Article View: sci.crypt
Article #1376Re: ATM security question
From: Lauren Weinstein
Date: Sun, 08 Nov 1992 01:21
Date: Sun, 08 Nov 1992 01:21
23 lines
1611 bytes
1611 bytes
Greetings. On-card encrypted PINs have been used for some purposes. They have become increasingly uncommon in recent years, with a definite move toward centralized verification. At a major California bank, for example, their original ATM system would instantly ack a card as soon as you finished entering the PIN. At that time, they were using encrypted PINs on the card. A point came when they issued all new cards, and required that everyone come in once to set the PIN. This involved running the card through a reader for ID and then letting a modem at the bank dial up the central system to set the PIN in the system. It was at the same time that PIN acks started taking a considerable period of time (usually several seconds--though you're told to go ahead and start entering your first transaction instead of waiting for the ack--but you'll be bounced later if the PIN is incorrect). Also, the ATMs no longer worked at all when the central system was down (previously simple withdrawals had gone ahead anyway). In any case, it seemed likely that the bank had switched to a centralized verification system, and I later confirmed this with the bank while in the process of clearing up some card problems. --Lauren--
Technical Details
Message-ID:
<121.UUL1.3#1@vortex.COM>Path:
arc1-ca.pugleaf.net!sparky!uunet!zaphod.mps.ohio-state.edu!cs.utexas.edu!usc!randvax!vortex!laurenReferences:
<1992Nov7.201929.24071@u.washington.edu>Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!zaphod.mps.ohio-state.edu!cs.utexas.edu!usc!randvax!vortex!lauren From: lauren@vortex.COM (Lauren Weinstein) Newsgroups: sci.crypt Subject: Re: ATM security question Message-ID: <121.UUL1.3#1@vortex.COM> Date: 8 Nov 92 01:21:39 GMT References: <1992Nov7.201929.24071@u.washington.edu> Organization: Vortex Technology Lines: 23