EP2321806A1 - Method and device for deflecting eavesdropping attempts in image data transfer at a self-service terminal - Google Patents

Method and device for deflecting eavesdropping attempts in image data transfer at a self-service terminal

Info

Publication number
EP2321806A1
EP2321806A1 EP09782032A EP09782032A EP2321806A1 EP 2321806 A1 EP2321806 A1 EP 2321806A1 EP 09782032 A EP09782032 A EP 09782032A EP 09782032 A EP09782032 A EP 09782032A EP 2321806 A1 EP2321806 A1 EP 2321806A1
Authority
EP
European Patent Office
Prior art keywords
image data
self
atm
service terminal
camera
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
EP09782032A
Other languages
German (de)
French (fr)
Other versions
EP2321806B1 (en
Inventor
Carsten Von Der Lippe
Dinh Khoi Le
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Wincor Nixdorf International GmbH
Original Assignee
Wincor Nixdorf International GmbH
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Wincor Nixdorf International GmbH filed Critical Wincor Nixdorf International GmbH
Publication of EP2321806A1 publication Critical patent/EP2321806A1/en
Application granted granted Critical
Publication of EP2321806B1 publication Critical patent/EP2321806B1/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07F—COIN-FREED OR LIKE APPARATUS
    • G07F19/00—Complete banking systems; Coded card-freed arrangements adapted for dispensing or receiving monies or the like and posting such transactions to existing accounts, e.g. automatic teller machines
    • G07F19/20—Automatic teller machines [ATMs]
    • G07F19/207—Surveillance aspects at ATMs
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07F—COIN-FREED OR LIKE APPARATUS
    • G07F19/00—Complete banking systems; Coded card-freed arrangements adapted for dispensing or receiving monies or the like and posting such transactions to existing accounts, e.g. automatic teller machines
    • G07F19/20—Automatic teller machines [ATMs]

Definitions

  • the invention relates to a method for the defense against eavesdropping in the transmission of image data, the
  • Image signals are obtained from one to one
  • the invention also relates to a device carrying out the method as well as a self-service device equipped therewith according to the preamble of one of the independent claims.
  • the invention relates to a method and a device for preventing eavesdropping during image data transmission on a self-service terminal designed as an ATM, wherein a camera detects a reception area covering an operating area of the self-service menu or ATM to be monitored.
  • At least one camera is installed at the respective self-service terminal. This at least one camera then continuously supplies image signals, from which digital image data are usually obtained, since e are transmitted to an image data memory and remote computer or server in order to be evaluated there.
  • terminals m in the form of ATMs are the subject of such camera surveillance.
  • a typical ATM manipulation is the attachment of so-called skimmmg devices.
  • replicas of keyboards and / or card readers are mounted in the operating area of the ATM in order to access sensitive data, in particular card data and PINs.
  • attack scenarios in the form of eavesdropping or Abhor bathen have accumulated, in which the perpetrators want to gain access to the image signals generated by the camera or the image data obtained therefrom by transmitting these image signals or image data to the appropriate If such an eavesdropping attack succeeds, the offender can draw conclusions about the PIN entered by a customer from the screened image information and, if necessary, also read the map data into the card slot when the card is imported the offender can get to the sensitive data without the use of special skimming devices.
  • the object of the invention is therefore to propose a method and a device for effective defense against eavesdropping in the image data transmission to a
  • a method, a Device and a service term equipped therewith are proposed, which secure the image data transmission against such Lauschrersuche and protect.
  • events occurring on the self-service timer in particular in the camera's recording area, but also outside thereof, be detected, and that, depending on at least one detected event, the generation of the image signals on the camera and / or the subsequent transmission of the image signals or the image data obtained is controlled.
  • an event is detected which represents, for example, the operation of the keyboard and / or the insertion of a card into the card slot in order to then control the generation or transmission of the image signals and / or image data.
  • the image generation or transmission is changed when such an event is detected which corresponds to a sensitive operation of the self-service feature. Therefore, even with a successful tapping of lines and transmission lines, it can be prevented that corresponding sensitive image signals or image data are ever generated or transmitted.
  • an apparatus carrying out the method which recognizes events occurring in the recording area of the camera by means of evaluation of the image signals, the image data and / or of sensor signals, and controls the generation and / or transmission of the image signals or image data as a function thereof.
