摘要 |
<p>The invention provides a method of authenticating to a user or customer a terminal, such as an automatic teller machine, in a transaction execution system. The terminal is authenticated (300,305,310,315) by a central host using cryptographic techniques, and a personal security phrase (PSP) is sent (370) from the host to the terminal. A message, incorporating the personal security phrase, is communicated (380) to the customer by the terminal, thereby indicating that the terminal is legitimate. The terminal is authenticated to the customer prior to his entering (390) any secret or confidential information, such as a personal identification number, into the terminal. <IMAGE></p> |