Use Cases for ATM Service - Case Study Example

? USE CASES FOR ATM SERVICE Developing Use Cases for Supporting ATM Service in Retail Banking of institute [Pick the Contents Introduction: 4 Use case for bank customer withdrawing money from an ATM 4 Withdrawal Transaction Use Case: 6 Use case dependency for making an account deposit: 7 Accounts Transfer Use Case: 9 The ethical issue that the use case exposes in connection with the development or use of the ATM system: 11 References: 13 Abstract This document lists down the use cases for withdrawing funds, depositing funds and transferring funds across accounts. It also provides a conclusion on Ethical issues surrounding the facts that the Use Case exposes during the design and use of the ATM System. Introduction: Withdrawing money from an ATM involves the interaction and coordination of many heterogeneous system spatially and logically separated. It involves the interfacing of dissimilar components into one integrated super-system which functions as a money transferring unit. The ATM is one component of the entire money transferring process from the Account holder’s bank account, right into the hands of the ATM operator in the form of currency notes. Use case for bank customer withdrawing money from an ATM Customer Withdrawing Money from the ATM: The following alternative cases could occur during the process of withdrawing money from the ATM: 1. Customer Inserts ATM Card 2. Customer is prompted to select language option 3. Customer selects appropriate language option a.) Customer is asked whether to keep the language option as default and link it to the card b.) Customer enters a yes or a no 4. Customer is taken to the login page where the prompt appears to ‘Enter the PIN’ 5. Customer enters the PIN 6. The ATM prompts the user to select one out of the following options: a) Check Balance b) Get Mini Account Statement c) Get Cash / Withdraw Cash d) Fast Cash / Cash in preset denomination e) Change PIN f) Request Checkbook g) Optional: a. Book Movie Tickets b. Other services 7) Customer enters option for ‘Withdraw Cash’ 8) Customer is asked to enter whether he would like to have a printed advice or not 9) Customer enters a yes or no 10) Events after Cash is requested by the user after he proceeds for cash dispensing a) There are no errors and the cash is dispensed b) There is a shortfall or no stock of cash in denomination entered by the customer c) The ATM is out of cash d) Connection gets timed out due to connectivity issues with the bank servers f) Internal Error of the ATM g) Power Outage 11) Customer is dispensed the cash 12) Customer receives the card back 13) Printed advice is dispensed 14) Customer is prompted for another round of transaction 15) Customer enters a yes or a no a) If customer enters a yes then the entire set of steps from step number 6 or in some cases step number 4 is repeated b) If customer enters a no then the screen is reset and the User Session is closed 16) the ATM is ready for a fresh session / customer. Withdrawal Transaction Use Case: Figure 1: Use Case of Event of a bank customer withdrawing money from the ATM Figure 2: Use Case Diagram showing actors and processes in the process of withdrawing funds from the bank account using an ATM Use case dependency for making an account deposit: Below listed is the step sequence for a customer attempting to deposit a deposit to an account from the ATM: 1. Customer inserts his ATM card 2. Customer is asked to enter a language option 3. Customer is redirected to a page asking for the PIN 4. Customer enters PIN and is redirected to the Menu where transactions can be chosen 5. Customer chooses deposit money into account 6. Customer successfully deposits money into the account. Figure 3: Use Case Diagram for Depositing money into an account through an ATM Accounts Transfer Use Case: In order to make an account transfer from one account to another account the following steps need to be followed by the customer. 1. The customer inserts his ATM card 2. The customer enters language preferences followed by PIN 3. The customer selected form the menu items, and chooses to transfer money from one account to another account. 4. The customer is prompted to select his registered account in the next screen from a (drop down list) 5. The customer selects and is again prompted to select the destination account number (from a drop down list / or a text box depending on whether the system allows for transfer of money to accounts without adding them to the source account 6. The amount entered is verified for validity and the operation is cancelled if the fund are insufficient 7. The amount entered is processed and a payment is initiated to the destination account. 8. The system asks for the next transaction 9. On pressing ‘Yes’ it asks for the next transaction and start all over again from Step 2. 10. On pressing ‘No’ the session is terminated and the card of the bank customer is ejected from the ATM. The ethical issue that the use case exposes in connection with the development or use of the ATM system: Account numbers are one of the most sensitive personal data. It is the access route to all finances of the bank’s customer. One of the major ethical issue related to the development or use of the ATM system is the failure of the network to securely transmit the credentials entered by the ATM user to the bank’s servers for transaction processing. This could lead to leakage of data and eventually hackers gaining access to the account through remote login into the account holder’s account. Another major ethical issue in connection with the development and use of the ATM that the Use Case exposes is the visibility of personally identifiable information to System Administrators, Data Operators for example: Name, email address, phone number, address and date of birth. Regarding security and compliance and Ethics every organisation should have common policies in place to prevent any sort of data privacy breach. Access Control, Multi Layer Data Encryption and Data Protection, Information Security, Biometric Scan etc should be in place to avoid any security or ethical breach. “Regarding security, every organization should have several common policies in place in addition to those already discussed relative to access control methods. These policies include acceptable use policies, due care, separation of duties, and policies governing the protection of personally identifiable information (PII), and they are addressed in the following sections” (Meyers, 2010). All these policies if strictly followed might prevent any ethical or security failure and therefore a failure of the organisation’s commitment to privacy, service level agreements, human resources policies, codes of ethics, and policies governing incident response. Another counteracting force to ethical issue raised by the design and deployment of the ATM system containing the route to sensitive/restricted customer data is the growing usage of Artificial Intelligence in 24X7 IT systems surveillance. Organizations will begin to incorporate artificial intelligence and expert systems into day-to-day business processing. “As this occurs, auditors will need to become more involved in ensuring the adequacy of controls in these systems. Tests of such controls will extend beyond the physical borders of the country because business (commerce) is global.”(Senft, 2010) The following principle could however counteract the loopholes left due to the design and implementation of an ATM system through a Use Case diagram: The below mentioned principles are the substantive duties as an IT Professional. IT professionals have the primary duty to include all affected by a system in the initial systems requirements design and implementation. This would make sure that the entire system has been accounted for and all possible cases can be later incorporated. All stakeholders must be involved and included in the development / implementation phase as appropriate. IT professionals also have a duty to not misuse their technical expertise and knowhow in dealing with those who have lesser knowledge about the system. (Schultz, 2010) References: 1. Mike Meyers (2010, Ch. 3 Pg1). CompTIA A+ Certification All-in-One Exam Guide, Seventh Edition. 2. Sandra Senft, Frederick Gallegos (2010) Chapter 7 - IT Auditing in the New Millennium , Information Technology Control and Audit, Third Edition 3. Robert A. Schultz,(2010), Chapter 9 - IT and Globalized Ethics, Information Technology and the Ethics of Globalization: Transnational Issues and Implications Read More