SEPIA: Secure-PIN-Authentication-as-a-Service for ATM using Mobile and Wearable Devices

SEPIA: Secure-PIN-Authentication-as-a-Service for ATM using Mobile and Wearable Devices

Abstract— Credit card fraud is a common problem in today’s world. Financial institutions have registered major loses till today due to users being exposed of their credit card information. Shoulder-surfing or observation attacks, including card skimming and video recording with hidden cameras while users perform PIN-based authentication at ATM terminals is one of the common threats for common users. Researchers have struggled to come up with secure solutions for secure PIN authentication. However, modern day ubiquitous wearable devices, such as the Google Glass have presented us with newer opportunities in this research area. In this paper, we propose Secure-PIN-Authentication-as-a Service SEPIA, < Final YEar Projects 2016 > a secure obfuscated PIN authentication protocol for ATM and other point-of-service terminals using cloud connected personal mobile and wearable devices.