• 专利附录
  • 专利说明
  • 权利要求
  • 类似技术
  • 同族专利
  • 引用文献
  • 法律状态
  • 优先权
    • 专利摘要:
    PREVENTION AGAINST FRAUD This is an electromagnetic signal transmitter for fraud prevention in a self-service terminal. The electromagnetic signal transmitter comprises a plurality of coil units. The plurality of coil units may include a first inductive coil drive unit comprising a first pair of opposing poles; and a second inductive coil drive unit comprising a second pair of opposite poles, where the second pair of opposite poles is displaced from the first pair of opposite poles in at least two dimensions.
    公开号:BR102012007532B1
    申请号:R102012007532-6
    申请日:2012-04-02
    公开日:2020-12-15
    发明作者:Gary Ross；Graeme Mitchell；Alistair Lowden；Yoshitaka Utsumi
    申请人:Ncr Corporation；
    IPC主号:
    专利说明:

    Field of the Invention
    The present invention relates to fraud prevention. In particular, although not exclusively, the invention relates to preventing unauthorized reading of data from a card. Background of the Invention
    Unauthorized reading of card data, such as data encoded on a card with a magnetic stripe, while the card is being used (hereinafter “card duplication”), is a known type of fraud. Card duplication is typically accomplished by adding a magnetic reading head (hereinafter "strange reader") to an ATM panel to read a magnetic stripe on a customer's card as the customer inserts or ( most commonly) withdraws the card from an ATM. The customer's personal identification number (PIN) is also verified when the customer uses the ATM. Examples of how this is accomplished include: a video camera that captures images of the PINpad at the ATM, a fake PINpad overlay that captures the customer's PIN, or third parties who watch the customer (shoulder surfing) while he / she inserts his PIN. Third parties can then create a card using the card data read by the foreign reader, and can withdraw funds from the customer's account using the card created and the customer's PIN (verified in one of the ways described above).
    Several methods have been proposed to prevent this type of fraud. One method involves transmitting an electromagnetic signal (hereinafter a “blocking signal”) when the card is being transported so that the foreign reader cannot detect the magnetically encoded data due to the presence of the blocking signal. Although this technique can be effective, it is possible to use signal processing to cancel a blocking signal using another foreign reader that receives only the blocking signal and uses that as a reference signal. The reference signal is used to cancel the blocking signal by subtracting the reference signal from the composite signal (which comprises the reference signal and the magnetic signal representing the data card account data) to reveal the data signal of the account.
    It could be advantageous to have the ability to prevent or attenuate the filtering of the blocking signal. Summary of the Invention
    Consequently, the invention generally provides methods, systems, apparatus, and software to provide enhanced fraud prevention using a plurality of coil units.
    In addition to the Summary of the Invention provided above and the subject described below in the Detailed Description, the following paragraphs in this section are intended to provide an additional basis for the alternative claim language for possible use during the process of this application, if required. If that request is granted, some aspects may be related to the claims added during the process of that application, other aspects may be related to the claims deleted during the process, other aspects may be related to the subject never claimed. Furthermore, the various aspects detailed below are independent of each other, except where stated otherwise. Any claim corresponding to one aspect should not be interpreted as incorporating any element or characteristic of the other aspects except where expressly stated to the contrary in that claim.
    According to a first aspect, an electro-magnetic signal transmitter for fraud prevention is provided in an automatic service terminal, the electromagnetic signal transmitter comprising: a first inductive coil unit comprising a first pair of poles opposites; and a second inductive coil unit comprising a second pair of opposite poles, where the second pair of opposite poles is displaced from the first pair of opposite poles in at least two dimensions.
    The first and second inductive coil units can be mounted on a circuit board.
    The first and second pairs of opposite poles can be oriented so that when the circuit board is mounted on a card reader guide, the first and second pairs of opposite poles are oriented transversely to a path along which a magnetic stripe on a data card it moves.
    Each inductive coil unit may comprise a ferrite core generally C-shaped wound with a wire in a central portion.
    The electromagnetic signal transmitter may additionally comprise an external controller to create a first drive signal for the first inductive coil unit and a second drive signal for the second inductive coil unit.
    The external controller can include an operable inductive coil unit circuit to create a signal for each inductive coil unit that has a fixed frequency. The fixed frequency can be a frequency selected from the range of approximately one hundred Hertz to ten kilohertz (100 Hz to 10 kHz), or the narrowest range from 500 Hz to 3 kHz. In one mode, the fixed frequency can be 2kHz.
    Alternatively, the external controller may include an operable inductive coil unit circuit to create a signal for each inductive coil unit that has a frequency that periodically jumps within a defined range (such as 500Hz to 2.5kHz). The frequency can skip after each cycle (for example, activated by a zero-pass detector) or after each "p" cycle, where "p" is a number between two and one hundred.
    The external controller may also include a random signal generating circuit in order to create a first random signal for overlapping the fixed frequency to excite the first inductive coil unit, and in order to create a second (different) random signal for overlapping fixed frequency to excite the second inductive coil unit.
    The random signal generator can create a random digital signal (that is, a standard bit sequence) or a random analog signal (that is, a continuously variable frequency signal).
    When a random analog signal is created, the continuously variable frequency can vary between upper and lower frequency limits. The lower frequency limit can be approximately 500Hz; the upper frequency limit can be approximately 10kHz; although any other convenient frequency caps can be selected.
    Random signal generators are well known for elements skilled in the art. For example, resistors and Zener diodes can be used. If a Zener diode is polarized on the slope of the avalanche rupture region of its current-voltage characteristic curve then it will exhibit random noise voltage. This noise voltage can be used to generate a random signal.
