Disablement PIN for Connected Device Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Cardless ATM transactions face the challenge of unauthorized use of devices used for accessing or near ATMs, as users must rely on smartphones or smart devices for authentication, leaving them vulnerable to theft during transactions.
Innovation Solution
Implementing a security system that utilizes a disablement PIN, distinct from the activation PIN, which, when entered, triggers disablement commands for IoT devices and other associated devices, such as smartphones, smart watches, and vehicles, to prevent unauthorized use and theft by disabling or alerting registered contacts.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If cardless ATM transactions use smartphones or smart devices for authentication, then transaction convenience is improved, but device security is worsened due to vulnerability to theft during transactions
Solution Approach 1:
The system performs preliminary actions by sending disablement commands to the user's devices before the transaction is complete. When a disablement PIN is entered at the ATM, the system proactively disables the smartphone, smartwatch, or other connected devices used in the transaction, preventing potential theft or unauthorized use during the transaction process.
Solution Approach 2:
The system introduces an intermediary mechanism - the disablement PIN - that mediates between the convenience of cardless transactions and device security. This separate PIN, distinct from the activation PIN, serves as a security layer that triggers device disablement without interfering with the normal transaction flow, thus maintaining convenience while enhancing security.
2Reliability
If a disablement PIN system is implemented to prevent unauthorized device use, then device security is improved, but system complexity is worsened due to multiple PIN types and disablement actions
Solution Approach 1:
The system segments the authentication process by separating the activation PIN and disablement PIN into distinct functions. The activation PIN is used for initiating transactions, while the disablement PIN is specifically used for securing devices. This segmentation allows each PIN to have a dedicated purpose, simplifying the user's understanding despite the added security layer.
Solution Approach 2:
The disablement system is designed to be universal across multiple device types. The same disablement PIN and command mechanism work for smartphones, smartwatches, tablets, and other connected devices, eliminating the need for device-specific security procedures and reducing overall system complexity despite supporting diverse devices.
Data Source
AI summary
A method includes: receiving, by a computer device and from an automated teller machine, a personal identification number that is associated with an account; determining, by the computer device, that the personal identification number is a disablement personal identification number that is associated with the account, the account having an activation personal identification number, the disablement personal identification number and the activation personal identification number being different; determining, by the computer device and as a result of receiving the disablement personal identification number, at least one disablement action to be performed by a device other than the automated teller machine; and transmitting, by the computer device, a command to perform the disablement action.