suryadev
Chapter 1 Homework 1
Solution
Table of Contents
Problem 1.1 3
Solution: 3
Problem 1.2 4
Solution: 4
Problem 1.4 4
Solutions: 4
Problem 1.1
Consider an automated teller machine (ATM) in which users provide a personal identification number (PIN) and a card for account access. Give examples of confidentiality, integrity, and availability requirements associated with the system and, in each case, indicate the degree of importance of the requirement.
Solution:
It is been long time since Auto Teller Machines (ATM) have been in use in the world. The ATM machine provides limited banking facility to withdraw and deposit cash 24 hours a day and 7 days a week. Another feature of ATM is that it is auto driven and no clerk or bank teller is required to be posted there with the machine.
The ATM Card consists of a plastic material visiting card size card with a strip of magnetic material or in latest card designs it will contain a chip fabricate on it too along with the magnetic strip on the card. The ATM card also contains a CVV or CVC (Card Verification Value Code) code for security reasons. A Personal Identification number (PIN) is required to be entered to avail the service. The PIN code is supplied to the customer when they first receive the card and the customer is required to store it safely to avoid possible misuse of the card. (Cornelis Robat. 1969).
In case of ATM machine usages certain extra security measures are adopted like entering the PIN code. The PIN code is NOT written on card and is uniquely allotted to the card customer and customer can change it at will.
In case credit card is stolen the theft card cannot be used for transactions as PIN is only known to the actual user of the card. This feature is like a password to enter a secured area. This means that not only availability of credit card is necessary for ATM transactions but the secret PIN code is also mandatory and in case of absence of either no transaction process can be completed.
There
Solution
Table of Contents
Problem 1.1 3
Solution: 3
Problem 1.2 4
Solution: 4
Problem 1.4 4
Solutions: 4
Problem 1.1
Consider an automated teller machine (ATM) in which users provide a personal identification number (PIN) and a card for account access. Give examples of confidentiality, integrity, and availability requirements associated with the system and, in each case, indicate the degree of importance of the requirement.
Solution:
It is been long time since Auto Teller Machines (ATM) have been in use in the world. The ATM machine provides limited banking facility to withdraw and deposit cash 24 hours a day and 7 days a week. Another feature of ATM is that it is auto driven and no clerk or bank teller is required to be posted there with the machine.
The ATM Card consists of a plastic material visiting card size card with a strip of magnetic material or in latest card designs it will contain a chip fabricate on it too along with the magnetic strip on the card. The ATM card also contains a CVV or CVC (Card Verification Value Code) code for security reasons. A Personal Identification number (PIN) is required to be entered to avail the service. The PIN code is supplied to the customer when they first receive the card and the customer is required to store it safely to avoid possible misuse of the card. (Cornelis Robat. 1969).
In case of ATM machine usages certain extra security measures are adopted like entering the PIN code. The PIN code is NOT written on card and is uniquely allotted to the card customer and customer can change it at will.
In case credit card is stolen the theft card cannot be used for transactions as PIN is only known to the actual user of the card. This feature is like a password to enter a secured area. This means that not only availability of credit card is necessary for ATM transactions but the secret PIN code is also mandatory and in case of absence of either no transaction process can be completed.
There