Color wheel pin: Usable and resilient ATM authentication

Article type: Research Article

Authors: Guerar, Meriem^{a; *} | Benmohammed, Mohamed^b | Alimi, Vincent^c

Affiliations: [a] University of Sciences and Technology of Oran Mohamed Boudiaf, Oran, Algeria. E-mail: meriem.guerar@univ-usto.dz | [b] University of Constantine, Constantine, Algeria. E-mail: ben_moh123@yahoo.com | [c] Mobeewave Inc., Quebec, Canada. E-mail: vincent.alimi@gmail.com

Correspondence: [*] Corresponding author. E-mail: meriem.guerar@univ-usto.dz.

Abstract: We are witnessing a growing demand for ATM authentication solutions that overcome the limitations of the de facto standard mechanism based on magnetic card and numeric PIN, that has revealed to be weak against ATM-specific attacks (e.g., skimming and recording attacks). An emerging trend is relying on smartphones as a carrier for authentication. However, authentication mechanisms based on the use of a smartphone requires the same mechanisms to be resilient to new, smartphone-specific threats like device theft and common attacks like shoulder-surfing attacks and spyware. In this paper, we propose a new ATM authentication mechanism called Color Wheel Pin which combines a usable ATM authentication mechanism with robustness against both generic and smartphone and ATM specific security threats.

Keywords: ATM, authentication, mobile security

DOI: 10.3233/JHS-160545

Journal: Journal of High Speed Networks, vol. 22, no. 3, pp. 231-240, 2016