Secure self-checkout kiosks using Alma API with two-factor authentication

• Main Author: BULAON, Ron
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2021
• Subjects: Security; Authentication; Self-checkout; Kiosk; MFA; Multi-factor authentication; Two-factor authentication; API; One-time password; Information Security; Library and Information Science
• Online Access: https://ink.library.smu.edu.sg/library_research/179; https://ink.library.smu.edu.sg/cgi/viewcontent.cgi?article=1184&context=library_research
• Institution: Singapore Management University

Self-checkout kiosks have become a staple feature of many modern and digitized libraries. These devices are used by library patrons for self-service item loans. Most implementations are not new, in fact many of these systems are simple, straight forward and work as intended. But behind this useful technology, there is a security concern on authentication that has to be addressed. In my proposed presentation, I will discuss the risk factors of self-checkout kiosks and propose a solution using Alma APIs. I will address the technical shortcomings of the current implementations, compared to the proposed solution, and where the weakest link lies. The discussion will also include a demonstration of a working Proof-of-Concept (POC) in Python to show how Two-Factor authentication is the simplest yet best suited approach for the current scenario and why other seemingly possible solutions are not fitted for the current situation.