Software Implementation of Card Based Security System (A Case Study of Oceanic Bank)

1.0 Introduction
CARD BASED Security system was introduced due to the high rate of defaulters, because information system are generally prone to threat. Therefore, the used of card based security system was introduced to safeguard, prevent information system from the threats associated to them. Card based security system was introduced so that unauthorized access or abuse of important information will b eliminated.

1.1 Background Of The Study
In 1988 German rocket scientist Helmut Grottup and his colleague Jurgen Dethloft invented the automated chip card, receiving a patents only in 1982. The first mass use of the card was as a telecarte for payment in French pay phones. Starting in 1983.
French inventor Roland Moreno patented the memory card concept in 1974. in 1974, Michel Ugon from Honeywell bull invented the first microprocessor smart card. In 1978. Bull patented the SPOM (self programmable one-chip microcomputer). That defined he chip. Three years later Motorola used this patent in its CP8”. At that time, Bull had 1,200 patent related to smart cards in 2001, Bull sold its CP8 division together with its patents to Schlumberger, who subsequently combined its own internal smart card department and CP8 to create manufactures, merged and became Gemalto.
The second used integrated microchips into all French carte blue debit card in 1992, customers inserted the card into the merchants' pos terminals, them typed the PIN, before the transaction was accepted. Only very limited transactions (such as paying small high way tools) are processed without a PIN. Smart —card “based electronic purse” system store funds on the card so that readers do not need network connectivity and entered service throughout Europe in the mid — 1990s, most notably in Germany (Geldkarte). Austria (Quick), Belguim (Proton), France (Monco) the Nertherlands Chipkirip and chipper), Switzerland (“Cash”) Norway (mondex) Sweden (Cash de commissioned in 2004), Finland (“Avart”). Uk (“Porta-moedas multibanco”).
The major boom in smart card use came in 1990s, with the introduction of smart-card-based Sims used in GSM mobile phone equipment in Europe, with the ubiquity of mobile phones in Europe, Smart card have become very common.
The international payment brands MasterCard, visa, and Europay agreed in 1993 to work together to develop the specification for smart card as either a debit or a credits cards the first version of the EMV system was released in 1994. In 1998 a stable release of the specification became available. EMVCO, the company responsible for the long-term maintenance of the system, upgraded the specification in 2000 and in 2004 EMVCO's purpose is to assure the various financial institutions and retailers that the specifications retain backward compatibility with the 1998 version.
With the exception of countries such as the united state, EMV-Compliant cards and equipment are widespread. Typically, a country national payment association, n coordination with master card international, Visa international, American Express and JCB, Jointly plan and implement EMV Systems.
Contadess smart card that do not require physical contact between card and reader are becoming increasingly popular for payment and ticketing applications such as mass transits and highway tolls. Visa and master card have agreed to an easy-to-implement version that was deployed in 2004-2006 in the USA. Most contacless fare collection implementations considerable market share in the US and Europe.
Smart cards are also being introduced in personal identification and entitlement scheme at regard, national, and international levels. Citizen cards, drivers' licenses, and parent card scheme are appearing. In Malaysia, the compulsory national ID Scheme Mykad includes eight different applications and has 18 millions users. Contactless smart cards are part of ICAO biometric passports to enchance security for international travel.

1.2 Purpose Of The Study
This study was brought into life due to the damages the intruders has done in computing world with their illegal act. Other purpose include:

1. To be information security conscious
2. To know the rudiments of computer security
3. To compare and contrast the difference between cards based security and manual based.

1.3 Significance Of The Study
Card based security can provide identification, authentication, data storage and application processing other aspect are:
Financial
Card based security serve as credit or ATM card, fuel cards, mobile phone Sims authorization cards for pay television, household utility, pre-payment cards, high-security, identification and access-control card, and public transport and public phone payment cards.
Card based may be used as electronic wallets. The smart card chip can be “loaded” with fund to pay parking meters and vending machines or at various merchant cryptographic protocols protects the exchange of money between the smart card and the accepting machine. No connection to the issuing back is necessary, so the holder of the card can use it even if not the owner. Examples are proton, Geldkarte, Chipkuip and monco. The geldkarte it also used to validate customer age at vending machine for cigarettes.
Health Care (Medical)
Smart health card can improved the security and privacy of patient information, provide a secure carrier for portable medical records, reduce health care fraud, support new processes for portable medical records, provides secure access to emergency medical information, enable compliance with government initiatives and mandates, and provide the platform to implement other applications as needed by the health care organization.
Identification
A quickly growing application is in digital identification. In this application, the cards authenticates identify, the most common example employs PKI. The card stores an encrypted digital certificate issued from the PKI provider along with other relevant information.
Example includes the U.S. Department of Defence (DOD) Common Access Card (CAC). and various identification card used by many government for their citizens. Combined with biometrics, card can provide two-or three factor authentication. Smart cards are not always privacy- enhancing, because the subject carries possibly incriminating information on the card. Contact less smart card that can be read from with a wallet or even a garment simplify authentication.
Security
Card base have been advertised as suitable for personal identification tasks because they are engineered to be tamper resistant. The chip usually implements some cryptographic algorithm. There are, however, several methods for recovering some of the algorithm's.

1.3 Scope Of The Study
This research work was carried out under a range and range helps to guide the researcher to have a nice work. The scope was restricted to the case study i.e. all work down to its implementations was carried out on the case study.

1.4 Limitation Of The Study
There are many limitation on the way to make this piece of work successful, starting from the administrative bottle necked encountered during research and the lack of information on the topic itself, the major factor that contribute to limiting work is lack of time to do important research on this very topic and I will fail to reveal that lack of fund limit this work to an extent, for moving from one library, school, industries, firm to another.

1.5 Terms Used
Cryptographic Technique
Involves transforming information scrambling it so it becomes unreadable during transmission. The intended recipient can unscramble the message, but eavesdropper cannot.
Encryption
Is used to protect the message from the eyes of others. It can be done in several ways by switching the character around, replacing character with others, and even removing character from the message. These have to be used in combination to make the encryption secure enough, that is to say, sufficiently difficult to crack public key encryption is a refined and practical way of doing encryption. It allows for examples anyone to write a massage for a list of recipients and only those recipients will be able to read that massage.
Firewalls
Are system which help protect computer and computer network from attack and subsequent instruction by restricting the network traffic which can pass through them, based on a set of system administrator defined rules.
Honey Pots
Are computer that are either intentionally or unintentionally left vulnerable to attack by crackers. They can be used to catch cracker or fix vulnerabilities.
Intrusion-Detection System
Can scan a network for people that are on the network but who should not be there or are doing things that they should not be doing. For example trying a lot of password to gain access to the network.
Pinging The Ping Application
Can be used by pontential crackers to find if an IP address is reachable, if a cracker finds a computer they can try a port scan to detect and attack services on that computer.
File Integrity, Monitors
Are tools used to detect charge in the integrity of systems and files.
Anti-Virus Software
Consist of computer program that attempts to identify, thwart and eliminate computer viruses and other malicious software (Malwave)
Authentication Techniques
Can be used to ensure that communication end-points are who they say they are.
Capability And Access Control
List technique separation and mandatory access control.
Cryptographic Technique
Can be used to define data in transit between system, reducing the probability that data exchange between systems can be intercepted or modified.
Chains Of Trust Techniques
Can be used to defined or attempt to ensure that all software loaded has been certified as authentic by the system's designers.