  • a self-service terminal equipped with such a device is proposed, which may be designed in particular as an ATM.
  • eavesdropping attempts are averted by completely inhibiting the generation of the image signals if at least one event is detected.
  • the transmission of the image data obtained from the generated image signals is inhibited if at least one event is detected.
  • the interruption of the generation or transmission of image signals / date is timed at least as long as the sensitive event is detected.
  • at least partial image data is hidden in the acquired image data or replaced by artificially generated data if at least one event is detected.
  • these are preferably those partial image data which relate to at least one partial area of the recording area, in particular relate to a first and second partial area which covers a keyboard or a card slot in the operating area of the self-service terminal.
  • the events which are detected in particular in the operating area within the camera recording area or also outside thereof are, for example, operation of a keyboard or insertion of a card.
  • the events in the camera Recording area can be detected by evaluating the image signals and / or the image data. This can be done in the inventive device.
  • the events can be detected by evaluating at least one sensor signal which is generated by a sensor for monitoring a control element in the operating area of the self-service terminal, also outside the camera receiving area.
  • events such as. For example, imports of a map are derived from the current state of the self-service ticket, in particular by querying or reading process states or state machines (state machines) or the like. Corresponding signals can then be sent to the device according to the invention.
  • Fig. 1 shows schematically the operating area of a
  • Fig. 2 shows in the form of a block diagram components of the device for the defense against eavesdropping in the image data transmission
  • FIG. 3 shows the flow diagram of a method according to the invention for the defense against eavesdropping during image data transmission.
  • FIG. 1 shows the operating area of a self-service menu, which here is designed as ATM ATM, the operating area having, among other things, the following operating elements: a keyboard KBD for entering numbers, in particular PIN numbers, several function keys BTN, in particular for confirming keyboard entries made, a screen MON for displaying operating information and a card slot SLT for importing cards, especially bank cards.
  • the operating area has other fields, such as signs and labels LBL on.
  • the operating area is monitored by at least one camera CAM arranged on the operating area, the camera CRM having a receiving area AO covering the entire operating area.
  • FIG. 2 shows in the form of a block diagram the structure of a device according to the invention, which is designed in particular as a detection unit DET and is connected at least to an image processing unit PRC, which receives image signals Sa generated by the camera CAM and processes them.
  • the image processing unit PRC generates the image signals Sa corresponding digital image data Sb and transmits them, for example, to a memory device MEM.
  • This storage device may be located in a server remote from the self-service terminal.
  • a first connection Ca is, for example, an analogue connection in the form of a coaxial cable which transmits corresponding image signals m of video signals from the camera to the image processing unit.
  • the camera CAM and the image processing unit PRC are preferably integrated in a module MD so that third parties do not have direct access to the connection Ca in order to perform interrogation attempts there.
  • connection Cb Between thessengnacsemheit PRC and the external memory MEM is a second connection Cb, via which the generated digital image data Sb or erfmdungsgelix in case of a sensitive event changed digital image data Sb 'are transmitted.
  • This connection Cb thus represents a secure digital data transmission connection, e.g. via data or communication networks, e.g. IP connections, to remote computers (servers) can reach.
  • the transmitted image data Sb or Sb 'are then buffered at the receiving end in the local memory MEM and then supplied to a data display and / or evaluation in order to evaluate the images captured by the camera.
  • this second connection Cb offers a potential point of attack for eavesdropping attacks by third parties trying to tap this connection.
  • erfmdungsgehunt now at least the transmission of the digital Image data Sb or Sb 'controlled so that no image data is transmitted, the sensitive processes or events, such as keyboard input or imports of a bank card could play.
  • the control takes place according to the inventive method, which is described in more detail below with reference to FIG. 3.
  • FIG. 3 shows the flow chart for a method 100 with the steps 110 to 130.
  • the camera performs CAM image recordings and generates corresponding image signals Sb (see also FIGS. 1 and 2). From these analog image signals, digital image data Sb are generated in the image processing unit PRC.
