ATM Single-Factor Wireless Authentication and Policy Assessment
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional automated teller machines (ATMs) require two authentication factors, such as a card and a PIN, which can slow down transactions and pose risks in certain environments, especially for individuals with disabilities or in locations where PIN entry is risky.
Innovation Solution
An ATM system that uses a single authentication factor, where a wireless communication module detects and cryptographically authenticates a contactless token, allowing withdrawals without requiring user-input for a second authentication factor, and assesses compliance with policies to determine if further authentication is needed.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If two-factor authentication (card and PIN) is required, then security is improved, but transaction speed and accessibility deteriorate
Solution Approach 1:
The patent extracts the PIN entry step from the authentication process, allowing transactions to proceed with card-only authentication. The system removes the second authentication factor (PIN) for certain transaction types, thereby improving transaction speed while maintaining security through alternative means such as transaction limits and monitoring.
Solution Approach 2:
The patent segments the authentication process into different levels: low-risk transactions use simplified card-only authentication, while high-risk transactions require full two-factor authentication. This segmentation allows the system to optimize for speed in safe cases while maintaining security when needed.
2Reliability
If two-factor authentication (card and PIN) is required, then security is improved, but ease of operation deteriorates
Solution Approach 1:
The patent removes the PIN entry requirement from the authentication process for eligible transactions, making the ATM operation simpler and more accessible. Users only need to insert their card and the transaction is processed, eliminating the need to remember and enter a PIN code.
Solution Approach 2:
The system automatically determines whether full authentication is needed based on transaction characteristics and risk assessment, without requiring the user to manually select authentication mode. The ATM itself manages the authentication complexity based on the situation.
3Reliability
If PIN entry is required, then authentication security is improved, but risk in certain environments deteriorates
Solution Approach 1:
The patent removes the PIN entry step from transactions conducted in high-risk environments such as drive-thru ATMs or locations with poor privacy. By eliminating the need to type a PIN in these settings, the system prevents shoulder-surfing and other environmental threats while maintaining security through alternative controls.
4Reliability
If two-factor authentication is required, then security is improved, but device complexity increases
Solution Approach 1:
The patent divides authentication requirements into segments based on transaction risk levels. The system automatically applies different authentication protocols: simplified card-only authentication for low-risk transactions and full two-factor authentication for high-risk transactions, thereby managing complexity through conditional logic rather than universal complexity.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
This solution enables faster and more accessible withdrawals, reduces risk by eliminating the need for PIN entry, and enhances usability for individuals with disabilities, while also allowing ATMs to operate in locations where PIN entry is insecure.
Implementation Method 1
a wireless communication module detects and cryptographically authenticates a contactless token
Data Source
AI summary
An automated teller machine includes a processor, a wireless communications module, a cash dispenser, and a memory. The memory stores instructions that, when executed by the processor, cause the automated teller machine to detect, using the wireless communications module, that an authentication token capable of wireless communication has been brought into communications range of the module and communicate with the authentication token to cryptographically authenticate the token and to receive information identifying an account associated with the token. Then, without receiving user-input providing a second authentication factor the automated teller machine initiates processing of a withdrawal of a specified quantity of cash from the account. The processing of the withdrawal includes determining, based on an automated assessment of compliance with one or more policies, that the withdrawal is executable without further authentication. The automated teller machine then dispenses, using the cash dispenser, the specified quantity of cash.