EP1926063A1 - Sicheres Gehäuse für die Baugruppe eines Selbstbedienungsgeräts - Google Patents

Sicheres Gehäuse für die Baugruppe eines Selbstbedienungsgeräts Download PDF

Info

Publication number
EP1926063A1
EP1926063A1 EP06255997A EP06255997A EP1926063A1 EP 1926063 A1 EP1926063 A1 EP 1926063A1 EP 06255997 A EP06255997 A EP 06255997A EP 06255997 A EP06255997 A EP 06255997A EP 1926063 A1 EP1926063 A1 EP 1926063A1
Authority
EP
European Patent Office
Prior art keywords
markers
sub
assembly
sensors
self
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
EP06255997A
Other languages
English (en)
French (fr)
Other versions
EP1926063B1 (de
Inventor
Barrie Clark
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
NCR International Inc
Original Assignee
NCR International Inc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by NCR International Inc filed Critical NCR International Inc
Priority to EP06255997.6A priority Critical patent/EP1926063B1/de
Publication of EP1926063A1 publication Critical patent/EP1926063A1/de
Application granted granted Critical
Publication of EP1926063B1 publication Critical patent/EP1926063B1/de
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07F—COIN-FREED OR LIKE APPARATUS
    • G07F19/00—Complete banking systems; Coded card-freed arrangements adapted for dispensing or receiving monies or the like and posting such transactions to existing accounts, e.g. automatic teller machines
    • G07F19/20—Automatic teller machines [ATMs]
    • G07F19/205—Housing aspects of ATMs
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07F—COIN-FREED OR LIKE APPARATUS
    • G07F19/00—Complete banking systems; Coded card-freed arrangements adapted for dispensing or receiving monies or the like and posting such transactions to existing accounts, e.g. automatic teller machines
    • G07F19/20—Automatic teller machines [ATMs]
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07F—COIN-FREED OR LIKE APPARATUS
    • G07F19/00—Complete banking systems; Coded card-freed arrangements adapted for dispensing or receiving monies or the like and posting such transactions to existing accounts, e.g. automatic teller machines
    • G07F19/20—Automatic teller machines [ATMs]
    • G07F19/207—Surveillance aspects at ATMs