  • a step 120 by evaluating the generated image data, it is determined whether an event has occurred that could affect the operation of sensitive areas in the operating area. For example, it is recognized on the basis of the evaluation of the image data Sb that a person operates the keyboard KBD in the operating area of the ATM ATM. In addition, it can also be recognized whether a person introduces a bank card into the card slot SLT. If this is the case, the generation of a trigger signal TR (see FIG. 2) follows in a step 121 which controls the generation or transmission of the image data in such a way that at least partial image data which comprises the said sensitive image regions is hidden or replaced Al or A2 concern.
  • a subsequent step 122 the image data Sb 'are then transmitted, the sensitive image data having been replaced by artificially generated data (dummy data).
  • the transmission of the modified image data Sb 'then takes place via the second connection Cb. If, however, it was determined in step 120 that there is no event, a transmission of the image data Sb, ie the unchanged image data, takes place in accordance with step 130. This measure ensures that secure monitoring of the self-service terminal or cash dispenser ATM can still be carried out, but that in the case of events that are sensitive, corresponding image dales are not generated or not transmitted.
  • the device DET in the event that a sensitive event is detected, can also generate a trigger TR * which directly drives the camera CAM to completely prevent the generation of the image signal Sa. In this case, the complete image acquisition is suppressed.
  • the recognition of events can not only take place by evaluating the image signals Sa or the image data Sb obtained therefrom, but alternatively or additionally, they can also take place on the basis of sensor signals.
  • the device DET is connected to sensors connected to the sensitive controls, e.g. the keyboard KBD and / or the card slot SLT are mounted.
  • the sensor can also be the respective key of the keyboard itself or a detector at the entrance of the card slot SLT.
  • the first connection Ca can be embodied, for example, as a coaxial cable for analogue image signals or, for example, as a USB cable for digitized image signals or image data.
  • the image processing takes place in de Image processing unit PRC, which may be implemented, for example, as dedicated electronics or as a software program running on a personal computer.
  • the processed image or the acquired image data is then forwarded via the second connection Cb to the memory MEM or to a remote computer, in particular a server, which further evaluates or displays the image data.
  • the server resides in a surveillance center that simultaneously monitors multiple self-service terminals.
  • the transmitted image signals Sa or image data Sb can additionally be encrypted in order to be even more secure against eavesdropping attempts by third parties.
  • the camera CAM and the image processing unit PRC preferably form a structural unit in the form of a module MD. As described above, those areas of the image are hidden and / or made visible in the image processing, from which conclusions can be drawn on the PIN delivery or on card data. The modification of the image data takes place, for example, by setting all pixels in the said subregions to the same color and / or brightness value.
  • the control of the generation of the image signals or transmission of the image data is time-dependent in that the described masking of image data is performed only at such times when an event is detected. This ensures that no sensitive or critical processes, such as inputs of PIN numbers or imports of cards, are recorded and / or transmitted.
  • the determination of the hidden or modified Image data areas can also be developed in such a way that only dedicated subareas, such as text characters and numbers, are hidden or overwritten on bank cards.
  • the defense against eavesdropping tests can also be carried out in such a way that the image recording is completely interrupted by means of a trigger. This happens, for example, as soon as a hand or a finger is located above the keyboard KBD and thus can be closed to the process of entering a PIN.
  • a self-service terminal in addition to sensors additional information is used, which is usually present in a self-service terminal. This is, for example, the current status regarding the state of the self-service feature. For example, when the PIN is issued, the hand only needs to be masked in the image when a PIN number is actually entered. On the other hand, no masking is required if the hand only performs a menu control. Also, no masking is required as long as a magnetic or chip card is in the system.
  • the proposed invention effectively prevents any eavesdropping on the transmission of camera signals or image data to a self-service terminal. LIST OF REFERENCE NUMBERS
  • ATM self-service terminal here designed as an ATM
  • DET device comprising a detection unit for
  • MEM external storage device e.g., a server

Abstract

What is proposed are a method and a device (DET) for deflecting eavesdropping attempts during the transfer of image data (Sb) or image signals (Sa) produced by a camera (CAM) installed at a self-service terminal (ATM), said camera covering a camera range (AO) that covers a service area of the self-service terminal (ATM) to be monitored. As soon as events occurring at the self-service terminal (ATM) within the camera range (AO) or outside thereof, in particular the activation of a keypad (KBD) and/or introduction of a card into a card slot (SLT), are recognized, the generation of image signals (Sa) and/or the transfer of image data (Sb) are controlled depending on said events by removing at least the sensitive areas or image data parts (Sb') in the image data (Sb) acquired, for example, or said sensitive areas or parts are replaced with artificially produced data.

