Debit Cards

[Kinjal Ramaiya]

Hey Nulls,

A thought crossed my mind while reading Two Factor Authentication, which involves "something we know" and "something we have".

While using an ATM card, we need to sign on the back of the card. Does the ATM check the signature also? If so, then is that a 3 Factor Authentication (Signature, Card and the PIN)???

Does the ATM really check the signature? Or is it just to be on a safer side that the SBI people ask us to sign it?

--
Kinjal Ramaiya
Symbiosis Centre for Information Technology
xpl0it.wordpress.com
(M) 9730559784

http://www.linkedin.com/in/xpl0it

[Gaurav]

I don't think the ATM machine checks/reads signature in any way.
The signature at the back is for comparing when the card is swiped against your transaction, which unfortunately hardly any shopkeeper every do.

-Gaurav

--
null - Spreading the right Information
null Mailing list charter: http://null.co.in/section/about/null_list_charter/

[Gaurav Shah]

I guess it is because the ATM card can also be used as a Debit card. And when you swipe the card, the shop keeper will cross check the signature you do on the receipt with the one on the back of the card.

 

ATM machine does not check for signature for sure. Coz even if you dont sign on the card and want to withdraw money, you can.

 

I hope your doubt is clear.

On Tue, Apr 13, 2010 at 11:16 AM, Kinjal Ramaiya <kvra...@gmail.com> wrote:

--

null - Spreading the right Information
null Mailing list charter: http://null.co.in/section/about/null_list_charter/

--
Thanks & Regards
Gaurav Shah.
91-9552504002.

[tas...@gmail.com]

Nope ATM or swipe kiosks don't check for the signature on the back. It is just for avoid any misuse. All banks ask you sign at the back.

By the way card with pin is just one factor and not two factor authentication. Two factor would invlove use of some third party token like RSA tokens that are provided by banks like HSBC etc. It is a very expnsive implementation.

Ch33rs
TAS!

Sent from BlackBerry® - Vodafone

---

From: Kinjal Ramaiya <kvra...@gmail.com>

Date: Tue, 13 Apr 2010 11:16:28 +0530

To: <null-...@googlegroups.com>

Subject: [null] Debit Cards

[Mr. Chirag Gohel]

Yes signature is for the manual authentication.

none of the machine is checking signature.

Enjoy Each Moment . . . . .

Chirag K. Gohel
Catch Me . . . .
+91 99099 93937
www.genxsolution.co.in
Vyatta Associate Partner
Endian Firewall Associate Partner
Net Protector AntiVirus Authorised Dealer
http://chiragkgohel.blogspot.com
http://chiragkgohel.wordpress.com
http://saurashtralug.blogspot.com

On Tue, Apr 13, 2010 at 11:16 AM, Kinjal Ramaiya <kvra...@gmail.com> wrote:

--

[simran]

Hi Kinjal,

I'm quite sure the ATM does not check any signatures...

As for if its 3 factor auth (when a teller checks the sig, which in practically is virtually never, but still its the process)... i would think not as its still:

* Something you know (your PIN)
* Something you have (your card, with your sig)

The 3rd factor is commonly, something you "are" (http://www.e.govt.nz/standards/e-gif/authentication/guide-multi-factor-auth/chapter3.html)  - eg. fingerprints / other biometric authentication...

simran.

On Tue, Apr 13, 2010 at 11:16 AM, Kinjal Ramaiya <kvra...@gmail.com> wrote:

--

[SUDHAKAR PATIBANDLA]

Hi,

     Even i got same doubt later my friend taken new Debit card i have done successful transaction in ATM and Shopping Mall without any problem. Debit  card will use only PIN authentication.

Thanks & Regards,
Sudhakar.P,
Mobile :-
+919701999102-Andhra Pradesh
+919379169679-Karnataka

[Kinjal Ramaiya]

Great, Thanks a lot to all :)

@TAS

I still feel it is Two Factor Authentication like Simran said.

[TAS .]

Agreed. I just read up on the Internet. Card with PINS are also considered as type of two factor authentication.

More on Two Factor Authentication
http://en.wikipedia.org/wiki/Two-factor_authentication

Thanks
TAS!

[Ritesh Sinha]

On Tue, Apr 13, 2010 at 11:22 AM, <tas...@gmail.com> wrote:
> Nope ATM or swipe kiosks don't check for the signature on the back. It is
> just for avoid any misuse. All banks ask you sign at the back.
>
> By the way card with pin is just one factor and not two factor
> authentication. Two factor would invlove use of some third party token like
> RSA tokens that are provided by banks like HSBC etc. It is a very expnsive
> implementation.

ATM cards implement 2FA since something you have is the card and
something you know is the PIN code. RSA tokens used by HSBC (I'm not
sure if other banks use it) are used exclusively for online banking
providing the "something you have" (since you already know your card
number/internet banking password).

--
Sent using the magic of the interwebs.
http://ritesh.posterous.com

[Nanda Kumar]

Hi,

I think it is just for safer side. I have used my ATM card with out the signature it accepts.

-Nanda

--