    The random signals generated from such electrical components are typically low voltage and low current, so these are generally amplified to produce a stronger random analog signal. If a digital signal is required, then that random analog signal can be sampled at different time points to generate digital data. Digital data can represent a random number, or multiple samples of digital data can be combined to form a random number with several bits.
    The first pair of opposite poles can be displaced from the second pair of opposite poles in the same plane.
    It must be assessed now that the displacement of the opposite pole pairs in at least two dimensions makes it more difficult for a fraudster to filter the combined signal from the two inductive coil units.
    According to a second aspect, a method of energizing an electromagnetic signal transmitter for fraud prevention in a self-service terminal is provided, the method comprising: creating a first trigger signal that comprises a fixed base frequency over which a random signal is superimposed; creating a second drive signal comprising a fixed base frequency on which a different random signal is superimposed; energize a first inductive coil unit using the first trigger signal created; and energizing a second inductive coil unit, longitudinally displaced from the first inductive coil unit, using the second drive signal created.
    According to a third aspect, a self-service terminal (SST) is provided which comprises: a card reader operable to detect the presentation of a card; a card reader guide mounted on a self-service terminal panel and aligned with the card reader; and an electromagnetic signal transmitter located within the card reader guide and comprises: a first inductive coil unit that includes a first pair of opposite poles; and a second inductive coil unit that includes a second pair of opposite poles, where the second pair of opposite poles is displaced from the first pair of opposite poles in at least two dimensions.
    The self-service terminal can additionally comprise an operable proximity sensor to detect a customer card while the card is presented by the customer.
    The proximity sensor can also be located inside a card reader guide.
    The self-service terminal can be an automatic teller machine (ATM), an information kiosk, a financial services center, a bill payment kiosk, a lottery shop, a postal service machine, an entrance and / or exit terminal as those used in stores, hotels, car rental companies, games, healthcare systems, and airlines, and the like.
    According to a fourth aspect, an electromagnetic signal transmitter for fraud prevention is provided in a self-service terminal, the electromagnetic signal transmitter comprising a plurality of coil units.
    For clarity and simplicity of description, not all combinations of elements provided in the aspects mentioned above were expressly presented. However, the person skilled in the art will recognize directly and precisely that unless it is not technically possible, or is explicitly stated to the contrary, the clauses referring to one aspect are intended to apply mutatis mutandis as optional features of each other aspect to which those clauses would possibly be related. These and other aspects will become obvious from the following specific description, provided by way of example, with reference to the attached drawings. Brief Description of Drawings
    Figure 1 is a pictorial diagram of a rear perspective view of a card reader guide for use in a self-service terminal (SST) according to an embodiment of the present invention;
    Figure 2 is an exploded pictorial diagram illustrating the components of the card reader guide in Figure 1;
    Figure 3 is a front perspective view of part (the cover of the card reader guide) of the card reader guide of Figure 1;
    Figure 4 is a rear perspective view of the card reader guide cover of Figure 3;
    Figure 5 is a pictorial plan view of part (the magnetic reader detector) of one of the components of the card reader guide shown in Figure 2;
    Figure 6 is a pictorial perspective view of the card reader guide of Figure 1, with the card reader guide cover of Figure 3 shown as partially transparent to display the magnetic reader detector of Figure 5 located therein;
    Figure 7 is a pictorial plan view of another part (the signal generator) of one of the components of the card reader guide shown in Figure 2;
    Figure 8 is a pictorial perspective view of the signal generator of Figure 7;
    Figure 9 is a simplified schematic view of an SST panel that incorporates the card reader guide of Figure 1 and illustrates an operable SST controller for controlling the SST;
    Figure 10 is a block diagram of a detector controller for controlling the operation of the magnetic reader detector of Figure 5 and the signal generator of Figure 7;
    Figure 11 is a graph illustrating a signal from the magnetic reader detector of Figure 5 while one of the customer's hands is present in the vicinity of the card reader guide of Figure 1 to insert and then remove a card; and
    Figure 12 is a flow chart that illustrates the operation of software components that run on the Figure 9 SST controller.
    It must be assessed that some of the drawings provided are based on computer renderings from which the actual physical modalities can be produced. As a result, some of these drawings contain details that are not essential for understanding these modalities, but will transmit useful information to an element versed in the technique. Therefore, not all parts shown in the drawings will be specifically mentioned. Furthermore, to help clarify and prevent numerous lines of indication from confusing the drawings, not all numerical references will be shown on all drawings. In addition, some features are removed from some views to further enhance clarity. Detailed Description
    First, reference is made to Figure 1, this is a pictorial diagram of a rear perspective view of a card reader guide 10 according to an embodiment of the present invention. The card reader guide 10 comprises a card reader guide cover 12 which defines three flaps provided with openings 14 through which the card reader guide cover 12 is coupled to a rear part of a panel (not shown) in Figure 1) of an SST.
    The card reader guide 10 additionally comprises a protection plate 20 coupled to the card reader guide cover 12 by three screws 22a, b, c.
    Now reference is also made to Figure 2, this is an exploded pictorial diagram illustrating the components of the card reader guide 10. Figure 2 illustrates a proximity detector 30 in the form of a magnetic reader detector and a signal generator. 40 to create a blocking signal. Figure 2 also shows a data card 42 (in the form of a magnetic stripe card) aligned with the card reader guide 10.
    The card reader guide 10 is operable to receive the magnetic stripe card 42, which is inserted by a customer. A magnetic stripe card has a large flat area (the length and width) on each of the opposite sides and four thin edges between them. Two of these edges (front and back) 43a, b are narrower than the other two edges (the side edges) 44a, b. The magnetic stripe side (the bottom side) of a card refers to the large flat area that contains a magnetic stripe 45 (shown in dashed line in Figure 2). The magnetic stripe 45 is arranged parallel to the side edges 44a, b.
