Abstract—Numerous examinations of the weaknesses with current two-factor-authentication (2FA) protocol of Automated Teller Machines (ATMs) systems have been presented by various researchers. It is plausible to suggest that the majority of the proposed solutions of authentication protocols in the reported investigative works are formulated based on Biometrics protocol as access control mechanism. Those aim to protect and validate the privacy of information of users or ATM cards. Most of the financial institutions in Saudi Arabia are still hesitate to use any of these proposed protocols. This is due to the user's mentality to use new technology and the complexity of these systems. This paper proposes a new Mutual Chain Authentication Protocol (MCAP) for the Saudi Payments Network (SPAN) transactions in the Saudi Arabian banking. MCAP is resistant against the well-known communication attacks of the current authentication protocols and it does not contradict with the mentality of users and at the same time preserves the current ATMs system entities.

Index Terms—ATM systems, SPAN, authentication, Key Agreement Protocol (AKA).

The authors are with the Computer Information System Department at Al jouf University (e-mail: shadi_nashwan@ju.edu.sa, bmshammeri@ju.edu.sa).

Cite:S. Nashwan and B. Alshammari, "Mutual Chain Authentication Protocol for SPAN Transactions in Saudi Arabian Banking," International Journal of Computer and Communication Engineering vol. 3, no. 5, pp. 326-333, 2014.