 확률을 현저하게 낮출 수 있으므로 은행에서 운영하는 금융자동화기기에 적용 및 운영되기에 적합한 것으로 평가를 받아 금융기관에서 도입하여 활용되고 있다. When entering the PIN(personal identification number), the greatest security threat is shoulder surfing attack. Shoulder surfing attack is watching the PIN being entered from over the shoulder to obtain the number, and it is the most common and at the same time the most powerful security threat of stealing the PIN. In this paper, a psychology based PINpad technology referred to as DAS(Dynamic Authentication System) that safeguards from shoulder surfing attack was proposed. Also, safety of the proposed DAS from shoulder surfing attack was tested and verified through intuitive viewpoint, shoulder surfing test, and theoretical analysis. Then, a PINpad with an internal DAS that was certified for its safety from shoulder surfing attack was designed and produced. Because the designed PINpad significantly decreases the chances for shoulder surfing attackers being able to steal the PIN when compared to the ordinary PINpad, it was determined to be suitable for use at ATM(automated teller machine)s operated by banks and therefore has been introduced and is being used by many financial institutions.

As technology progresses, traditional authentication methods like Personal Identification Numbers (PINs) and passwords are becoming more prone to security breaches. To address this issue, biometric-based authentication systems are being seen as a reliable solution to boost security in different areas, such as Automated Teller Machines (ATMs). This study delves into the deployment, advantages, obstacles, and future potential of a biometric-based ATM system. By examining current research, real-life examples, and technological innovations, the aim of this paper is to shed light on the efficiency and viability of biometric authentication in ATM systems. Key Words: Enhanced Security, Authentication, Efficiency, Reliability

The development of the Swedish welfare state is often characterized by several comprehensive social reforms and organizational changes. In previous research, as in the previous chapters of this book, scholars often tend to direct their interest towards these reforms. Often left out are the tacit administrative technological infrastructures that enabled these. The Swedish social security number, the person number, is such a tacit technology. Unlike similar personal identity numbers in other countries, e.g. the Social Security number in the USA and the National Insurance number in the UK, which were designed for administering specific welfare reforms, the forerunner to the Swedish person number was introduced in 1947 as a uniform number for universal personal identification. With this administrative technology, the state could produce bureaucratic knowledge by collecting demographic data, finding debtors, controlling spending and crosschecking entitlements to welfare benefits. And, equipped with their unique identity number, each citizen could claim the newfound social rights to which she was entitled. While simplifying state-citizen communication, the person number also opened up the possibility for authorities to crosscheck individuals’ data in different registers. This sparked a heated debate in the early 1970s. To protect the personal integrity of the individual, the Data Protection Act (SFS 1973:289) came into force in 1973, making Sweden the first country in the world with such a legislative framework (Datainspektionen, 2016). (Less)

The present study examined the impact of electronic banking on reducing the cost of new customers in Sirjan city banks. E-banking components in this research include: internet banking, mobile banking, telephone banking, point-of-sale (POS) terminals, automated teller machines (ATMs), and self-service kiosks. The statistical sample size includes 384 subjects who were determined from the active population of Sirjan city. Given that the study population was selected from different occupational groups and there was incongruity between the groups, multi-stage cluster sampling method has been used. Therefore, first, the population in different occupational classes is separated, then simple random sampling method was applied to determine the sample number in each class. To collect data in this research, was used. The questionnaire validity and reliability were obtained respectively, 0.91 and 0.79. In order to describe and analyze the collected data, spss software was used. Statistical analysis results showed that overall e-banking leads to an increase in customer attraction towards a commercial bank. Each of the components of electronic banking has a significant impact on attracting new customers in the bank. At the end, some recommendations have been presented for banks staff and managers to make an applied use of the research results. Keywords: Electronic Banking, Customer, Cost

The development of technology and the internet does not always produce positive things. Negative things that are side effects include the crime of skimming (theft of customer data) which is one type of crime in cyberspace. Lately Indonesia is enlivened with breaking ATM news that occurred in various regions in Indonesia. The customers suddenly lose their account balance due to being burglarized by irresponsible people. ATM piercing technique is known as ATM Skimmer Scan technique. ATM machine piercing (Automated Teller Machine) using Skimmer, which is a customer data thieves. The modus operandi of bank breakers is installing skimmer in ATM mouth. After the customer data obtained, the perpetrator just insert into the ATM card. burglars will freely drain the customer's money. Problems that arise is the development of modus operandi crime skimming in the case of bank burglary bank as a form of cybercrime (cybercrime) And Efforts / Legal Steps in Tackling Crime Use of Information Systems and Electronic Transactions. This research is legal research using conceptual approach and statue approach which will review Law Number 11 Year 2008 regarding Information and Electronic Transaction. Based on the method used, it is known that the modus operandi of criminal skimming in ATM bankruptcy as a form of cyber crime and the application of article in Law Number 11 Year 2008 regarding Information and Electronic Transaction as an effort / step in tackling the crime of Information System Use and Electronic Transactions.

DNA evidence is nowadays used for the investigation of a wide range of crimes. Once reserved mostly for violent cases such as rape and murder, biological material recovery is not only restricted to such crime scenes anymore. As DNA technology is getting cheaper and its results faster, there has been a growing interest in using DNA to help solving volume crimes, mostly property crimes. In this work, an analysis of more than 4200 samples of biological material recovered from more than 1000 cases of property crime offenses processed by the Brazilian Federal Police Forensic Genetics laboratory is described. Most of the property crime offenses included: (1) Automated Teller Machine (ATM) thefts, skimming or Personal Identification Number (PIN) capturing scams, (2) post office burglaries or armed robberies, (3) Federal government buildings burglaries. Success rate at DNA recovering and STR typing showed great variability, mostly due the nature of biological source, but an average of 52% of samples presented usable DNA and in 44% of the cases at least one genetic profile reached the minimal criteria for insertion in CODIS. Results obtained in this work showed what types of evidence are usually collected in property crimes and which ones provide the best results for DNA typing. These results can be used to better guide crime scene evidence collection practices in property offenses, making it more efficient and cost effective.