DIGITAL ASSIGNMENT-2

INFORMATION SYSTEM CONTROL AND AUDIT

FACULTY- DR. PRASANNA
SLOT- E1

BATCH-5
18BBA0005- CHANDRASEKHAR
18BBA0057- GOVARDHAN
18BBA0081- DINESH
18BBA0099- VISHNU

TOPIC-54
Secure ATM Using Card Scanning Plus OTP

1) INTRODUCTION ABOUT THE NEED

Automatic Teller Machines (ATMs) transactions are an important role for obtaining money
using credit or debit cards; hence they need to be secure and trustworthy. Shoulder-surfing or
observation attacks, including card skimming and video recording with hidden cameras while
users perform transactions at point-of-service terminals is one of the common threats for
common users. In the proposed system, a secure authentication protocol for performing
transaction in Automatic Teller Machines (ATMs) using mobile application is developed. This
approach protects the user from illegal use of credit/debit cards and partial observation attacks,
and is also against to relay, replay, and intermediate transaction attacks in the transaction
process. Users use an mobile application installed in their personal mobile device for scanning
a Quick Response (QR) code on the screen to initiate the transaction and obtain a secure One-
Time-Password (OTP) for authentication. By using this proposed system, the security is
enhanced while providing less complexity on the user side.

2)PURPOSE OF THE PROJECT

project proposes a secured ATM (Any time Money) system using a card scanning system along
with Otp password system on sms for improved security. Usual ATM systems do not contain
the OTP feature for money withdrawal. If an attacker manages to get hold of ATM card and
the pin number he may easily use it to withdraw money fraudently. So our proposed system
supports the ATM card scanning system along with an OTP system. Thus user may scan his
card and login to the system .But after user is through with this authentication he may view
details but is asked to enter OTP as soon as he clicks money withdrawal option. At this stage
the system generates and sends a One-time password OTP to the registered mobile number to
that particular user. The password is generated ad sent to the user mobile phone. He now needs
to enter the OTP in the system in order to withdraw money. Thus our system provides a totally
secure way to perform ATM transactions with two level security structure.

3) DESIGN OF THE PROJECT

Thus user may scan his card and login to the system .But after user is through with this
authentication he may view details but is asked to enter OTP as soon as he clicks money
withdrawal option. At this stage the system generates and sends a One-time password OTP to
the registered mobile number to that particular user.

4) THE DOMAIN APPLICABLE

Its applicable in many every day examples for example: Authentication and for secure money
transactions. Secured ATM (Any time Money) system using a card scanning system along with
Otp password system on sms for improved security. Usual ATM systems do not contain the
OTP feature for money withdrawal. So, This system provides a totally secure way to perform
ATM transactions with two level security structure.

5) THE INDUSTRIAL APPLICATIONS

Applications:

 To be used in next generation ATM systems.

 Can also be used as self-banking or inquiry system in banks.
  Can be used in military, labs, government sectors for secure 2 stage access system.

6) FUTURE EXPANSION POSSIBLE

Yes, because the advancement in technology improves the dimensions of current technology
in such a process where systems are highly secured.
3D Secure One-Time Password (OTP)

3D Secure One-Time Password will send special password to your mobile phone number which
already registered in Bank system every time you do online shopping on a merchant with 3D
Secure facility, therefore your credit card protected from potential cyber-crime.
If your Standard Chartered credit card has been registered and have 3D Secure Password
before, that password is not valid anymore since December 9th 2016, every online transaction
on 3D Secure merchant, you will get One-Time Password (one time use password) in the form
of text message (SMS) to your mobile phone number which has been registered in the Bank,
which you must fill in the 3D Secure page that provided by the merchant itself.

7) ADVANTAGES

 The system improves the security of ATM’s.

 Use of OTP provides second level of security.
 The system is cost effective and cheaper than usual ATM systems.
 New card requires less time for creation.

8) DRAWBACKS

 If card is lost there is no way to interact with system.

 Needs a security guard at ATM centre.
 OTP may take time to be received on mobile.