Framework for Biometric Enabled Unified Core Banking

Transcription

1 Proc. of Int. Conf. on Advances in Computer Science and Application Framework for Biometric Enabled Unified Core Banking Manohar M, R Dinesh and Prabhanjan S Research Candidate, Research Supervisor, Faculty Dept. of Information Science and Engineering, School of Engineering and Technology, Jain University, Bangalore.(India) [email protected], [email protected], [email protected] Abstract:In day to day life we come across credit cards, debit cards, check cards for shopping, bus cards, and subway cards for travelling, student cards for library, and many types of cards for unlimited purpose. The problem is, if a person has many cards, then in order to secure them, (s)he has to remember their corresponding passwords or secret codes. Hence, as the number of the cards increase there will be increase in the secure codes which he need to remember in order to access the accounts. Therefore, it is highly desirable to have a unique card or frame work which enables to access all his/her accounts with single card or biometric information. This paper presents, a pilot framework for unified core banking using Multimodal Biometrics. The proposed frame work enables access of all banking accounts with utmost convenience yet without compromising security through the help of multimodal biometrics. Keywords:ATM (automated teller machine), Data mining, Data warehousing, Biometrics, Multi modal Biometrics, Core banking, Biometrics enable ATM, Third party service provider [TPS] [Example for TPS are VISA, MASTER CARD]. I. INTRODUCTION To perform any transaction in the existing ATM machine, it is required to have a Credit/Debit card issued by a bank and also one should have associated PIN for authentication. If authentication is success then the existing system allows card holder to perform the transaction. One can use any banks card in any ATM machine but the tax will be withdrawn from the ATM machine to the bank it belongs to. Later the amount will be debited from the bank with which account exist. If a person holds multiple accounts in multiple banks then he will be having multiple cards linked for different accounts with different bank, making his life difficult in carrying them and remembering associated passwords. Nearly 70% of the consumers worldwide use biometric technology, such as fingerprints or voice recognition or iris recognition, administered by trusted organization like bank, government organization, school, colleges as a way to verify an individual s identity according to the new global research from Unisys. In the first survey to study consumer security preferences, the Unisys research also found 66% of consumers worldwide favoured biometric as ideal methods to combat fraud and identity theft as compared to the other methods as smart cards and tokens, reports enterprise network and servers. This finding shows an increase from separate Elsevier, 2013

2 research that Unisys conducted in September 2005, which found 61% of consumer s worldwide favoured biometric as preferred method to fight fraud and identity theft.[1]. Today fingerprint or iris technology is installed on locks for the house and office doors and in the organization for the attendant maintenance purpose. Finger print technology is very simple, just with the need of our fingers. Finger prints are proved reliable by Gary W Jones, who worked as an FBI finger print specialist for 33 years. [2] In existing ATM transaction we will not come to know to which bank account the transaction belongs to. Some bank ATM card will not allow doing its transaction in the other bank ATM. With the use of biometric ATM card, there is just need of the finger print and secret code. Once both are validated, the ATM machine in use will display all the bank names in which the card holder has accounts. Customer can select the bank name on the ATM machine screen; this can be done by data warehousing concepts extracting the necessary details from the various banks. Later the customer can do the transaction from the selected bank account. The same concept can be used for online transaction also but there is a need of biometric finger print device in the computers. This will ease the banking transaction for the customer and saves lot of money for the bank in generating the ATM cards. To achieve this, the bank must take the customer finger print details or iris detail along with other necessary information during opening of the account. Collected data from biometric devices will be stored in a matrix form and later it will be converted into unique code. Once the account is opened the password or secret code will be issued to the customer by the bank. Suppose the same customer want to open another account in the same bank or in the new bank then all necessary information which required for the customer will be collected by the new bank & previous bank also. Using data mining technology the same account holder finger print detail and secret code will be copied into this new bank. So without knowledge of the banking database the new bank can collect the customer s finger print detail and secret code from the existing bank. II. BIOMETRIC SYSTEM Biometric system is essentially a pattern recognition system that operates by acquiring biometric data from individuals, extracting features set from the acquired data, and comparing this feature set against the templates set in the banking database. Depending on the context, a biometric system may operate either in verification mode or identification mode:[3]. A. Verification mode In the verification mode, the system validates a person s identity by comparing the captured biometric data with her own biometric template(s) stored in the system database. In such a system, an individual who desires to be recognized claims an identity, usually via a PIN (Personal Identification Number), a user name, a smart card etc. And the system also conducts a one-to-one comparison to determine whether the claim is true or not (e.g., Does this biometric data belong to x user? ). Identity verification is typically used for positive recognition, where the aim is to prevent multiple people from using the same identity. [4] B. Identification mode In the identification mode, the system recognizes an individual by searching the templates of all the users in the database for a match. Therefore, the system conducts a one-to-many comparison to establish an individual s identity (or fails if the subject is not enrolled in the system database) without the subject having to claim an identity (e.g., Whose biometric data is this? ). Identification is a critical component in negative recognition applications where the system establishes whether the person is who she (implicitly or explicitly) denies to be. The purpose of negative recognition is to prevent a single person from using multiple identities. Identification may also be used in positive recognition for convenience (the user is not required to claim an identity). While traditional methods of personal recognition such as passwords, PINs, keys, and tokens may work for positive recognition, negative recognition can only be established through biometrics [4]. [5] Discussed about several human distinguishable traits that fit the definition of biometrics given above. In order to be used for recognizing a person, the human trait needs to be unique and not subject to change over a period of time. Fingerprints, for example, have been used for over one hundred years and, therefore, are generally well accepted as a recognition technology. Other technologies, such as face, hand geometry, speaker and iris recognition are also generally accepted. A biometric that would require giving a blood sample for frequent personal verification would probably not be very well accepted. Performance considerations of biometric systems are very critical for real time and pragmatic applications. No single biometric trait is fool proof, and hence, systems based on multiple biometric traits are used to improve the overall performance of the system. [5] Have given the detailed introduction about the commonly used 749

