Attacks on ATM authentication protocols proposed at WEC2002

In this paper, we present 3 attacks on two ATM-based authentication protocols recently proposed at the WEC 2002 conference. The attacks on the first protocol cause an intruder to impersonate an ATM terminal to obtain the PIN while the attack on the second protocol causes the bank’s computer to think of the intruder as a legitimate user