Mobile Communication Based Security for ATM PIN Entry

Abstract

This paper proposes a prototype for multi-level secured PIN (Personal Identification Number) entry authentication. This system is based on ARM microcontroller in which Stegano PIN method is implemented. If in Emergency situation to withdraw amount, owner of an ATM card gives it to a third party, there is possibility to withdraw extra amount. Moreover even if a user is directly accessing the ATM machine there is a possibility of shoulder surfing to track PIN number. To achieve security and usability, a practical indirect PIN entry method Stegano PIN is designed and implemented. A random key is generated using the Stegano pin method in the keypad matrix each time the card is inserted. This prevents the shoulder surfing attack. If the card is given to third party, the card owner will send a message to the server placed in the ATM machine specifying the amount limit for that card number. If the third party tries to withdraw extra amount the ARM processor will process only the amount specified by the owner through the message from the GSM. The extra amount entered by the third party is not processed by the ATM machine. Thus a highly secured and user-friendly system is developed and tested.