    Opposite the magnetic stripe side (the upper side 47) is a large flat area that (typically) does not contain a magnetic stripe 45, but typically includes embossed account and customer information there. On some cards, the upper side 47 may contain integrated circuit contacts. On the magnetic stripe side of the card, the magnetic stripe 45 is not centrally located; instead, it is located closer to one side edge (referred to as the magnetic stripe edge 44a) than to the other side edge (referred to as the edge without magnetic stripe 44b).
    Reference is now also made to Figures 3 and 4, which are seen in perspective front and back, respectively, of the card reader guide cover 12.
    The card reader guide cover 12 comprises a molded plastic portion sized to be accommodated within, and partly protruding through, an opening in a panel (not shown).
    The card reader guide 10 defines a card slot 50 that generally extends horizontally over the guide 10 towards the center line 52, from an end without a stripe 54 to an end of the stripe 56. When the card magnetic stripe 42 is correctly inserted into the card slot 50 by a customer so the magnetic stripe 45 on the magnetic stripe card 42 is located closer to the stripe end 56 than to the unstripe end 54.
    The card reader guide 10 defines a trail line 58 which generally extends vertically (perpendicular to the card reader entrance 50). The card reader guide 10 also defines a first (lower) hump 60.
    The first (lower) protrusion 60 includes a flat section 62 over which the magnetic stripe side of a card passes as card 42 is inserted. The first (lower) protuberance 60 also includes an upright section 64 that extends from trail line 58 to an end surface 66. The end surface 66 is spaced from the card slot 50 to ensure that the card does not protrudes beyond the end surface 66 when ejected by a card reader (not shown) into the SST.
    A magnetic stripe path 68 is defined in the flat section 62. This is the portion of the flat section 62 with which the magnetic stripe 45 on a properly inserted data card 42 will be aligned when the card 42 is inserted or removed by a customer. In this mode, the magnetic stripe path 68 is centered on the second track of a magnetic stripe. The second track that carries the customer's account information to data card 42, then the second track is the track that strange readers try to read.
    The first protrusion 60 also defines a cavity (best seen in Figure 4 and generally shown by the arrow 70), which is referred to here as the “detector cavity”, and which is below the flat section 62 and within the reader guide cover of card 12.
    The card reader guide 10 defines a similar second (upper) protrusion 80, aligned, and opposite to the first protrusion 60.
    The second (upper) protuberance 80 includes a flat section 82 (best seen in Figure 4) under which a magnetic stripe side of a card 42 passes as card 42 is inserted. The second (upper) protrusion 80 also includes an upright section 84 that extends from the trail line 58 to an end surface 86. The second protrusion 80 defines a cavity 90 (referred to here as the "signal generator cavity" ) over the flat section 82 and inside the card reader guide cover 12.
    Again with reference to Figure 2, the magnetic reader detector 30 is sized to be accommodated inside the detector cavity 70 and is mounted thereon by means of two screws 102 that engage with the card reader guide 10. The magnetic reader detector 30 includes a communication cable 104 for routing signals and power between the auto switch detector 30 and an external controller (not shown in Figure 2). Such a controller could typically be located in an SST where the card reader guide 10 is installed.
    Similarly, signal generator 40 is dimensioned to be accommodated within the signal generator cavity 90 and is mounted thereon by means of two screws 106 that engage the card reader guide 10. The signal generator 40 also includes a cable output 108 to route signals and power between signal generator 40 and the external controller (not shown in Figure 2).
    A drain tube 109 is also provided to drain any water ingress into card slot 50.
    Now reference is made to Figure 5, this is a pictorial plan view of part of the magnetic reader detector 30. The magnetic reader detector 30 comprises a printed circuit board (pcb) track 110 in which part of a sensor is arranged capacitive 112 and an electronic unit circuit (not shown) located below the pcb track 110.
    The magnetic reader detector 30 is physically configured to conform to the shape of the detector cavity 70 so that when the magnetic reader detector 30 is inserted into the detector cavity 70 the pcb track 110 snaps into place.
    Capacitive sensor 112 operates similarly to a capacitive proximity sensor, as will now be described. Capacitive sensor 112 comprises a transmission plate 114 separated from a receiving plate 115 by a linear track (a land strip) 116. The transmission plate 114, reception plate 115, and land strip 116 are defined as driving tracks on the 110 pcb trail.
    The stripe 116 is located on the pcb track 110 so that when the magnetic reader detector 30 is inserted into the lower protrusion 60 of the card reader guide 10, the terrestrial strip 116 is aligned with the path of the magnetic stripe 68. In particular , the land strip 116 is aligned with the second track of the magnetic stripe path 68. This is illustrated in Figure 6, which is a pictorial perspective view of the card reader guide 10, with the card reader guide cover 12 shown as partially transparent to display the auto switch detector 30.
    Capacitive sensor 112 operates by transmitting an alternating signal over the transmission plate 114, this creates an electric field between the transmission plate 114 and the receiving plate 115 which is arched over the terrestrial strip 116, the air gap in the arc that provides on the dielectric. If a material (such as a strange reader, or a data card) is inserted into this electric field then the dielectric changes, this changes the phase and the magnitude of the electric field. This is detected by the receiving plate 115.
    The unit and signal processing circuitry (not shown) is located on a 117 pcb unit (located below the pcb track 110, as shown in Figure 6) to provide a signal by changing and detecting changes in phase and magnitude.
    The geometry, configuration and location of the transmission plate 114, reception plate 115, and the terrestrial strip 116 optimize the probability that capacitive sensor 112 detects a foreign reader, since any foreign reader must be located at a point on which the second the card's magnetic stripe path will pass, and the electric field is located along that path.
    The pcb track 110 also includes two magnetic sensors 118a, b mounted on its underside.
