The [system] provides [security requirement] against [Threat Model] under [Assumption]
System = ATM提款系統
Security requirement= 身份認證
Threat model = 撿到提款卡並亂試pin碼
Assumption = 使用者沒把pin碼寫在卡片套上或是用生日當pin碼