Abstract

One thing can be said to be common to all forms of debit card fraud - bypassing authentication. This means that a secure debit card transaction system can only be guaranteed by a secure and reliable authentication system. Many approaches have been adopted to provide a secure authentication system, but often these approaches focus on either automatic cash register / point of sale terminals or online / e-commerce transactions, which does not provide complete security on both fronts. In this paper, we solve this problem by adopting a multi-factor debit card system that uses a combination of a traditional personal identification number and one-time password mobile phone with biometric authentication option. We demonstrate that this approach ensures the security of both online and terminal transactions. The fingerprint option makes it easy for people who find it difficult to remember PINs.