    Communication cable 104 transmits a signal from each of the two magnetic sensors 118, energy to supply capacitive sensor 112, and a response signal from capacitive sensor 112.
    Reference is now made to Figures 7 and 8, these are a flat and pictorial perspective view, respectively, of part of the signal generator 40 shown in relation to the magnetic stripe path 68.
    The signal generator 40 comprises a pair of inductive coil units 120a, b. Each inductive coil unit 120a, b comprises a ferrite core generally C-shaped (when viewed from the side) 122a, b having opposite poles (north pole 124a, b (only 124a is shown) and south pole 126a, b) at opposite ends, and are wound with yarn 128a, b in a central portion. Each inductive coil unit 120a, b is driven by a signal from the external controller (not shown). The C-shaped ferrite cores ensure that most of the electromagnetic field generated by the inductive coil units 120a, b extends downwards towards the magnetic stripe path 68, instead of upwards.
    Each inductive coil unit 120a, b traverses the magnetic stripe path 68, however the two inductive coil units are longitudinally displaced in relation to each other (as shown in Figure 7). Thus, at least one of the two inductive coils 120a, b is not centered on the magnetic stripe path 68. This longitudinal displacement makes it more difficult for a fraudster to filter the combined signal from the two inductive coil units 120a, b.
    One of the two magnetic sensors 118a, b is aligned with a central point between the poles 124a, 126a of the first ferrite core 122a, the other of the two magnetic sensors 118b is aligned with a central point between the poles of the second ferrite core 122b. each of the two magnetic sensors 118a, b measures the magnetic signal present. If the two inductive coils 120a, b are active then a large magnetic signal must be detected by each of the two magnetic sensors 118a, b.
    Reference is also now made to Figure 9, this is a pictorial diagram of a panel 140 of an SST 150 that includes the card reader guide 10, and shows data card 42 partially inserted in it.
    A motorized card reader 170 (shown in dotted line) is aligned with, and located behind, card reader guide 10 so that a card transport path (not shown) in card reader 170 aligns with the entrance for card 50 from card reader guide 10. Card reader 170 includes a card reader controller 172 to control the operation of card reader 170.
    In this modality the motorized card reader belongs to Sankyo Seiki Mfg Ltd at 1-17-2, Shinbashi, Minato-Ku, Tokyo, 1058633, Japan. However, any other suitable motorized card reader could be used.
    The SST also includes an SST controller 174, which includes a card guide control circuit 180 implemented as an expansion card that fits into a motherboard (not shown) on which a processor 182 is mounted. Processor 182 runs an SST control program 184.
    The SST 184 control program controls the operation of the SST, including communicating with modules such as the 170 card reader, and presenting a sequence of screens to a customer to guide the customer during a transaction.
    Now reference is also made to Figure 10, this is a simplified block diagram of the card guide control circuit 180 which is used to control the electronic components in the card reader guide 10 and to indicate whether a strange reader may be present .
    Control circuit 180 receives five inputs. Three of these inputs are powered by a detector 190, the other two inputs are powered by a monitor 200.
    One of the detector inputs (the width switch state) 202 comes from card reader 170 and indicates the status of a width switch (not shown) on card reader 170. As is known in the art, when the width switch is closed, it indicates that an object inserted in card reader 170 has a width that corresponds to that of a standard data card.
    Another detector entry (the shutter status) 204 indicates the status of a shutter (not shown) on the card reader 170. The shutter can be opened or closed and controls access to a card reader path within the card reader 170. The shutter 170 is only opened by the card reader controller 172 (Figure 9) inside the card reader 170 if the width switch is closed and a magnetic pre-reading head (not shown) on the card reader 170 detects a magnetic stripe. As is known in the art, the pre-reading head is used to ensure that a data card is inserted in the correct orientation.
    The third detector input (of capacitive sensor 112) 206 indicates the status of the output signal of capacitive sensor 112. The capacitive sensor input 206 indicates whether an object is present in the vicinity of the magnetic stripe path 68.
    The two inputs 210,212 (referred to as magnetic signal inputs) that are fed into monitor 200 come from the two magnetic sensors 118a, b. These 210,212 magnetic signal inputs indicate the presence of a magnetic signal in each of the two magnetic sensors 118a, b respectively.
    Detector 190 includes a logic circuitry (not shown in detail) and provides an active output 220 (referred to as the blocking signal) when the width switch is open (width switch status input 202 is active), the shutter is opened (shutter status input 204 is active), and a foreign object is detected by capacitive sensor input 206 (essentially this is a Boolean AND function). When this condition occurs, control circuit 180 generates a blocking signal. This must occur whenever a card is inserted by a customer, as the inserted card changes the dielectric value of the air gap on capacitive sensor 112.
    Blocking signal 220 is fed into a random number generator circuit 230 (which can generate truly random or pseudo-random numbers). The random number generation circuits are well known for the elements skilled in the art, so they will not be described in detail here.
    The random number generator circuit 230 provides two outputs: a first random signal 232 and a second random signal 234. These two outputs 232,234 (which contain different random signals) are fed into a coil drive circuit 240.
    The coil drive circuit 240 generates two base signals (a first base signal and a second base signal), each centered at approximately 2kHz. The coil drive circuit 240 applies the first random signal 232 to the first base signal; and the second random signal 234 to the second base signal, and outputs these as a first trigger signal 242 and a second trigger signal 244 respectively. In this mode, the random signals are in the form of a standard bit sequence. The coil drive circuit 240 uses random signals (the standard bit strings) to change the duty cycle of each of the first and second base signals. That is, random signals are used to provide pulse width modulation of 2kHz signals. The important point is that the random signals 232,234 are used to give some randomness to the normal base signals (2kHz). This randomness may comprise pulse width modulation, amplitude modulation, superimposing a high frequency component on a base signal, or any other convenient technique. This added randomness makes filtering signals more difficult.
