Directional ATM Authentication for Man-in-the-Middle Prevention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
ATMs face increasing security challenges, particularly man-in-the-middle attacks, which compromise financial transactions by intercepting user interactions, leading to potential financial losses and risks for both institutions and clients.
Innovation Solution
Implementing a cardless ATM system that uses directional antennas to verify the presence of the user through a mobile device, ensuring transactions are only authorized when the user is physically located in front of the ATM, utilizing encryption keys and one-time passwords generated via a secure mobile app.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If cardless ATM authentication is implemented using mobile devices, then transaction convenience is improved, but security vulnerability to man-in-the-middle attacks increases
Solution Approach 1:
The patent introduces directional antennas as an intermediary component between the ATM and the mobile device. These antennas transmit signals in specific directions to verify the user's physical presence at the ATM location, creating an additional security layer that mediates between the convenience of cardless access and the need to prevent man-in-the-middle attacks
Solution Approach 2:
The system performs preliminary security verification by using directional antennas to confirm the user's location before allowing the transaction to proceed. This preliminary anti-action prevents potential man-in-the-middle attacks by ensuring the user is physically present at the authorized ATM location before authentication is completed
2Object-affected harmful factors
If position detection using directional antennas is implemented, then security against man-in-the-middle attacks is improved, but device complexity increases
Solution Approach 1:
The directional antennas serve multiple functions: they transmit authentication signals, detect user position, and verify physical presence at the ATM. By making the antenna system multi-functional, the patent reduces the need for separate dedicated position detection devices, thereby limiting the increase in overall system complexity while maintaining enhanced security
Data Source
AI summary
Systems and methods include a kiosk that performs an electronic payment transaction based on instructions received from a portable device of a user. The system further includes a transmitting device electrically coupled to the kiosk. The transmitting device is configured to transmit a first signal to the portable device at a first direction. The system further includes a receiving device electrically coupled to the kiosk. The receiving device is configured to receive a second signal from the portable device at a second direction. The transmitting device and receiving device are positioned such that the first and second direction enable determination of a position of the user, where the processor enables the electronic payment transaction to be processed only when the portable device is at a location relative to the kiosk. The location is disposed within a transmission path coextensive with both the first direction and the second direction.


