Moving ATM Applications to Smartphones with a Secured Pin- Entry Methods

Abstract

A personal identification number (pin) is a widely used numeric password. The 4-digit pin numeric password is being used as authentication in many important applications such as, an ATM. An ATM is a place where the shoulder surfing attack is of great concern. There are some existing methods that provide security to the pin entry. But, those methods use only limited cognitive capabilities of the human adversary. The major disadvantage that exists here is that human adversaries can be more effective at eavesdropping and assumptions by training themselves. The proposed method called improved black white (BW) method can be more secure, as it uses bi-colored keys. Another contribution is the authentication service that uses local databases and a hash function. The hash function is mainly used to send the pin securely to the server through the public channel. An ATM application is created as an android application, where transactions can be performed in smart phones using a virtual money concept. Keywords: personal identification number; improved black white (BW) method; virtual money; hash function; shoulder surfing attack.