Description

Verfahren und Vorrichtung zur Abwehr von Lauschversuchen bei der Bilddaten-Ubertragung an einem SelbstbedienungsterminalMethod and device for the defense against eavesdropping during image data transmission at a self-service terminal
Die Erfindung betrifft ein Verfahren zur Abwehr von Lauschversuchen bei der Übertragung von Bilddaten, die ausThe invention relates to a method for the defense against eavesdropping in the transmission of image data, the
Bildsignalen gewonnen werden, die von einer an einemImage signals are obtained from one to one
Selbstbedienungstermmal installierten Kamera erzeugt werden gemäß dem Oberbegriff des Patentanspruchs 1. Ebenso betrifft die Erfindung eine das Verfahren ausfuhrende Vorrichtung sowie ein damit ausgestattetes Selbstbedienungstermmal gemäß dem Oberbegriff eines der nebengeordneten Patentansprüche.The invention also relates to a device carrying out the method as well as a self-service device equipped therewith according to the preamble of one of the independent claims.
Die Erfindung betrifft insbesondere ein Verfahren und eine Vorrichtung zur Abwehr von Lauschversuchen bei der Bilddaten- Übertragung an einem Selbstbedienungstermmal, das als Geldautomat ausgebildet ist, wobei eine Kamera einen Aufnahmebereich erfasst, der einen zu überwachenden Bedienbereich des Selbstbedienungstermmals bzw. des Geldautomaten abdeckt.In particular, the invention relates to a method and a device for preventing eavesdropping during image data transmission on a self-service terminal designed as an ATM, wherein a camera detects a reception area covering an operating area of the self-service menu or ATM to be monitored.
Es ist bekannt, Selbstbedienungstermmals, insbesondere Geldautomaten, durch eine Kamerauberwachung abzusichern, um kriminelle Vorgange, wie insbesondere Sachbeschädigungen und/oder Manipulationen an den Terminals, festzustellen sowie Bildmaterial als Beweis- und Analysematerial aufzunehmen. Dazu wird mindestens eine Kamera an dem jeweiligen Selbstbedienungsterminal installiert . Diese mindestens eine Kamera liefert dann fortlaufend Bildsignale, aus denen üblicherweise digitale Bilddaten gewonnen werden, da e an einen Bilddatenspeicher und entfernten Rechner bzw. Server übertragen werden, um dort ausgewertet zu werden. Insbesondere Terminals m Gestalt von Geldautomaten sind Gegenstand solcher Kamerauberwachungen. Eine typische Manipulation an Geldautomaten ist das Anbringen von sogenannten Skimmmg-Vorrichtungen . Hierbei werden von Tatern nachgebaute Tastaturen und/oder Kartenleser im Bedienbereich des Geldautomaten angebracht, um somit an sensitive Daten, insbesondere Kartendaten und PINs zu gelangen. In letzter Zeit haben sich Angriffsszenarien m Form von Lauschangriffen bzw. Abhorversuchen gehäuft, bei denen die Tater sich Zugang zu den von der Kamera erzeugten Bildsignalen bzw. den daraus gewonnenen Bilddaten verschaffen wollen, in dem sie die Übertragung dieser Bildsignale bzw. Bilddaten an den entsprechenden Ubertragungsleitungen abgreifen (sog. „Abzapfen") . Ist ein solcher Lauschangriff erfolgreich, so kann der Tater aus den abgehorten Bildinformationen Rückschlüsse auf die von einem Kunden eingegebene PIN schließen sowie ggf. auch die Kartendaten beim Einfuhren der Karte in den Kartenschlitz ablesen. Somit kann der Tater ohne Einsatz von speziellen Skimming-Vorrichtungen an die sensitiven Daten gelangen.It is known to secure Selbstbedienungstermmals, in particular ATMs by a camera surveillance to criminal acts, in particular property damage and / or tampering with the terminals, as well as recording visual material as evidence and analysis material. For this purpose, at least one camera is installed at the respective self-service terminal. This at least one camera then continuously supplies image signals, from which digital image data are usually obtained, since e are transmitted to an image data memory and remote computer or server in order to be evaluated there. In particular, terminals m in the form of ATMs are the subject of such camera surveillance. A typical ATM manipulation is the attachment of so-called skimmmg devices. In this case, replicas of keyboards and / or card readers are mounted in the operating area of the ATM in order to access sensitive data, in particular card data and PINs. In recent times, attack scenarios in the form of eavesdropping or Abhorversuchen have accumulated, in which the perpetrators want to gain access to the image signals generated by the camera or the image data obtained therefrom by transmitting these image signals or image data to the appropriate If such an eavesdropping attack succeeds, the offender can draw conclusions about the PIN entered by a customer from the screened image information and, if necessary, also read the map data into the card slot when the card is imported the offender can get to the sensitive data without the use of special skimming devices.
