The Login Page

1. The traditional way - Just add an input box for UmiKey

2. The ATM way - Verify UmiKey first, then verify a PIN

3. Comparison of the 2 approaches

Comparison of the 2 login pages:

1. The Traditional Way:
   • Pros: Minimal changes to login page, no need to add a new page to verify PIN
   • Cons: Not as secure as (2)

2. The ATM Way - Verify UmiKey first, then User inputs PIN, the web site verifies the PIN
   • Pros:
     • Safest – If UmiKey validation fails, User is not asked to enter the PIN, no need to worry about the PIN theft.
     • Most convenient for users!
   • Cons: Need an extra page for the user to enter the PIN