Re-examining the security issues of ATM systems

The automated teller machine (ATM) system is the well-known system in E-society that provides us with easy access to banking activities, e.g. money transfers between a user's accounts. This article focuses on the security issues of ATM systems. We examine a criminal case concerning large-scale fraudulent cash withdrawals at ATMs around Taiwan. The common tricks used by criminals are copies of cards as well as the use of tiny cameras to record the personal identification numbers of card users. With continued advances in technology, the criminal case can be handled easily. We also discuss security policies to prevent fraudulent cash withdrawals.     

Self-service systems: new methodology reveals customer real-time actions during merger

Automatic teller machines (ATMs) being developed today may astonish customers. Some of these sophisticated new ATMs deliver full banking services, dispense theater tickets, and cruise the World Wide Web. What may be more striking is the fact that, since the inception of ATMs 30 years ago, bankers, developers, and deployers have not had precise information on how clients perform in real time when using even the simplest ones. Consequently, from the point of view of cognitive research, it is not surprising that, although the banking industry has considerable capital investment tied up in ATMs, banks do not obtain the desired returns. ATMs would need to be utilized more often and for more profitable transactions, which generally means more cognitively demanding ones, in order to bring in profits. To accomplish that mission, designers and bankers need precise information about what customers really do when using the machines. This paper discusses a study conducted with a new methodology that allows the capture of relevant, detailed, and real-time data from electronic self-service systems. That same methodology can be applied to businesses as diverse as airlines, hotels, internet transactions, and many others. In our study, the data were collected during the challenging times of a merger of two large international banks that jointly have over 550,000 customers and 1000 ATMs. A sample of 15,099 users, ages 16–79 years old, participated. These customers performed 60,259 financial transactions during their 44,435 visits to 103 ATMs in 22 days. Accuracy, as measured by success and errors in obtaining the desired outcome, and time spent with input, measured on-line in milliseconds, were the dependent variables. The data were cross-referenced to identify education, gender, age, experience, and other demographic variables. The implications of the findings for the study of human–computer interaction, practical intelligence, and procedural knowledge are discussed.     

基于ASP.NET Web API框架的校园一卡通手机客户端研究

详细介绍基于ASP.NET Web API框架设计的校园一卡通手机客户端的实现。通过引用一卡通相关的Web Service,再封装Web API接口供手机端以HTTP方式调用。校园一卡通手机客户端使用户可以利用碎片化时间,随时随地处理校园卡有关业务,突破了传统校园卡应用的时空局限,开创了新局面。     

可扩展的电子商务系统模型分析

与传统的信息系统相比，电子商务系统比较庞大、复杂，相关的功能模块集成度高，容量与性能要求也高，因此在规划与建设系咎之初，除了考虑一些商业指标外，重点要考虑系统的总体架构及系统的可扩展性问题，以提供良好性能的网络服务功能。本文就以此为出发点，介绍一个实际的电子商务系统，给出其基本应用架构、容量大小和相关软件的集成方法。     

Impact of ATM intensity on cost efficiency: An empirical evaluation in Taiwan

Although the use of ATMs in the U.S. is approaching saturation, ATM deployment is still increasing in other parts of the world, such as Australia, China, Canada, Germany, and the United Kingdom. The relationship between IT investment and firm performance has been extensively studied, but few researchers have examined the impact of self-service technology (SST) in general and ATMs in particular on a firm's cost efficiency. Given the growing importance of SSTs in the banking industry, it is thus surprising that few studies have examined the impact of SST on banking cost efficiency. We therefore empirically examined the cost efficiency effects on ATMs.     

基于Web的数据仓库技术及其在商业银行中的应用

基于Web的数据仓库是网络技术和数据仓库技术发展和相互融合的必然产物 ,对基于Web的数据仓库的特征及其体系结构进行了分析 ,并将其具体应用到商业银行的应用系统中去 ,构建了一套商业银行综合业务管理、分析及监控系统。     

基于Web Service的校园一卡通应用集成接口研究

应用接口对于扩展校园一卡通应用范围,完善一卡通功能至关重要。为解决各种不同功能、不同实现平台的应用系统顺利对接到一卡通平台,应用接口必须要有很好的交互性和通用性,Web Service技术能很好地满足这个要求。通过Web Services技术为校园一卡通系统的前台应用访问后端服务器提供统一的业务处理接口,在实际的应用中能很好地解决第三方应用系统的集成问题。     

Guidelines for Creating Accessible Library Web Pages

ABSTRACT

Library Web developers can improve their Web pages and work towards accessibility by all user groups. This article describes some general accessibility guidelines to follow when creating Web pages. It discusses the recommendations of the World Wide Web Consortium (W3C), called the Web Accessibility Initiatives (WAI). This article focuses attention on the accessibility of Web pages to users with visual impairments, auditory impairments, and mobility impairments. Accessibility guidelines for these user groups are suggested. Another important aspect of creating accessible Web pages is to test the pages during and after development. Online products that test accessibility are discussed as well as additional test methods, such as user input.     