Aufgabe der Erfindung ist es demnach, ein Verfahren und eine Vorrichtung zur effektiven Abwehr von Lauschversuchen bei der Bilddatenubertragung an einen Selbstbedienungstei minal vorzuschlagen. Insbesondere sollen ein Verfahren, eine Vorrichtung und ein damit ausgestattetes Bedienungstermmal vorgeschlagen werden, die die Bilddatenubertragung gegen derartige Lauschrersuche absichern und schützen.The object of the invention is therefore to propose a method and a device for effective defense against eavesdropping in the image data transmission to a Selbstbedienungstei minal. In particular, a method, a Device and a service term equipped therewith are proposed, which secure the image data transmission against such Lauschrersuche and protect.
Gelost wird die Aufgabe durch ein Verfahren mit den Merkmalen des Anspruchs 1 sowie durch eine Vorrichtung bzw. ein Selbstbedienungstermmal mit den Merkmalen der nebengeordneten Ansprüche.The object is solved by a method having the features of claim 1 and by a device or a Selbstbedienungstermmal with the features of the independent claims.
Demnach wird vorgeschlagen, dass am Selbstbedienungstermmal, insbesondere in dem Aufnahmebereich der Kamera, aber auch außerhalb davon auftretende Ereignisse erkannt werden, und dass in Abhängigkeit von mindestens einem erkannten Ereignis die Erzeugung der Bildsignale an der Kamera und/oder die nachfolgende Übertragung der Bildsignale bzw. der daraus gewonnenen Bilddaten gesteuert wird. Demnach wird ein Ereignis erkannt, das beispielsweise die Betätigung der Tastatur und/oder das Einfuhren einer Karte in den Kartenschlitz darstellt, um dann davon abhangig die Erzeugung bzw. Übertragung der Bildsignale und/oder Bilddaten zu steuern. Demnach wird die Bild-Erzeugung bzw. Übertragung verändert, wenn ein solches Ereignis erkannt wird, das einer sensitiven Bedienung des Selbstbedienungstermmals entspricht. Deshalb kann selbst bei einem erfolgreichen Abzapfen von Leitungen und Ubertragungsstrecken, verhindert werden, dass entsprechende sensitive Bildsignale bzw. Bilddaten überhaupt erzeugt bzw. übertragen werden. Einem Tater, dem es eventuell gelingen sollte, die Kamerasignale bzw. die daraus abgeleiteten Bilddaten abzugreifen, wird somit keinen Zugriff auf sensitive Bildsignale bzw. Bilddaten erhalten können. Erfindungsgemäß wird auch eine das Verfahren ausführende Vorrichtung vorgeschlagen, die im Aufnahmebereich der Kamera auftretende Ereignisse mittels Auswertung der Bildsignale, der Bilddaten und/oder von Sensorsignalen erkennt, und die in Abhängigkeit davon die Erzeugung und/oder Übertragung der Bildsignale bzw. Bilddaten steuert.Accordingly, it is proposed that events occurring on the self-service timer, in particular in the camera's recording area, but also outside thereof, be detected, and that, depending on at least one detected event, the generation of the image signals on the camera and / or the subsequent transmission of the image signals or the image data obtained is controlled. Accordingly, an event is detected which represents, for example, the operation of the keyboard and / or the insertion of a card into the card slot in order to then control the generation or transmission of the image signals and / or image data. Thus, the image generation or transmission is changed when such an event is detected which corresponds to a sensitive operation of the self-service feature. Therefore, even with a successful tapping of lines and transmission lines, it can be prevented that corresponding sensitive image signals or image data are ever generated or transmitted. An offender who should eventually succeed in picking up the camera signals or the image data derived therefrom will thus be unable to gain access to sensitive image signals or image data. According to the invention, an apparatus carrying out the method is also proposed, which recognizes events occurring in the recording area of the camera by means of evaluation of the image signals, the image data and / or of sensor signals, and controls the generation and / or transmission of the image signals or image data as a function thereof.