Definitions

  • the present invention relates to self-service equipment. It is particularly related to, but in no way limited to secure enclosures for sub-assemblies of self-service equipment.
  • Self-service equipment such as automated teller machines (ATMs), self-service kiosks, photocopiers, vending machines, self-service internet terminals, self-service fax machines and the like are sometimes vulnerable to unauthorized access or tampering. lf security has been breached in this way it is important to detect the situation as soon as possible and to shut down the equipment in order to limit any damage or loss.
  • ATMs automated teller machines
  • self-service kiosks photocopiers
  • vending machines self-service internet terminals
  • self-service fax machines and the like are sometimes vulnerable to unauthorized access or tampering. lf security has been breached in this way it is important to detect the situation as soon as possible and to shut down the equipment in order to limit any damage or loss.
  • a particular problem relating to self-service equipment is the need to replace sub-assemblies within the equipment in the event of break down of sub-assemblies, upgrade of those sub-assemblies or for other reasons. ln that case there is a need to authenticate the replacement sub-assemblies to ensure that security has not been breached and to ensure that correct sub-assembly equipment is being used. At present manual methods are used to provide such authentication and these methods are time consuming and difficult to keep secure.
  • An object of the present invention is therefore to provide a secure enclosure for protection of one or more sub-assemblies in a self-service apparatus which overcomes or at least mitigates one or more of the problems mentioned above.
  • Housings are typically used to protect sub-assemblies in self-service equipment such as key-pad assemblies in automated teller machines (ATMs), self-service kiosks, pay-as-you-go photocopiers and the like. There is a need to secure those housings to prevent access to and tampering of the equipment within. In addition, when replacement sub-assemblies are used, for example, for maintenance or upgrade, then it is necessary to authenticate those sub-assemblies.
  • the markers and sensors are brought into alignment when the sub-assembly housing is fully assembled.
  • the markers and sensors are arranged to detect when a particular physical relationship between the markers and sensors is lost or altered. For example, the markers provide spectral signatures and comprise rare earth metals such as lanthanides.
  • a secure enclosure for protection of at least one sub-assembly in a self-service apparatus comprising:
  • the markers each have an associated spectral signature.
  • the markers are fluorescent. This can be achieved by using one or more lanthanides; for example, in microscopic carrier beads.
  • the sensors each comprise one or more light sources. Light from the sensors incident on the markers produces fluorescence with a particular spectral profile as described in more detail below.
  • the invention also encompasses a sub-assembly of a self-service apparatus, the sub-assembly being housed in a secure enclosure as described above.
  • the invention also encompasses a self-service apparatus comprising a sub-assembly as described above.
  • a method of protecting or authenticating at least one sub-assembly in a self-service apparatus comprising:
  • the method further comprises shutting down the self-service apparatus if the trigger is activated.
  • the method comprises fixing the particular physical relationship between the markers and sensors in a controlled environment prior to use of the sub-assembly in a self-service apparatus in the field.
  • the step of providing the markers comprises applying paint incorporating the markers to the housing.
  • the sensors are arranged to detect the particular physical relationship by means of monitoring spectal profiles of the markers.
  • Embodiments of the present invention are described below by way of example only. These examples represent the best ways of putting the invention into practice that are currently known to the Applicant although they are not the only ways in which this could be achieved.
  • FIG. 1 is a schematic diagram of a self-service apparatus 10 comprising sub-assemblies 11, 12, 13.
  • the self-service apparatus 10 is shown as connected to a communications network 14 which comprises a central control center 15. However, it is not essential for the self-service apparatus to be connected in this way; it may also be stand-alone.
  • the self-service apparatus is of any suitable type such as an automated teller machine (ATM), self-service kiosk, pay-as-you-go device (e.g. photocopier, fax, internet terminal, media player) photo booth or other self-service apparatus.
  • ATM automated teller machine
  • pay-as-you-go device e.g. photocopier, fax, internet terminal, media player
  • Figure 1 illustrates three sub-assemblies 11, 12, 13 incorporated in the self-service apparatus 10.
  • These sub-assemblies are of any suitable type and are functional units which may or may not be removably inserted in the self-service apparatus. That is, the sub-assemblies can be of the type where they are easily taken out of and replaced into the self-service apparatus in a "plug and play" type manner.
  • Examples of sub-assemblies comprise key-pad assemblies, cash dispenser pick units, media cassettes, ink cartridges, goods dispensing units; smart card reading units, key-pad assemblies, cash dispensers, encryption assemblies, note recognition assemblies, printer consumables and biometric modules.
  • FIG. 2 is a schematic plan view of a key-pad assembly 100 of an ATM encased in a housing 102.
  • the housing 102 incorporates one or more markers (not shown) on its inner surfaces or integral with those surfaces. Sensors (not shown) are also provided attached to the contents of the housing 102.
  • sensors are located within the sub-assembly being protected by the enclosure. This eliminates the need for sensors external (and therefore vulnerable to attack) to the sub-assembly electronics.
  • a sensor is placed in the replacement part itself.
  • Figure 3 is a schematic diagram of a sub-assembly 30 of a self-service apparatus in a housing 31 having a lid 32 which is removed.
  • the sub-assembly 30 comprises sensors 35 fixed to the sub-assembly itself.
  • the sub-assembly 30 is fixed into the housing base 31 although this is not essential.
  • the housing base 31 and/or lid 32 also comprise one or more markers 36. For example, these are printed onto the base 31 and lid 32 in regions arranged to align or be substantially opposite the sensors 35 when the housing and sub-assembly are assembled in use.
  • the sub-assembly Prior to use the sub-assembly is installed in the housing and the markers and sensors calibrated or "set" by authorized personnel such as during manufacturing or at a controlled premises. That is, the sensors are arranged to detect a particular physical relationship between themselves and the markers and to "recognize” particular unique characteristics of the markers. If these relationships or characteristics change or are lost the sensors activate a trigger 37. Thus if the sub-assembly is moved with respect to the housing (or vice versa) the sensors detect this fact. Also, if the sub-assembly is replaced with an unauthorized sub-assembly this fact is detected. ln this way it is possible to authenticate sub-assemblies and detect tampering or unauthorized access to the housing.
  • the trigger 37 comprises electronic components or other suitable means for shutting down the self-service apparatus, sending an alarm signal to the central control center 15, and/or taking any other suitable damage limitation and security promoting actions.
  • the markers can be of any suitable type.
  • the markers are arranged to provide a spectral profile, for example, by being fluorescent. They are preferably microscopic or of smaller scale (for example, using nanotechnology).
  • the markers comprise rare earth metals, such as lanthanides supported in a suitable medium such as microscopic glass beads.
  • a suitable medium such as microscopic glass beads.
  • Those glass beads can be incorporated into paint and applied to parts of the housing and/or sub-assembly.
  • the glass beads can be incorporated into plastics or other material used to form the housing or sub-assembly.
  • Full details about example suitable markers are provided in European Patent Application EP 1491350 . That document describes optically detectable security markers for emitting light at pre-selected wavelengths.
  • the markers comprise a rare-earth dopant and a carrier incorporating the rare earth dopant. The interaction between the carrier and the dopant is such that a fluorescent fingerprint of the marker is different from that of the rare earth dopant.
  • the carrier doped with the rare earth ion has a new energy level profile that allows transitions different to those allowed by either the rare earth element or the undoped carrier.
  • the new energy profile is advantageous for security purposes because it provides narrow emissions at wavelengths not naturally found in either the rare earth element or the undoped carrier.
  • the sensors comprise one or more light sources such as LEDs or similar and a receptor arranged to detect particular spectral profiles of the markers in the case that the markers provide a spectral profile.
  • This type of arrangement is particularly advantageous because it is very unlikely that "noise” will be present, that is, material having the same spectral profile outwith the self-service apparatus. This differs from the situation where other types of markers such as RF tags are used.
  • the sensors themselves are small and inexpensive. In addition they are easy to fix to or incorporate in the housing and/or sub-assembly.
  • Figure 4 is a flow diagram of a method of protecting or authenticating at least one sub-assembly in a self-service apparatus.
  • the sub-assembly is placed in its housing and one or more markers are fixed to the housing and/or sub-assembly (see box 40 of Figure 4).
  • the sub-assembly is placed, fixed to, or encased in the housing.
  • the markers and sensors are then set with respect to one another in a secure, authorized environment (see box 41). For example, this is done at the manufacturing site.
  • the sensors are tailored to 'expect' a particular unique spectral signature or other characteristic signal from the markers.
  • This original spectral signature or other characteristic signal (also referred to as a security profile) is stored in the central control centre 15 or in non-erasable memory within the sub-assembly.
  • the security profile is also dependent in part on the physical relationship between the sensor and the marker(s).
  • a trigger is then arranged to activate if the sensors detect loss or change in the physical relationship between the markers and sensors.
  • the sensors can be present in the self-service apparatus itself, outwith the sub-assembly.
  • the sensors in this case can be pre-set to detect authorized sub-assemblies for authentication. This is particularly advantageous because it enables replaceable units such as spare parts to be authenticated such that they are only able to operate if they are genuine. For example, consider a sub-assembly enclosed in a housing, the whole housed sub-assembly being a replacement part for a self-service apparatus or other equipment in the field. Markers are attached to or incorporated into the housing as described herein.
  • the self-service apparatus comprises one or more sensors pre-configured to operate with the markers of the sub-assembly housing.
  • the sensors When the replacement sub-assembly is inserted into the self-service apparatus, for example, by a field engineer, then the sensors operate with the markers in the housing to authenticate the replacement sub-assembly. In the event that the sub-assembly is not authenticated operation of the self-service device is prevented.