C/S向B/S系统迁移的技术

随着Internet技术的兴起，浏览器／服务器(B／S)系统相对于传统的客户／服务器(C／S)系统的优势越来越明显，更多的企业正着手将C／S系统向B／S迁移。该文在Jakarta Struts框架和Web Service技术的基础上，提出了一种将传统的C／S系统向B／S迁移的方法，并对其中的关键技术如用户接口的自动迁移、处理逻辑的包装以及Web应用的集成进行了深入的探讨。     

Adaptive Automated Teller Machines

Nowadays, Automated Teller Machines (ATMs) provide significant online support to bank customers. A limitation of ATM usage is that customers often have to wait in a queue, especially at ATMs installed at busy locations. Also, old people tend to consume more ATM usage time, possibly frustrating customers in the queue. In these situations, ATMs should “adapt” to the behavior of the customers to minimize the usage time. To this end, we apply data mining techniques to an ATM transaction dataset obtained from an international bank based in Kuwait. We pre-process this dataset, and convert it into a specific XML format to mine it through the ProM (process mining) tool. Our results reveal that customers withdraw money most frequently, followed by purchases (through an ATM card) and balance inquiry transactions. Customers re-do these transactions frequently, and also employ them one after the other. We acquire the distributions of the withdrawn amount, based on individual customers, the location (ATM terminal) and time of the withdrawl. Based on these results, we have proposed a set of five adaptive ATM interfaces, which show only frequent transactions and frequently-withdrawn amounts, display the current balance autonomously, and query explicitly for viewing purchase history, or for performing another withdrawl. An online survey on 216 ATM customers reveals that a majority of customers are willing to use these interfaces for minimizing their usage time. Our work has been approved by the banking authority of Pakistan, and we are currently implementing our interfaces for a Pakistani bank.     

试论Web应用系统的安全性测试技术

由于当前对于Web应用系统安全性的研究仅仅停留在服务安全的实现方面,对于安全测试性技术研究依然薄弱。随着Web应用的普及,越来越多的技术研究人员开始重视Web应用系统的安全性检测,越来越多的检查工具被开发了出来。本文基于Web常见的安全性问题,分析Web服务安全性测试框架,以此来探讨安全性测试技术,希望能够提升Web应用系统的安全性。     

Web银行系统中的SQL注入攻击及防范

互联网的普及使得Web银行成为金融企业拓展业务的必然。然而Web银行在给用户带来极大便利的同时,网络安全特别是SQL注入攻击也成为了一个倍受关注的问题。本文在分析SQL注入原理和常见注入方式的基础上,依据多年从事银行业务系统应用开发、实施和审计经验,总结了几点Web环境下针对SQL注入的防范措施。     

Spring Web Flow 在Web应用开发中的研究

介绍了Spring Web Flow框架,论述了在Spring MVC中集成Spring Web Flow的原理和方法,提出了一种处理复杂页面流程Web应用开发模式,举例详细介绍了基于Spring MVC+Spring Web Flow构建的银行业务系统贷款模块的设计。应用这种技术的Web应用系统在处理复杂页面流程时开发简洁、结构清晰,具有良好的扩展性和维护性。     

基于Web的政务系统通用框架的研究与实现

提出了基于Web政务系统开发的通用框架，分离了系统中数据逻辑、业务逻辑和表现逻辑，并通过轻量级J2EE技术——Spring实现了该框架。分析了该框架在政务系统开发中的意义，在该框架上构建基于Web电子政务系统，使开发者把更多精力放在业务逻辑和用户界面的实现上，从而提高开发效率、节约了开发成本、系统维护也变得更简单。      

基于Web的PDM系统信息安全探讨

PDM系统是管理现代企业产品数据的一种新技术，它可以充分合理地解决企业人力资源和信息资源存在的各种问题，随着Internet技术的应用，基于Web的PDM系统得到了很大的发展，在基于Internet的应用环境下，信息安全性显得尤为重要，该文首先阐述了Internet环境下PDM的信息安全，然后结合IC卡技术，SSL协议及认证服务器，提出了一种基于Web的PDM信息安全框架。     

基于Web注释的移动客户端自适应机制的研究

由于各种移动设备在计算能力上有所区别，目前没有一种较好的机制能够使Web内容根据移动设备的性能转换成不同页面大小。该文给出一种通过注释Web页面的方法来实现自适应移动设备，在不改动原有网站的基础上根据移动设备的计算能力生成合适的Web内容。与其它方法相比，该方法在设备自适应性、用户订制和转换速度等方面有较大的提高。     

Location of banking automatic teller machines based on convolution

In this paper, the problem of determining the optimum number and locations of banking automatic teller machines (ATMs) is considered. The objective is to minimize the total number of ATMs to cover all customer demands within a given geographical area. First, a mathematical model of this optimization problem is formulated. A novel heuristic algorithm with unique features is then developed to efficiently solve this problem. Finally, simulation results show the effectiveness of this algorithm in solving the ATM placement problem.     

采用反馈机制的自适应Web推荐系统

Web服务的初衷是能让用户能够快捷方便地找到自己需要的资源,但是当前过量的网络资源反而增加了用户的麻烦。于是出现了结合用户对Web使用的数据挖掘应用的Web推荐系统。在传统Web推荐系统的基础上引入了反馈机制。使推荐系统在线给用户提供推荐功能的同时,对自身的推荐机制改进,更体现了个性化服务的灵活性。     

基于XML/SOAP的校园Web服务体系构架

通过对Web服务系统与传统Web和EAI的比较，认为Web服务更适合于校园网建设，并因此提出一种基于XML的校园网Web服务体系架构。     

面向Web Server的QoS自适应控制鲁棒性研究

给出了一种面向Web服务器的自适应节模型和基于卡尔曼滤波的会话流自适应控制算法，并在此基础上提出了一种Web QoS自适应控制机制，利用在线系统辨识实现动态的连接调度和进程重新分配，从而为不同的服务类提供相应的QoS保证。采用全论域范围内基于离散型卡尔曼滤波方法进行QoS参数的最优预测。仿真结果表明，该自适应Web服务器的QoS控制机制可以实现鲁棒的相对QoS保证，并且能够确保稳定性。