Außerdem wird ein mit einer solchen Vorrichtung ausgestattetes Selbstbedienungsterminal vorgeschlagen, das insbesondere als Geldautomat ausgebildet sein kann.In addition, a self-service terminal equipped with such a device is proposed, which may be designed in particular as an ATM.
In einer bevorzugten Ausführungsform werden Lauschversuche dadurch abgewehrt, dass die Erzeugung der Bildsignale gänzlich unterbunden wird, wenn zumindest ein Ereignis erkannt wird. Alternativ wird die Übertragung der aus den erzeugten Bildsignalen gewonnenen Bilddaten unterbunden, wenn zumindest ein Ereignis erkannt wird. Die Unterbrechung der Erzeugung bzw. Übertragung von Bildsignalen/date erfolgt zeitgesteuert zumindest solange, wie das sensitive Ereignis erkannt wird. Wiederum alternativ dazu werden in den gewonnenen Bilddaten zumindest Teilbilddaten ausgeblendet oder durch künstlich erzeugte Daten ersetzt, wenn zumindest ein Ereignis erkannt wird. In diesem Zusammenhang handelt es sich vorzugsweise um solche Teilbilddaten, die sich auf mindestens einen Teilbereich des Aufnahmebereiches beziehen, insbesondere sich auf einen ersten und zweiten Teilbereich beziehen, der eine Tastatur bzw. einen Kartenschlitz im Bedienbereich des Selbstbedienungsterminals abdeckt.In a preferred embodiment, eavesdropping attempts are averted by completely inhibiting the generation of the image signals if at least one event is detected. Alternatively, the transmission of the image data obtained from the generated image signals is inhibited if at least one event is detected. The interruption of the generation or transmission of image signals / date is timed at least as long as the sensitive event is detected. Again alternatively, at least partial image data is hidden in the acquired image data or replaced by artificially generated data if at least one event is detected. In this context, these are preferably those partial image data which relate to at least one partial area of the recording area, in particular relate to a first and second partial area which covers a keyboard or a card slot in the operating area of the self-service terminal.
Die Ereignisse, die insbesondere im Bedienungsbereich innerhalb des Kamera-Aufnahmebereichs oder auch außerhalb davon erkannt werden, sind z.B. Bedienung einer Tastatur bzw. Einführen einer Karte. Die Ereignisse im Kamera- Aufnahmebereich können durch Auswertung der Bildsignale und/oder der Bilddaten erkannt werden. Dies kann in der erfmdungsgemaßen Vorrichtung erfolgen. Alternativ dazu oder auch zusatzlich dazu können die Ereignisse durch Auswertung von mindestens einem Sensorsignal erkannt werden, das von einem Sensor zur Überwachung eines Bedienelementes im Bedienbereich des Selbstbedienungstermmals, auch außerhalb des Kamera-Aufnahmebereiches erzeugt wird. Außerdem können Ereignisse, wie. z.B. das Einfuhren einer Karte, aus dem aktuellen Zustand des Selbstbedienungstermmals abgeleitet werden, insbesondere durch Abfrage bzw. Ablesen von Prozesszustanden bzw. Zustandsautomaten (state machmes) oder dergleichen. Entsprechende Signale können dann an die erfmdungsgemaße Vorrichtung gesendet werden.The events which are detected in particular in the operating area within the camera recording area or also outside thereof are, for example, operation of a keyboard or insertion of a card. The events in the camera Recording area can be detected by evaluating the image signals and / or the image data. This can be done in the inventive device. Alternatively or additionally, the events can be detected by evaluating at least one sensor signal which is generated by a sensor for monitoring a control element in the operating area of the self-service terminal, also outside the camera receiving area. In addition, events, such as. For example, imports of a map are derived from the current state of the self-service ticket, in particular by querying or reading process states or state machines (state machines) or the like. Corresponding signals can then be sent to the device according to the invention.
