Consider an automated teller machine (ATM) in which users provide a personal ide
ID: 3646803 • Letter: C
Question
Consider an automated teller machine (ATM) in which users provide a personal identification number (PIN) and a card for account access. Give example of confidentiality, integrity, and availability requirements associated with the system and, in each case, indeicate the degree of importance of the requirement.From: Consider an automated teller machine (ATM) in which users provide a personal iden- tification number (PIN) and a card for account access.Give examples of confidenti- ality,integrity,and availability requirements associated with the system and,in each case,indicate the degree of importance of the requirement.
Source:ISBN: 0133001946 | Title: Operating Systems | Publisher: Prentice Hall
Explanation / Answer
The following are the security factors considering an automated teller machine (ATM) in which user provides a personal identification number (PIN) and a card for account access.
Confidentiality
Confidentiality is the process of keeping the information secure during an ATM transaction. A few implementations of the same are as given below:
Time Out: This condition occurs when the consumer fails to enter pin within the stipulated time period. In such cases the ATM returns the card back to the customer and cancels the transaction.
Invalid Card: This occurs when the card is unrecognized due to wear and tear or tampering. In such cases, ATM returns the card back to the customer and displays a message on the screen asking the customer to replace the card from assigned bank.
Stolen Card: A measure for the condition when a card is reported stolen and is used in an ATM could be to retain the card in the ATM and send an instant message to the bank.
Confidentiality is by far one of most important aspects of ATMs. It is what we want all of our information to be during an ATM transaction.
Integrity
Due to use of commodity components, those are often not trust worthy, the ATM systems become vulnerable to data losses. The financial data like transaction numbers, amount or balance, electronic fund transfer can be lost or erased.
Without integrity the system would not have the required confidentiality to keep user information safe.
Availability
The most important factor of ATMs is availability. ATMs are connected to interbank networks, enabling people to withdraw money from machines which do not belong to the bank they have account in.
Also users can withdraw their amounts in other currencies while in travelling. Without network availability the ATM would not be able to communicate with banks and there would be no way for account transactions to be processed.