DESIGN AND IMPLEMENTATION OF A COMPUTERIZED CARD BASED SECURITY VERIFICATION GATEWAY SYSTEM

1.1 Introduction

Card Based Security Verification Gateway System was introduced due to the high rate of defaulters, because information system is generally prone to threat. Therefore, the used of Computerized Card Based Security Verification Gateway System was introduced to safeguard, prevent information system from the threats associated to them. Computerized Card Based Security Verification Gateway System was introduced so that unauthorized access or abuse of important information will be eliminated. According to Chen et al., (2000), card based system (Smart Card) can be described as portable integrated devices that store and process data. These tiny computers with their own memories and processors have a widespread usage especially in telecommunication and mass-transit systems (Chen et al., 2000).

As a prelude to other parts of this study, this chapter will discuss the background upon which this study was initiated, the statement of problems that led to this study, the Aim and Objectives of the study. Others are Significance of the study, Scope of work, Limitation of the study and Definition of technical terms.

1.2 Background of Study

In 1988 German rocket scientist Helmut Grottup and his colleague Jurgen Dethloft invented the automated chip card, receiving a patents only in 1982. The first mass use of the card was as a telecarte for payment in French pay phones starting in 1983.

French inventor Roland Moreno patented the memory card concept in 1974. in 1974, Michel Ugon from Honeywell bull invented the first microprocessor smart card. In 1978, Bull patented the SPOM (self programmable one-chip microcomputer). That defined he chip. Three years later Motorola used this patent in its CP8”. At that time, Bull had 1,200 patent related to smart cards in 2001, Bull sold its CP8 division together with its patents to Schlumberger, who subsequently combined its own internal smart card department and CP8 to create manufactures, merged and became Gemalto.

The second used integrated microchips into all French carte blue debit card in 1992, customers inserted the card into the merchants' pos terminals, them typed the PIN, before the transaction was accepted. Only very limited transactions (such as paying small high way tools) are processed without a PIN. Smart card “based electronic purse” system store funds on the card so that readers do not need network connectivity and entered service throughout Europe in the mid-1990s, most notably in Germany (Geldkarte), Austria (Quick), Belguim (Proton), France (Monco) the Nertherlands Chipkirip and chipper), Switzerland (“Cash”) Norway (mondex) Sweden (Cash de commissioned in 2004), Finland (“Avart”). Uk (“Porta-moedas multibanco”).

The major boom in smart card use came in 1990s, with the introduction of smart-card-based Sims used in GSM mobile phone equipment in Europe, with the ubiquity of mobile phones in Europe, Smart card have become very common. The international payment brands MasterCard, visa, and Europay agreed in 1993 to work together to develop the specification for smart card as either a debit or a credits cards the first version of the EMV system was released in 1994. In 1998 a stable release of the specification became available. EMVCO, the company responsible for the long-term maintenance of the system, upgraded the specification in 2000 and in 2004 EMVCO's purpose is to assure the various financial institutions and retailers that the specifications retain backward compatibility with the 1998 version.

With the exception of countries such as the united state, EMV-Compliant cards and equipment are widespread. Typically, a country national payment association, n coordination with master card international, Visa international, American Express and JCB, Jointly plan and implement EMV Systems. Contadess smart card that do not require physical contact between card and reader are becoming increasingly popular for payment and ticketing applications such as mass transits and highway tolls. Visa and master card have agreed to an easy-to-implement version that was deployed in 2004-2006 in the USA. Most contacless fare collection implementations considerable market share in the US and Europe.

Smart cards are also being introduced in personal identification and entitlement scheme at regard, national, and international levels. Citizen cards, drivers' licenses, and parent card scheme are appearing. In Malaysia, the compulsory national ID Scheme Mykad includes eight different applications and has 18 million users. Contactless smart cards are part of ICAO biometric passports to enhance security for international travel.

1.3 Statement of Problems

Computerized Card Based Security Verification Gateway System has always played a vital role in the stability of a nation. Keeping security information manually can hinder some defense program and delay passage of security information to the appropriate body. Manual documentation of security information can lead to exposure of the information thereby creating threat to the nation at large. Hence, there is need for a Computerized Card Based Security Verification Gateway System to guaranty safety of information.

