Mobile Gesture Authentication for ATM Fraud Prevention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
ATMs and POS terminals are vulnerable to fraud due to the use of fake keypads and card readers, which record users' PINs and financial card information for unauthorized access.
Innovation Solution
Implementing a user authentication system that uses a mobile device to provide a gesture or image selection, which is compared to a previously stored gesture or image to authenticate the user, thereby reducing the need for physical keypad entry and enhancing security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional PIN entry via physical keypad is used, then ease of operation is maintained, but security is compromised due to skimming devices recording PINs
Solution Approach 1:
The patent replaces the mechanical keypad entry system with a mobile device touchscreen interface. Users perform gestures (swiping, tapping, drawing patterns) on the mobile device screen instead of physically pressing keypad buttons. This substitution eliminates the physical contact point that skimming devices exploit, thereby maintaining ease of operation while significantly improving security against PIN recording attacks.
2Reliability
If gesture-based authentication via mobile device is implemented, then security is enhanced by eliminating physical keypad contact, but device complexity increases
Solution Approach 1:
The patent leverages the mobile device's existing touchscreen interface, which users are already familiar with from daily use. The same touchscreen hardware and software infrastructure is utilized for both general mobile operations and authentication gestures. This multi-functionality approach avoids adding specialized authentication hardware, thereby enhancing security while minimizing increases in device complexity.
Solution Approach 2:
The mobile device's operating system and touchscreen controller automatically handle gesture detection, validation, and authentication signaling to the external reader. The device self-manages the complex tasks of interpreting touch inputs, comparing gestures against stored templates, and securely transmitting authentication results, reducing the burden on users and minimizing additional system complexity.
3Reliability
If multiple authentication factors (gesture + image) are required, then security is further strengthened, but ease of operation decreases
Solution Approach 1:
The patent allows users to pre-register their authentication gestures and select preferred images during a setup phase. Once registered, these biometric and visual factors are stored securely for rapid comparison during authentication. This preliminary action enables the system to perform multiple-factor authentication without requiring users to manually input each factor during the transaction, thereby strengthening security while maintaining ease of operation.
Data Source
AI summary
A user may provide a financial card to an automated teller machine (ATM) or point of sale (POS) terminal and may be authenticated by providing a gesture and/or an image selection via a mobile device to the ATM or the POS. The gesture and/or image selection may be provided using a touchscreen of the mobile device. The gesture and/or image provided by the user via the mobile device may be compared to a stored gesture and/or image provided by the user during an earlier registration of the financial card. If there is a match between the gesture and/or image provided by the user via the mobile device and the previously stored gesture and/or image, then the user is authenticated and may access an account associated with the financial card.