3 biometrics such as Deoxyribose Nucleic Acid (DNA), Ear, Face Recognition, Finger Prints, Gait, Hand and Finger Geometry, Iris, Retinal Scanning, Signature Verification and Voice Recognition. III. ATM TRANSACTION USING FINGER PRINTS Biometric payment technology allows the account holder to do their transaction with the touch of the fingerprint scanner linked to the ATM machine. Later this detail willbe transferred to the banking database and verified along with the secret code. The same technique can be used for online transaction. A. Banking Database The banking database should be modified by adding few more fields to store the biometric information, its unique code and the secret code. This data can be shred by the other banking database on the request. Currently few details are shared by the Bank for existing transaction system, along with this information biometric data, and corresponding unique code and secret code can also be shared. This can be done by data warehousing techniques. B. Algorithm to opening the Account Fig 1: System architecture for opening the account System architecture for opening the account is shown in the above Fig 1. Before opening the account the bank must have biometric devices to scan the customer finger print, palm print, iris, hand geometry and face details. The collected data by the biometric devices will be combined and stored in the matrix format and later using novel algorithm it will be converted into unique code. Similar technology will be used when the user want to with draw the money from the biometric enabledatm. For implementation purpose researcher considered only the finger print biometric device. Step 1: When the customer approaches for the bank for opening new account, the necessary information required for opening the account from the customer. Ask the customer for the already existing account number in any other bank, if yes using data mining technology retrieve the finger print data and its unique code from the third party service provider and store their detail in the database. If customer says he doesn t have account in any other bank then go to step 2. Step 2: Now third party service provider database is changed so that it can store the finger print data of the each customer, and its unique code along with the already existing data. Using data mining technology search for already existing information if any finger print data, unique code, account holder name already matching with the existing customer data then inform the requested bank and go to step 5 else go to step 4. Step 3: Collect all five finger prints of left hand and right hand details of the customer and allot a password or secret code for the customer account and then update this information with the database of the third part service provider. Step 4: The customer is already having account with other bank. Inform the customer about this. If he ready to open the account with the existing information then take the data from the third party service provider and create the account else say sorry to the customer. Step 5: End. 750

