Application of Number Theory in Designing Secure PIN Systems for ATMs in Nigerian Commercial Banks

This study examines the number-theoretic principles underpinning the design of secure personal identification number systems used in automated teller machines operated by Nigerian commercial banks, contributing to the intersection of pure mathematics and financial technology security. ATM fraud, including card skimming, PIN interception, and social engineering, represents a significant and growing threat to Nigerian bank customers, with the Nigeria Inter-Bank Settlement System reporting substantial annual losses attributable to card-related fraud. The study reviews the mathematical foundations of one-way functions, modular exponentiation, and hash functions as they apply to PIN generation, storage, and verification, drawing on number theory concepts including prime factorisation, Fermat's little theorem, and the Chinese remainder theorem. An analysis of the cryptographic hash functions currently deployed in Nigerian ATM systems is conducted using technical documentation from the Nigeria Inter-Bank Settlement System and published security assessments of the industry. The study models the computational complexity of brute-force PIN attacks under varying hash function choices and PIN length policies, demonstrating mathematically the security gain from extending standard four-digit PINs to six-digit formats. Results confirm that six-digit PINs with salted hashing provide substantially superior resistance to offline dictionary attacks. Recommendations address PIN policy, hash function selection, and the mathematical criteria that should govern future ATM security standard updates. Keywords: number theory, PIN security, hash functions, ATM fraud, Nigerian banking