1.4 Aim and Objectives of the Study

The aim of the study is to design and implement a Computerized Card Based Security Verification Gateway System using Oceanic Bank as a case study. In achieving this aim, the following specific objectives were set out as follows:

1. To compare and contrast the difference between cards based security and manual based;
2. To develop a software for managing security information;
3. To know the rudiments of computer security.
4. To create information security conscious; and
5. To develop a software that will enhance the integrity of data and provide a means of safeguarding data in a system.

1.5 Significance of Study

The new system will help to solve all the problems inherent in the existing system. Card based security can provide identification, authentication, data storage and application processing other aspect are:

Financial: Card based security serve as credit or ATM card, fuel cards, mobile phone Sims authorization cards for pay television, household utility, pre-payment cards, high-security, identification and access-control card, and public transport and public phone payment cards.

Card based may be used as electronic wallets. The smart card chip can be “loaded” with fund to pay parking meters and vending machines or at various merchant cryptographic protocols protects the exchange of money between the smart card and the accepting machine. No connection to the issuing back is necessary, so the holder of the card can use it even if not the owner. Examples are proton, Geldkarte, Chipkuip and monco. The geldkarte it also used to validate customer age at vending machine for cigarettes.

Health Care (Medical)

Smart health card can improved the security and privacy of patient information, provide a secure carrier for portable medical records, reduce health care fraud, support new processes for portable medical records, provides secure access to emergency medical information, enable compliance with government initiatives and mandates, and provide the platform to implement other applications as needed by the health care organization.

Identification

A quickly growing application is in digital identification. In this application, the cards authenticates identify, the most common example employs PKI. The card stores an encrypted digital certificate issued from the PKI provider along with other relevant information.

Security

Card base have been advertised as suitable for personal identification tasks because they are engineered to be tamper resistant. The chip usually implements some cryptographic algorithm. There are, however, several methods for recovering some of the algorithm's.

1.6 Scope of Study

The study focuses on the Design and Implementation of a Computerized Card Based Security Verification Gateway System using Oceanic Bank PLC as a case study.

1.7 Limitations of the Study

During the course of this study, many things militated against its completion, some of which are:

1. Time Constraint: The time frame given to accomplish this project was very short due to school academic calendar and it was carried out under pressure which made the researcher not to implement some necessary features.
2. Research material: availability of research material is a major setback to the scope of the study.
3. Frequent power failure: This made the researcher append more money on fuel to ensure sustainable power.
4. Financial Constraint: Insufficient fund tends to impede the efficiency of the researcher in sourcing for the relevant materials, literature or information and in the process of data collection (internet).

1.8 Definition of Terms

Cryptographic Technique

Involves transforming information scrambling it so it becomes unreadable during transmission. The intended recipient can unscramble the message, but eavesdropper cannot.

Encryption

Is used to protect the message from the eyes of others. It can be done in several ways by switching the character around, replacing character with others, and even removing character from the message. These have to be used in combination to make the encryption secure enough, that is to say, sufficiently difficult to crack public key encryption is a refined and practical way of doing encryption. It allows for examples anyone to write a massage for a list of recipients and only those recipients will be able to read that massage.

Firewalls

Are systems which help protect computer and computer network from attack and subsequent instruction by restricting the network traffic which can pass through them, based on a set of system administrator defined rules

Honey Pots

Are computer that are either intentionally or unintentionally left vulnerable to attack by crackers. They can be used to catch cracker or fix vulnerabilities.

Intrusion-Detection System

Can scan a network for people that are on the network but who should not be there or are doing things that they should not be doing.

Pinging the Ping Application

Can be used by potential crackers to find if an IP address is reachable, if a cracker finds a computer they can try a port scan to detect and attack services on that computer.

File Integrity Monitors

Are tools used to detect charge in the integrity of systems and files

Anti-Virus Software

Consist of computer program that attempts to identify, thwart and eliminate computer viruses and other malicious software (Malwave)

Authentication Techniques

Can be used to ensure that communication end-points are who they say they are.

Capability and Access Control

List technique separation and mandatory access control.

Cryptographic Technique

Can be used to define data in transit between system, reducing the probability that data exchange between systems can be intercepted or modified

Chains of Trust Techniques

Can be used to defined or attempt to ensure that all software loaded has been certified as authentic by the system's designers.