    The first drive signal 242 is output to the first inductive coil unit 120a; and the second drive signal 244 is output to the second inductive coil unit 120b. Thus, the first and second unit signals 242,244 are the signals that drive the inductive coil units 120a, b.
    The first and second unit signals 242,244 are also output to the monitor 200. The main purpose of the monitor 200 is to ensure that the magnetic reader detector 30 is not (i) blocked by an external signal, or (ii) displayed so that it do not detect a strange reader. To achieve this goal, monitor 200 continuously monitors the two magnetic signal inputs 210,212 from the two magnetic sensors 118a, b. As mentioned above, these 210,212 magnetic signal inputs indicate the presence of electromagnetic signals on the two magnetic sensors 118a, b.
    Monitor 200 correlates these two magnetic signal inputs 210,212 with blocking signal 220. Due to time delays in creating an electromagnetic field in coil units 120, there will be a short delay between each coil drive signal 242,244 being making it active, and the two magnetic sensors 118a, b that detect an electromagnetic field. Then, there will be a delay between the coil unit signals 242,244 that are becoming active and the magnetic signal inputs 210,212 that are becoming active. Similarly, when the coil unit signals 242,244 are inactive, there will be a short delay between the 210,212 magnetic signal inputs that are inactive.
    If monitor 200 detects that a magnetic signal input 210,212 is active at the time the associated coil drive signal 242,244 has just become active, then this may indicate that a third person is trying to block the magnetic reader detector 30. This is because there should be a time delay between the 242,244 coil drive signal that is becoming active and an electromagnetic field that is being detected. If there is no time delay, then the 210,212 magnetic signal input that was detected as active must be active before the coil drive signal is activated. If such an event occurs on "m" consecutive occasions, then monitor 200 activates a blocking attack output 252. Blocking attack output 252 indicates that an electromagnetic field is present and has not been generated by coil units 120a, b. In this mode, “m” is four, so blocking attack output 252 is activated if this condition occurs on four consecutive occasions.
    Similarly, if monitor 200 detects that a magnetic signal input 210,212 is inactive at the moment when the associated coil drive signal 242,244 has just become inactive, then this may indicate that a third person is trying to protect (or hide) the magnetic reader detector 30 of the electromagnetic field generated by the coil units 120a, b. This is because there must be a time delay (an interval) between the coil drive signal 242,244 which is becoming inactive and the electromagnetic field generated by these coil units 120a, b which is reduced to zero. If there is no time delay, then the 210,212 magnetic signal input that was detected as inactive must be inactive before the coil drive signal is inactivated. If such an event occurs on “n” consecutive occasions, then monitor 200 activates a weak output 254. The weak attack output 254 indicates that no electromagnetic fields are present even though coil units 120a, b are generating (or trying to generate) an electromagnetic field. This may indicate that a third person is trying to protect (or hide) the two inductive coil units 120a, b to prevent them from blocking a foreign reader. In this mode, “n” is four, so weak output 254 is activated if this condition occurs on four consecutive occasions.
    If both magnetic sensors 118a, b detect electromagnetic signals that correlate with first and second unit signals 242,244, then monitor 200 activates a normal (OK) output 256 to indicate that the correct blocking signals have been detected from the units inductive coil 120a, b. In other words, if both magnetic sensors 118a, b detect electromagnetic signals that are correctly offset from the first and second unit signals 242.244 respectively, then monitor 200 activates normal output 256. In this mode, correctly offset means that there is a delay of time between each magnetic sensor 118a, b and its first and second associated trigger signal 242,244 which corresponds to an expected time delay.
    The card guide circuit 180 also includes a local processor 260 that runs firmware 262. Firmware 262 interfaces with the logic circuitry on the card guide circuit 180, and communicates with the SST 184 control program through a USB 264 interface.
    Local processor 260 receives the three outputs 252,254,256 from monitor 200 and also blocking signal 220, and firmware 262 decides whether to trigger an alarm based on the state of these signals.
    Firmware 262 can transmit an alarm signal if blocking signal 220 has been active for longer than a predetermined period of time, for example, one minute, or if weak output 254 or blocking attack output 252 is active , or if weak output 254 or blocking attack output 252 has been active for longer than a predetermined time (for example, five seconds).
    Firmware 262 communicates with the SST 184 control program and provides an alarm signal (which can be active or inactive) via the USB 264 interface. This allows the SST 184 control program to act if the alarm signal is active. Firmware 262 can also include a simple network management protocol (SNMP) agent (not shown) that transmits an alarm system to a remote management center (not shown) if the alarm signal is set as active by firmware 262 .
    During operation, when a customer inserts data card 42, the width switch is closed and the pre-reading head detects the magnetic stripe 45 on the underside of card 42. Card reader 170 then opens the shutter. Capacitive sensor input 206 indicates that an object (data card 42) is present. This combination causes detector 190 to activate blocking signal 220.
    The active blocking signal 220 causes the random number generator 230 to generate the first and second random signals 232,234, and the coil unit 240 is applied to the first and second base signals to generate the first and second trigger signals 242,244 , which now have different operating cycles. These signals 242,244 are used to power the inductive coil units 120a, b respectively, creating electromagnetic fields around the data card 42. In this embodiment, the random signals 232,234 are continuous bit streams that are applied to the base signals as the base signals are being generated.
    Monitor 200 attempts to correlate the two inputs 210,212 from the two magnetic sensors 118a, b with the first and second unit signals 242,244.
    If the signals correlate (ie, the transitions are correct and occur at approximately the correct time delay) then monitor 200 activates normal output (OK) 256.