Landscapes

  • Business, Economics & Management (AREA)
  • Accounting & Taxation (AREA)
  • Finance (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Control Of Vending Devices And Auxiliary Devices For Vending Devices (AREA)
  • Inspection Of Paper Currency And Valuable Securities (AREA)
EP06255997.6A 2006-11-23 2006-11-23 Sicheres Gehäuse für die Baugruppe eines Selbstbedienungsgeräts Active EP1926063B1 (de)

Priority Applications (1)

Application Number Priority Date Filing Date Title
EP06255997.6A EP1926063B1 (de) 2006-11-23 2006-11-23 Sicheres Gehäuse für die Baugruppe eines Selbstbedienungsgeräts

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
EP06255997.6A EP1926063B1 (de) 2006-11-23 2006-11-23 Sicheres Gehäuse für die Baugruppe eines Selbstbedienungsgeräts

Publications (2)

Publication Number Publication Date
EP1926063A1 true EP1926063A1 (de) 2008-05-28
EP1926063B1 EP1926063B1 (de) 2017-08-30

Family

ID=37963998

Family Applications (1)

Application Number Title Priority Date Filing Date
EP06255997.6A Active EP1926063B1 (de) 2006-11-23 2006-11-23 Sicheres Gehäuse für die Baugruppe eines Selbstbedienungsgeräts

Country Status (1)

Country Link
EP (1) EP1926063B1 (de)

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE10102283A1 (de) * 2000-01-18 2001-09-13 Mumcu Servet Verfahren und Vorrichtung zur Detektion von Manipulationen an Gehäusen von Wertautomaten
US20040178258A1 (en) 2003-03-10 2004-09-16 Diebold Self-Service Systems Division Of Diebold, Incorporated Cash dispensing automated banking machine with improved card retention capabilities and method

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE10102283A1 (de) * 2000-01-18 2001-09-13 Mumcu Servet Verfahren und Vorrichtung zur Detektion von Manipulationen an Gehäusen von Wertautomaten
US20040178258A1 (en) 2003-03-10 2004-09-16 Diebold Self-Service Systems Division Of Diebold, Incorporated Cash dispensing automated banking machine with improved card retention capabilities and method