4 C. Algorithm for the Banking transaction using Biometric Enabled ATM and third part service provider database Third party service provider data base should be warehoused first using the data warehousing technology. Now for each customer finger print detail and their list of the bank name and bank identification number on which they are having their account, this has to be done before using the Biometric finger print ATM machine. Fig 2 bellow shows the process of below steps. Step 1: When the user approaches ATM Machine, first he has to input his finger print detail and then press the enter button. Then the ATM machine will provide prompt to enter his secret code. Step 2: This inputted detail will be sent for the authentication. Authentication is done by the third party service provider. They have the information about each customer. Each customer finger print, its unique code and secret code will be verified if it valid then go to step3 else go to step 7. Step 3: Third party service provider database will send the list of the bank name on which customer is having the account. Step 4: Customer will input his option by selecting the bank name by which he want to do the transaction. The selected bank all his account type will be displayed. User can select the account on which he interested to do the transaction. Step 5: The entire ATM transaction menu will be displayed for the user and he can do the transaction. Step 6: Once the transaction is completed by the user, and user want do the nexttransaction go to step 1 else go to step 8. Step 7: Display the message saying that: Invalid User or Try Again Step 8: End. IV. SIMULATED EXPERIMENTS Fig 2: System architecture for the ATM Transactions Assumed, that the Bank has used our biometric enable device in which our algorithm to generate unique code based on customer biometric information is implemented and, also assumed that bank has taken the customer information and biometric information at the time of their account creation. Since the ATMs work in relation with the Third party Service provider, we have used Excel tool, to extract the minimum customer details from the Bank of the account holder, which gets updated in the Third party service provider database (TPS) [used Oracle for TPS service]. Excel information contain the unique code, secret code, name of the customer, bank name, bank identification number, account type and account balance. It is then normalized and the 751

5 records are mapped to oracle database. When a customer creates an account in a Bank, a unique pin is generated with the help of the customer biometric information, and then, the bank will search in the TPS database, whetherthis pin already exists, if so, it updates the TPS with the new account details of its customer. If the pin does not exist in the TPS, it updates TPS providing minimum information about the customer. We have used Visual basic to implement ATM. Customer will enter unique code and secrete code (common to all account in our algorithm), which is verified in the TPS. If the verification succeeds, customer will be provided with the list of accounts he/she has owned in any bank, with their respective bank and balance details. Customer can select an account from any bank and do his/her transaction with the selected bank. The balance is later updated in the TPS and the respective bank database. Each transaction expects all the procedure. For the purpose of illustration we have implemented the proposed system using Visual Basics. A. Advantages 1. Existing system each bank will issue a card and passwords, but in this system no need to carry any card and we have to remember only one password. 2. Existing system will not display the option like list of the bank which we own and we want to do the transaction. 3. Once bank name selected for the transaction all his account in that bank will be displayed like saving bank accounts, current bank account etc. This facility is not there in the existing ATM machine. 4. Both hand finger prints will be taken so we can avoid the frauds. 5. Card manufacturing cost will reduced. 6. System is robust. 7. Only the authorized person or the owner of the account can access his account. B. Limitations 1. Biometric finger print is not 100% efficient; some time because of disturbance the system it may not recognize the valid finger prints. 2. Cost of the comparison of scanned finger prints with the stored finger print will be more compared with the existing ATM Card system. 3. To store the finger prints detail we need more memory and hence increases the database Burdon. 4. Good quality biometric finger prints scanner must used in the ATM Machine this may be increase the cost of the ATM Machine. 5. Biometric Finger print scanning and generating its unique code algorithm has to be purchased from the developer, and then only user can avoid the ambiguity in generating the unique codes. V. CONCLUSION We thus develop an ATM model that is more reliable in providing security using biometric finger prints. This will avoid unnecessary storing of the ATM cards andremembering the passwords for customers. We can completely avoid the theft of the ATM cards or misuse the cards. Only authorized person can do the transaction. This will also reduce the banks card manufacturing cost. The same technique can be used for the loan accounts also this will help to know the banking people whether the customer has taken any loan already in the other banks. Before sanctioning the loan they can analyse customer details in the other banks and then they can take the precise decision. REFERENCES [1] Fingerprint-it, Blogs on and about Fingerprints and Biometrics, [2] Julia Scheeres, will it be cash, check or finger?, [3] Anil K. Jain, Arun Ross and SalilPrabhakar: An Introduction to Biometric Recognition IEEE Transactions on Circuits and Systems for Video Technology, Special Issue on Image- and Video-Based Biometrics, Vol. 14,No. 1, (2004). [4] L. O'Gorman, Seven Issues With Human Authentication Technologies, Proc. of Workshop on Automatic Identification Advanced Technologies (AutoID), pp , Tarrytown, New York, ( 2002). [5] Dileep Kumar, YeonseungRyu, A brief introduction to Biometrics and Fingerprint Payment Technology International journal of advanced science and Technology, Vol,4(2009). 752