Pictorial security at the ATM: The Visual Identification Protocol