Also Published As

Publication number Publication date
EP1926063B1 (de) 2017-08-30

Similar Documents

Publication Publication Date Title
US9767422B2 (en) Detecting unauthorized card skimmers
US8944317B2 (en) Automated banking machine operated responsive to data bearing records with improved resistance to fraud
US9990614B2 (en) Tactile touch screen
US9564985B2 (en) Automated banking machine that outputs interference signals to jam reading ability of unauthorized card reader devices
US9928189B2 (en) Systems and methods for controlling devices using master and slave devices
US8556168B1 (en) Automated banking machine operated responsive to data bearing records with improved resistance to fraud
US7490764B2 (en) Secure enclosure for sub-assembly of self service equipment
US9824546B2 (en) Banking system controlled responsive to data bearing records
US9564024B2 (en) Banking system controlled responsive to data bearing records
US9658763B2 (en) Banking system controlled responsive to data bearing records
US20090184452A1 (en) Print Type Binder for Paper Money, System Including the Binder, and Motion Method Thereof
EP1966928B1 (de) Ableiten kryptographischer schlüssel
US8038057B1 (en) Card activated automated banking machine system and method
EP1926063B1 (de) Sicheres Gehäuse für die Baugruppe eines Selbstbedienungsgeräts
US8146801B1 (en) Card activated automated banking machine system and method
JP4843919B2 (ja) Ｉｃカード積増機および電子マネーシステム
US8651371B1 (en) Automated banking machine system dependent on unique data bearing record reader operation
WO2016055760A1 (en) Atm security
EP1801723B1 (de) Vorrichtung zur Überprüfung eines Identifikationscodes
US9177449B1 (en) Banking system controlled responsive to data bearing records
JP5519119B2 (ja) 鍵管理システム
KR101930020B1 (ko) 매체카세트, 금융기기, 및 금융기기의 제어방법
EP2099610A1 (de) Laminierte sicherheitsfunktion
JP2009175911A (ja) 情報処理装置、情報処理制御プログラム及び情報処理制御方法

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

AK Designated contracting states

Kind code of ref document: A1

Designated state(s): AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HU IE IS IT LI LT LU LV MC NL PL PT RO SE SI SK TR

AX Request for extension of the european patent

Extension state: AL BA HR MK RS

17P Request for examination filed

Effective date: 20081128

AKX Designation fees paid

Designated state(s): DE ES FR GB IT

17Q First examination report despatched

Effective date: 20090120

RAP1 Party data changed (applicant data changed or rights of an application transferred)

Owner name: NCR INTERNATIONAL, INC.

GRAP Despatch of communication of intention to grant a patent

Free format text: ORIGINAL CODE: EPIDOSNIGR1

INTG Intention to grant announced

Effective date: 20170522

GRAS Grant fee paid

Free format text: ORIGINAL CODE: EPIDOSNIGR3

GRAA (expected) grant

Free format text: ORIGINAL CODE: 0009210

AK Designated contracting states

Kind code of ref document: B1

Designated state(s): DE ES FR GB IT

REG Reference to a national code

Ref country code: GB

Ref legal event code: FG4D

REG Reference to a national code

Ref country code: DE

Ref legal event code: R084

Ref document number: 602006053457

Country of ref document: DE

REG Reference to a national code

Ref country code: DE

Ref legal event code: R096

Ref document number: 602006053457

Country of ref document: DE

Ref country code: DE

Ref legal event code: R082

Ref document number: 602006053457

Country of ref document: DE

Representative=s name: V. BEZOLD & PARTNER PATENTANWAELTE - PARTG MBB, DE

REG Reference to a national code

Ref country code: GB

Ref legal event code: 746

Effective date: 20171005

REG Reference to a national code

Ref country code: FR

Ref legal event code: PLFP

Year of fee payment: 12

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: ES

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20170830

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: ES

Payment date: 20171201

Year of fee payment: 12

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: IT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20170830

REG Reference to a national code

Ref country code: DE

Ref legal event code: R097

Ref document number: 602006053457

Country of ref document: DE

PLBE No opposition filed within time limit

Free format text: ORIGINAL CODE: 0009261

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: NO OPPOSITION FILED WITHIN TIME LIMIT

26N No opposition filed

Effective date: 20180531

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: ES

Payment date: 20221001

Year of fee payment: 12

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: ES

Payment date: 20221001

Year of fee payment: 12

P01 Opt-out of the competence of the unified patent court (upc) registered

Effective date: 20230512

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: GB

Payment date: 20231127

Year of fee payment: 18

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: FR

Payment date: 20231127

Year of fee payment: 18

Ref country code: DE

Payment date: 20231129

Year of fee payment: 18