    If when the first drive signal 242 is active, the magnetic signal input 210 is already active, then the monitor 200 registers this as a potential block and adds a counter. If this occurs four times in a row, then monitor 200 activates lockout attack output 252. If this does not occur four times in a row, for example, on the third occasion the state is correct, then monitor 200 resets the counter.
    Similarly, if when the second trigger signal 244 is inactive, the magnetic signal input 212 is already inactive, then monitor 200 registers this as a potential protection attack and adds a counter. If this occurs four times in a row, then monitor 200 activates weak output 254. If this does not happen four times in a row, for example, on the second occasion the state is correct, then monitor 200 resets the counter.
    In this mode, if blocking attack signal 252 or weak output 254 is active, then card guide control circuit 180 (specifically, firmware 262) transmits an alarm to the SST 184 control program. the SST 184 control program to return data card 42 to the customer and then remove the SST 150 from operation and send an alarm signal to a remote management center (not shown) to request a visit from a service engineer.
    Another feature of this modality is that it can be checked whether the card reader guide 10 has been affected, for example, by removing the card reader guide 10 from panel 140 and replacing the card reader guide 10 with a fake reader guide that incorporates a strange reader. Once removed from panel 140, the card reader guide 10 can be placed by a fraudster inside the SST 150 so that it continues to send signals to the card guide control circuit 180, but is not able to block the reader strange, because it is very far from the strange reader. This modality detects this type of activity by correlating a signal from the card reader guide 10 to a signal from the card reader 170, as will now be described with reference to Figures 11 and 12.
    Figure 11 is a graph 270 showing a signal from the magnetic reader detector 30 while one of the customer's hands is present in the vicinity of the card reader guide 10.
    As shown in Figure 11, there are two main areas where a sign is positive, that is, where the customer's hand is present during card insertion (region 272) and where the customer's hand is present during card removal (region 272) 274).
    In the card insertion zone 272, when the customer's hand approaches the card reader guide 10 to insert the data card 42, the magnetic reader detector 30 generates an increasing signal 280; while, when the customer's hand is not on the card reader guide 10 after inserting the data card 42, the magnetic reader detector 30 generates a decreasing signal 282.
    In the card removal zone 274, when the customer's hand approaches the card reader guide 10 to remove the data card 42, the magnetic reader detector 30 generates a rising signal 284; while, when the customer's hand is not on the card reader guide 10 after removing the data card 42, the magnetic reader detector 30 generates a decreasing signal 286.
    Figure 12 is a flowchart 300 that illustrates the operation of the SST control program 184 in relation to detecting the presence of the customer while a customer is inserting data card 42. These steps are performed simultaneously with, and independently of, some of the steps performed by the card guide control circuit 180 of Figure 10.
    Initially, the SST 184 control program performs an attraction sequence (step 302) during which a screen is displayed asking a customer to insert their data card.
    The SST 184 control program awaits notification from the software (drivers and / or service providers) associated with card reader 170 that a data card has been received on card reader 170 (step 304).
    Once a data card has been received, the SST 184 control program checks whether a customer has been detected by the magnetic reader detector 30 (step 306). In this mode, this is implemented by firmware 262 notifying the SST 184 control program when the blocking signal (at output 220 of detector 190) is active. This is because the blocking signal is only active when the width switch is closed, the shutter is open, and the magnetic reader detector 30 detects the customer (and / or the customer card).
    If a customer is detected (typically the customer's hand is still close enough to the card reader guide 10 that will be detected by the magnetic reader detector 30) then the SST control program 184 resets a counter (step 308) and continues with the transaction normally (step 310).
    If a customer is not detected, then an alarm event is triggered by the SST 184 control program (step 312).
    The SST 184 control program then adds a counter (step 314) and checks whether a predetermined criterion has been met (step 316). This predetermined criterion can be established so that a single alarm event meets the criterion; alternatively, multiple consecutive alarm events may be required. In this mode, two successive alarm events are required (that is, two clients in a queue must not be detected) before the SST 184 control program transmits an alarm to the remote management center.
    If the predetermined criterion is not met, then the transaction proceeds normally (step 310).
    If the next customer is detected by the magnetic reader detector 30 then the SST 184 control program resets the counter (step 308) and proceeds with that transaction (step 310).
    If the next customer is not detected by the magnetic reader detector 30, then the predetermined criterion will have been met (two successive customers not detected). In such a case, the SST 184 control program transmits an alarm signal to the remote management center (step 318).
    The SST 184 control program then returns data card 42 to the customer, completes the transaction, removes the operating SST 150 (step 320) until a service engineer (sent by the remote management center) visits the SST 150 and confirms that the card reader guide 10 is operating correctly and has not been moved.
    It should be appreciated now that this modality allows the SST 150 to verify that the card reader guide 10 has been removed by attempting to correlate a signal from the card reader guide 10 to a signal from the card reader 170.
    Various modifications can be made in the embodiment described above within the scope of the invention, for example, in other embodiments, the number of inductive coil units 120 can be greater than two. In other embodiments, the inductive coil units 120 can be driven at a frequency except 2kHz.
    In other embodiments, the number of times in a row that a correlation must be incorrect before the appropriate signal is activated can be more or less than four, and can differ between the blocking attack output and the weak output.
    In other embodiments, control circuit 180 may include a built-in alarm.
    In other modalities the shape of the protuberances may differ from those described above.
    In other embodiments, the magnetic reader detector 30 may be located outside the card reader guide; for example, the magnetic reader detector 30 can be mounted directly on the SST panel.
    In other modalities, instead of using a random digital signal (a bit pattern) superimposed on a fixed signal; the random signal generator can create a random analog signal (ie, a continuously variable frequency signal).
    In other embodiments, instead of, or in addition to, moving the coil units longitudinally, the coil units can be laterally displaced relative to each other.
    The steps of the methods described here can be performed in any suitable order, or simultaneously when appropriate.
