Establishing user trust in automated teller machine integrity

Abstract

The authors show that integrity protection as a technical means towards automated teller machine (ATM) security is not enough to establish trust towards ATM users. The attacks, aiming at getting into possession of users' bank card details and personal identification numbers (PINs) are manifold. The authors come up with a solution that allows users to establish trust into the ATM integrity protection being in place. The users' mobile phones play a central role in the trust establishment. The authors also shift the PIN entry away from the possibly insecure ATM's PIN pad towards the users' mobile phones.