AR Overlay PIN Entry for Skimmer-Resistant ATM Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing ATM transactions are vulnerable to theft of user account data due to the possibility of skimmers and cameras capturing PINs and transaction card information, necessitating improved security measures.
Innovation Solution
A user device captures images of the ATM, establishes a wireless connection, and provides an augmented reality (AR) overlay on the physical input interface, presenting randomized button layouts and symbols to secure PIN entry, thereby enhancing security and reducing the need for physical authentication components on the ATM.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional physical authentication components (keypad, card reader) are used at ATM, then users can perform transactions, but the system is vulnerable to skimmers and cameras capturing PIN and card information
Solution Approach 1:
The patent introduces a user device (smartphone, tablet, or AR glasses) as an intermediary between the user and the ATM. This device captures images of the ATM display and physical interface, processes them to generate an AR overlay with randomized button layouts, and presents it to the user. The user device acts as a mediator that transforms the vulnerable physical interaction into a secure digital experience, eliminating direct exposure of PIN entry to skimmers and cameras.
Solution Approach 2:
The system creates a digital copy of the ATM interface through image capture and processing. Instead of directly interacting with the physical ATM keypad and display, the user interacts with a replicated interface presented through AR overlay on their personal device. This digital copy includes randomized button layouts that match the captured physical interface, allowing secure transaction processing without physical contact with vulnerable components.
2Reliability
If AR overlay with randomized button layouts is implemented, then PIN entry security is enhanced, but the device complexity increases
Solution Approach 1:
The patent leverages the universal capabilities of modern user devices (cameras, processors, displays, AR/VR capabilities) to perform multiple functions: capturing ATM images, processing visual data, generating randomized layouts, and presenting AR overlays. By utilizing the multi-functionality of a single user-owned device, the system avoids adding complexity to the ATM itself while achieving enhanced security through technologies users already possess.
3Reliability
If image capture and processing is used to identify ATM device, then security validation is improved, but the time required for transaction initiation increases
Solution Approach 1:
The system performs image capture and ATM identification as a preliminary action before the actual transaction. The user device captures images of the ATM display and physical interface, processes them to extract identifying features, and validates the ATM device before presenting the AR overlay for PIN entry. This preliminary validation ensures security without significantly impacting transaction time, as the image capture and processing occur in the background while the user prepares to enter their PIN.
Data Source
AI summary
A device may receive an input that indicates a request to initiate a transaction at an ATM device. The device may instruct the user to capture one or more images of the ATM device. The device may determine that an image has been captured and process the image to determine first information that identifies the ATM device. The device may send the first information to a server device and receive a signal that indicates the ATM device has been validated. The device may cause an augmented reality (AR) overlay to be displayed, wherein the AR overlay includes second information related to authenticating the user to the ATM device. The device may determine whether a user action is performed with respect to the second information included in the AR overlay, and perform a device action related to the second information, the ATM device, or the AR overlay.