    The terms "comprising", "including", "incorporating", and "possessing" are used here to indicate an open list of one or more elements or steps, not a closed list. When such terms are used, those elements or steps in the list are not exclusive to other elements or steps that can be added to the list.
    Except where otherwise indicated by context, the terms “one” and “one” are used here to indicate at least one of the elements, integers, steps, characteristics, operations, or components mentioned, but do not exclude elements, integers, steps , features, operations, or additional components.
    The presence of larger words and phrases such as "one or more", "at least", "but without a limiting character" or other similar phrases in some cases does not mean, and should not be interpreted as limiting in some cases where such larger phrases do not are used.
    权利要求:
    Claims (14)
    [0001]
    1. Electromagnetic signal transmitter (40) for fraud prevention in a self-service terminal (150), the electromagnetic signal transmitter (40) FEATURED by the fact that it comprises a plurality of coil units (120a, b) and the plurality coil units (120a, b) comprise: a first inductive coil unit (120a) comprising a first pair of opposite poles (124a, 126a); and a second inductive coil unit (120b) comprising a second pair of opposite poles (124b, 126b), where the second pair of opposite poles (124b, 126b) is displaced from the first pair of opposite poles (124a, 126a) in at least two dimensions.
    [0002]
    2. Electromagnetic signal transmitter (40), according to claim 1, CHARACTERIZED by the fact that the first and second inductive coil units (120a, b) are mounted on a circuit board.
    [0003]
    3. Electromagnetic signal transmitter (40), according to claim 1, CHARACTERIZED by the fact that the first and second pairs of opposite poles (124a, 126a, 124b, 126b) are oriented so that when the circuit board is mounted on a card reader guide (10), the first and second pairs of opposite poles (124a, 126a, 124b, 126b) are oriented transversely to a path along which a magnetic stripe (45) on a data card (42) moves.
    [0004]
    4. Electromagnetic signal transmitter (40) according to claim 1, CHARACTERIZED by the fact that each inductive coil unit (120a, b) comprises a ferrite core generally C-shaped (122a, b) wound with wire (128a, b) in a central portion.
    [0005]
    5. Electromagnetic signal transmitter (40) according to claim 1, CHARACTERIZED by the fact that it additionally comprises an external controller (180) to create a first drive signal (242) for the first inductive coil unit (120a) and a second drive signal (244) for the second inductive coil unit (120b).
    [0006]
    6. Electromagnetic signal transmitter (40) according to claim 5, CHARACTERIZED by the fact that the external controller (180) includes an operable inductive coil unit circuit (240) to create a signal for each inductive coil unit (120a, b) which has a frequency that periodically bounces within a defined range.
    [0007]
    7. Electromagnetic signal transmitter (40) according to claim 5, CHARACTERIZED by the fact that the external controller (180) includes an operable inductive coil unit circuit (240) to create a signal that has a fixed frequency for each inductive coil unit (120a, b).
    [0008]
    8. Electromagnetic signal transmitter (40) according to claim 7, CHARACTERIZED by the fact that the external controller (180) also includes a random signal generating circuit (230) to create a first random signal to overlap the fixed frequency to excite the first inductive coil unit (120a), and create a different second random signal for overlapping the fixed frequency to excite the second inductive coil unit (120b).
    [0009]
    9. Electromagnetic signal transmitter (40), according to claim 8, CHARACTERIZED by the fact that the random signal generator creates a random digital signal.
    [0010]
    10. Electromagnetic signal transmitter (40), according to claim 8, CHARACTERIZED by the fact that the random signal generator creates a random analog signal.
    [0011]
    11. Electromagnetic signal transmitter (40) according to claim 8, CHARACTERIZED by the fact that the first pair of opposite poles (124a, 126a) is displaced from the second pair of opposite poles (124b, 126b) in the same plane.
    [0012]
    12. Method for energizing an electromagnetic signal transmitter (40) for fraud prevention in a self-service terminal (150), the method CHARACTERIZED by the fact that it comprises: creating a first trigger signal (242) that comprises a frequency fixed base to which a random signal is superimposed; creating a second drive signal (244) comprising a fixed base frequency on which a different random signal is superimposed; energize a first inductive coil unit (120a) using the first trigger signal (242) created; and energizing a second inductive coil unit (120b), longitudinally displaced from the first inductive coil unit (120a), using the second drive signal (244) created.
    [0013]
    13. Self-service terminal (SST) (150), CHARACTERIZED by the fact that it comprises: a card reader (160) operable to detect the presentation of a card (42); card reader guide (10) mounted on a self-service terminal panel (150) and aligned with the card reader (160); and an electromagnetic signal transmitter (40) located within the card reader guide (10) and comprising: a first inductive coil unit (120a) which includes a first pair of opposite poles (124a, 126a); and a second inductive coil unit (120b) which includes a second pair of opposite poles (124b, 126b), where the second pair of opposite poles (124b, 126b) is displaced from the first pair of opposite poles (124a, 126a) in at least two dimensions.
    [0014]
    14. Self-service terminal (150), according to claim 13, CHARACTERIZED by the fact that the self-service terminal (150) additionally comprises a proximity sensor located inside the card reader guide (10) operable to detect a customer's card while the card is presented by the customer.
    类似技术:
    公开号 | 公开日 | 专利标题
    BR102012007532B1|2020-12-15|electromagnetic signal transmitter for fraud prevention in a self-service terminal, method for energizing an electromagnetic signal transmitter for fraud prevention in a self-service terminal, and self-service terminal
    US8915434B2|2014-12-23|Fraud prevention
    US8584947B2|2013-11-19|Fraud prevention
    US10152615B2|2018-12-11|Fraud prevention
    ES2360251T3|2011-06-02|CARD READER.
