Touchless PIN Entry via Mobile Intermediary for ATM Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing self-service terminals, such as ATMs, require manual PIN entry on exposed keypads, which can spread pathogens and are inaccessible for visually impaired users, especially during high virus transmission periods.
Innovation Solution
A touchless PIN entry system using a mobile device with a PIN entry application that communicates wirelessly with the ATM, allowing customers to enter their PIN without physical contact, utilizing asymmetric encryption and ephemeral keys to maintain security and compatibility with existing banking infrastructure.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a manual keypad is used for PIN entry, then security can be maintained through encryption, but the risk of pathogen transmission increases due to physical contact
Solution Approach 1:
The patent introduces a mobile device as an intermediary between the user and the ATM system. The mobile device captures the PIN through its camera (pointing at a display) or through contactless communication, preventing direct contact with the ATM keypad while maintaining the security function through encrypted transmission of the PIN data.
Solution Approach 2:
The patent replaces the mechanical keypad system with an optical or wireless communication system. Instead of physical key presses, the PIN is entered by capturing it via camera (optical method) or through contactless wireless communication, eliminating the mechanical contact point while preserving the encryption and security protocols.
2Device complexity
If a simulated touchscreen keypad is used, then the device structure can be simplified, but accessibility for visually impaired users deteriorates
Solution Approach 1:
The mobile device serves as an intermediary that provides accessibility features. The mobile device can use audio output, haptic feedback, or screen reader integration to assist visually impaired users in entering their PIN, while the ATM maintains its simplified touchscreen interface without physical tactile cues.
Solution Approach 2:
The solution moves the interaction from the two-dimensional touchscreen surface to the user's mobile device, which can provide additional dimensions of interaction such as audio feedback, vibration patterns, or integrated accessibility features that are not constrained by the ATM's display capabilities.
3Object-affected harmful factors
If contactless PIN entry is implemented, then pathogen transmission risk is reduced, but compatibility with existing security infrastructure must be maintained
Solution Approach 1:
The mobile device acts as an intermediary that handles the complex communication protocols. It establishes secure wireless connections (Bluetooth, NFC, or other encrypted channels) with the ATM, managing the complexity of contactless authentication while presenting a simple contactless interface to the user and maintaining compatibility with existing security infrastructure.
Solution Approach 2:
The mobile device provides multi-functional capability, serving as both the PIN entry interface and the secure communication channel. It can handle multiple protocols (optical capture, wireless communication, encryption) within a single device, making the system adaptable to different existing ATM infrastructures without requiring specialized hardware at the ATM end.
Data Source
AI summary
A system and method is described for the touchless entry of a personal identification number (PIN) at a self-service terminal such as an automated teller machine (ATM). A mobile device includes a PIN entry application. The self-service terminal includes a wireless interface for communicating wirelessly with the PIN entry application in the mobile device. A communication channel is established between a particular customer's mobile device and the self-service terminal. The PIN entry application verifies a public key for the self-service terminal at the mobile device. The customer's PIN is encrypted by the PIN entry application at the mobile device using either an ephemeral symmetric encryption key or a one-time RSA PIN transport public key. The encrypted PIN is transmitted to an encryption processor at the self-service terminal. The encryption processor decrypts the PIN using the appropriate encryption key.