    CN101971187B|2015-02-25|Protective device and method for preventing skimming on a card reader
    JP2009151762A|2009-07-09|Card reader device and automatic teller machine
    US8704633B2|2014-04-22|Fraud prevention
    JP5321623B2|2013-10-23|Human body communication terminal
    ES2588996T3|2016-11-08|Device for reading a chip card and procedure for detecting a Skimming module
    JPH1033807A|1998-02-10|Management device for game machine
    JP2012027641A|2012-02-09|Unit and program for controlling display image, and automated teller machine
    JP2004086325A|2004-03-18|Settlement terminal device with illegally altered detection function
    US10572698B1|2020-02-25|Credit card skimmer detector
    JP2019197265A|2019-11-14|Card reader device
    RU2648628C2|2018-03-26|Anti-skimming device
    JP2007105362A|2007-04-26|Game machine
    US10360416B1|2019-07-23|Card reader anti-theft devices and methods
    JP6935619B2|2021-09-15|Automatic ticket gates and ticket gate systems
    KR101111394B1|2012-02-24|Anti-skimming system
    JP2012032865A|2012-02-16|Device for opening and closing automatic ticket gate passage
    CN109326045A|2019-02-12|The illegal method and ATM card reader of ATM card reader
    JPH10286343A|1998-10-27|Game ball detector for pinball game machine
    JP3042634U|1997-10-31|Pachinko ball counting device
    JP2004308337A|2004-11-04|Security system
    同族专利:
    公开号 | 公开日
    US20120280041A1|2012-11-08|
    EP2521107A1|2012-11-07|
    CN102842014A|2012-12-26|
    BR102012007532A2|2013-06-18|
    JP5882123B2|2016-03-09|
    CN102842014B|2015-12-09|
    JP2012234535A|2012-11-29|
    US8496171B2|2013-07-30|
    引用文献:
    公开号 | 申请日 | 公开日 | 申请人 | 专利标题
    JP2007020592A|2005-06-17|2007-02-01|Orient Sokki Computer Kk|Portable case and protection film against information leakage|
    JP4644592B2|2005-12-14|2011-03-02|日立オムロンターミナルソリューションズ株式会社|Card processing device and data processing device|
    JP4180097B2|2007-04-20|2008-11-12|権一 徳山|card case|
    DE102008012231A1|2008-03-03|2009-09-10|Wincor Nixdorf International Gmbh|Protective device, self-service terminal and method for preventing skimming on a card reader|
    WO2010123471A1|2009-04-20|2010-10-28|Cihat Celik Basar|Anti-fraud device for self service terminals|
    JP4954263B2|2009-10-30|2012-06-13|日立オムロンターミナルソリューションズ株式会社|Magnetic card reader|US4927056A|1987-05-22|1990-05-22|Rsl Industries, Inc.|Oil dispensing system with controlled metering and method|
    TR200401513A1|2004-06-24|2006-01-23|Kroni̇k Elektroni̇k Elektroni̇k Ve Bi̇lgi̇sayar Si̇stemleri̇ Sanayi̇ Ti̇caret Li̇mi̇ted Şi̇rketi̇|Magnetic card reading device.|
    US8915434B2|2011-05-03|2014-12-23|Ncr Corporation|Fraud prevention|
    US8584947B2|2011-09-13|2013-11-19|Ncr Corporation|Fraud prevention|
    GB2508377A|2012-11-29|2014-06-04|Crane Payment Solutions Ltd|Preventing fraud in a coin payout mechanism|
    EP2790163B1|2013-04-10|2015-07-01|Wincor Nixdorf International GmbH|Device for carrying out a financial transaction|
    GB2517983B|2013-09-09|2016-03-16|Ibm|Security apparatus for an automated teller machine|
    JP6178759B2|2014-07-08|2017-08-09|日本電産サンキョー株式会社|Card reader|
    JP6472649B2|2014-12-08|2019-02-20|日本電産サンキョー株式会社|Card reader|
    GB2552026B|2016-07-08|2020-06-10|Ibm|Shutter assembly for an automated teller machine|
    US10109160B1|2017-10-03|2018-10-23|International Business Machines Corporation|Shutter assembly for an automated teller machine|
    US10249150B1|2017-10-03|2019-04-02|International Business Machines Corporation|Security apparatus for an automated teller machine|
    US10755533B2|2018-05-02|2020-08-25|International Business Machines Corporation|Secure anti-skimmer technology for use with magnetic cards|
    US10474850B1|2019-01-16|2019-11-12|Capital One Services, Llc|Obfuscation of information obtained by a card reader|
    JP2020201547A|2019-06-06|2020-12-17|日本電産サンキョー株式会社|Card reader|
    法律状态:
    2013-06-18| B03A| Publication of a patent application or of a certificate of addition of invention [chapter 3.1 patent gazette]|
    2018-12-18| B06F| Objections, documents and/or translations needed after an examination request according [chapter 6.6 patent gazette]|
    2019-10-15| B06U| Preliminary requirement: requests with searches performed by other patent offices: procedure suspended [chapter 6.21 patent gazette]|
    2020-06-16| B06A| Notification to applicant to reply to the report for non-patentability or inadequacy of the application [chapter 6.1 patent gazette]|
    2020-09-24| B09A| Decision: intention to grant [chapter 9.1 patent gazette]|
    2020-12-15| B16A| Patent or certificate of addition of invention granted|Free format text: PRAZO DE VALIDADE: 20 (VINTE) ANOS CONTADOS A PARTIR DE 02/04/2012, OBSERVADAS AS CONDICOES LEGAIS. |
    优先权:
    申请号 | 申请日 | 专利标题
    US13/099,812|2011-05-03|
    US13/099,812|US8496171B2|2011-05-03|2011-05-03|Fraud prevention|
    [返回顶部]