Die Erfindung und die sich daraus ergebenden Vorteile werden nachfolgend von einem Ausfuhrungsbeispiel und unter Bezugnahme auf die beiliegenden schematischen Zeichnungen beschrieben :The invention and the resulting advantages are described below by an exemplary embodiment and with reference to the accompanying schematic drawings:
Fig. 1 zeigt schematisch den Bedienbereich einesFig. 1 shows schematically the operating area of a
Selbstbedienungstermmals und eine den Bedienbereich überwachende Kamera;Selbstbedienungstermmals and monitoring the operating area camera;
Fig. 2 zeigt in Form eines Blockschaltbildes Komponenten der Vorrichtung zur Abwehr von Lauschversuchen bei der Bilddaten-Ubertragung; undFig. 2 shows in the form of a block diagram components of the device for the defense against eavesdropping in the image data transmission; and
Fig. 3 zeigt das Ablaufdiagramm eines erfmdungsgemaßen Verfahrens zur Abwehr von Lauschversuchen bei der Bilddaten-Ubertragung .FIG. 3 shows the flow diagram of a method according to the invention for the defense against eavesdropping during image data transmission.
Die Fig. 1 zeigt den Bedienbereich eines Selbstbedienungstermmals, das hier als Geldautomat ATM ausgebildet ist, wobei der Bedienbereich u.a. folgende Bedienelemente aufweist: eine Tastatur KBD zur Eingabe von Ziffern, insbesondere PIN-Nummern, mehrere Funktionstasten BTN, insbesondere zur Bestätigung von gemachten Tastatur-Eingaben, einen Bildschirm MON zur Darstellung von Bedieninformationen und einen Kartenschlitz SLT zum Einfuhren von Karten, insbesondere von Bankkarten. Außerdem weist der Bedienbereich noch weitere Felder, wie z.B. Schilder und Beschriftungen LBL auf. Durch mindestens eine am Bedienbereich angeordnete Kamera CAM wird der Bedienbereich überwacht, wobei die Kamera CRM einen Aufnahmebereich AO aufweist, der den gesamten Bedienbereich abdeckt.FIG. 1 shows the operating area of a self-service menu, which here is designed as ATM ATM, the operating area having, among other things, the following operating elements: a keyboard KBD for entering numbers, in particular PIN numbers, several function keys BTN, in particular for confirming keyboard entries made, a screen MON for displaying operating information and a card slot SLT for importing cards, especially bank cards. In addition, the operating area has other fields, such as signs and labels LBL on. The operating area is monitored by at least one camera CAM arranged on the operating area, the camera CRM having a receiving area AO covering the entire operating area.
Erfmdungsgemaß wird nun mittels des nachfolgend beschriebenen Verfahrens und der entsprechenden Vorrichtung bei der Übertragung der Bildsignale bzw. Bilddaten eineErfmdungsgemaß is now by means of the method described below and the corresponding device in the transmission of the image signals or image data a
Ausblendung bestimmter Teilbereiche Al und/oder A2 durchgeführt, wenn ein sensitives Ereignis erkannt wird, das z.B. der Eingabe von PIN-Nummern oder dem Einfuhren einer Karten entspricht. Die ausgeblendeten Teilbereiche Al und A2 beziehen sich insbesondere auf sensitive Bereiche desSuppression of certain subareas Al and / or A2 performed when a sensitive event is detected, which is e.g. entering PIN numbers or importing a card. The hidden subregions Al and A2 relate in particular to sensitive areas of the
Aufnahmebereiches AO, hier z.B. auf den Bereich Al, der diePickup area AO, here e.g. to the area Al, who the
Tastatur KBD abdeckt, sowie auf den Bereich A2 , der denKeyboard KBD covers, as well as on the area A2, the
Kartenschlitz SLT abdeckt. Anhand der Fig. 2 und 3 wird nun das erfindungsgemaße Verfahren und die danach arbeitendeCard slot SLT covers. With reference to FIGS. 2 and 3, the inventive method and the working thereafter will now be
Vorrichtung naher beschrieben:Device closer described:
Die Fig. 2 zeigt in Form eines Blockschaltbildes den Aufbau einer erfmdungsgemaßen Vorrichtung, die insbesondere als Detektionseinheit DET ausgebildet ist, und zumindest mit einer Bildverarbeitungsemheit PRC verbunden ist, die von der Kamera CAM erzeugte Bildsignale Sa empfangt und diese verarbeitet. Die Bildverarbeitungsemheit PRC erzeugt aus den Bildsignalen Sa entsprechende digitale Bilddaten Sb und übertragt diese beispielsweise an eine Speichereinrichtung MEM. Diese Speichereinrichtung kann in einem von dem Selbstbedienungsterminal entfernten Server angeordnet sein. Zwischen der Kamera CAM und der Bildverarbeitungsemheit PRC befindet sich eine erste Verbindung Ca, über die die Bildsignale übertragen werden. Diese Verbindung Ca ist beispielsweise eine analoge Verbindung in Form eines Koaxialkabels, das entsprechende Bildsignale m Form von Videosignalen von der Kamera an die Bildverarbeitungsemheit übertragt. Vorzugsweise werden die Kamera CAM und die Bildverarbeitungsemheit PRC in einem Modul MD integriert, damit Dritte keinen direkten Zugriff auf die Verbindung Ca haben, um dort Abhorversuche vorzunehmen.2 shows in the form of a block diagram the structure of a device according to the invention, which is designed in particular as a detection unit DET and is connected at least to an image processing unit PRC, which receives image signals Sa generated by the camera CAM and processes them. The image processing unit PRC generates the image signals Sa corresponding digital image data Sb and transmits them, for example, to a memory device MEM. This storage device may be located in a server remote from the self-service terminal. Between the camera CAM and the Bildverarbeitungsemheit PRC is a first connection Ca, via which the image signals are transmitted. This connection Ca is, for example, an analogue connection in the form of a coaxial cable which transmits corresponding image signals m of video signals from the camera to the image processing unit. The camera CAM and the image processing unit PRC are preferably integrated in a module MD so that third parties do not have direct access to the connection Ca in order to perform interrogation attempts there.
Zwischen der Bildverarbeitungsemheit PRC und dem externen Speicher MEM befindet sich eine zweite Verbindung Cb, über die die erzeugten digitalen Bilddaten Sb oder die erfmdungsgemaß im Falle eines sensitiven Ereignisses veränderten digitalen Bilddaten Sb' übertragen werden. Diese Verbindung Cb stellt somit eine sichere digitale Datenubertragungsverbmdung dar, die z.B. über Daten- oder Kommunikationsnetze, wie z.B. IP-Verbmdungen, bis zu entfernten Rechnern (Servern) reichen kann. Die übertragenen Bilddaten Sb bzw. Sb' werden dann empfangsseitig in dem dortigen Speicher MEM zwischengespeichert und dann einer Datenanzeige und/oder Auswertung zugeführt, um die von der Kamera erfassten Bilder auszuwerten.Between the Bildverarbeitungsemheit PRC and the external memory MEM is a second connection Cb, via which the generated digital image data Sb or erfmdungsgemaß in case of a sensitive event changed digital image data Sb 'are transmitted. This connection Cb thus represents a secure digital data transmission connection, e.g. via data or communication networks, e.g. IP connections, to remote computers (servers) can reach. The transmitted image data Sb or Sb 'are then buffered at the receiving end in the local memory MEM and then supplied to a data display and / or evaluation in order to evaluate the images captured by the camera.
Insbesondere diese zweite Verbindung Cb bietet einen potenziellen Angriffspunkt für Lauschangriffe, indem Dritte versuchen, diese Verbindung anzuzapfen. Zu Abwehr wird erfmdungsgemaß nun zumindest die Übertragung der digitalen Bilddaten Sb bzw. Sb' derart gesteuert, dass keine Bilddaten übertragen werden, die sensitive Vorgange bzw. Ereignisse, wie z.B. Tastatureingaben oder das Einfuhren einer Bankkarte wiedergeben konnten. Die Steuerung erfolgt nach dem erfindungsgemaßen Verfahren, das anhand der Fig. 3 nachfolgend naher beschrieben wird.In particular, this second connection Cb offers a potential point of attack for eavesdropping attacks by third parties trying to tap this connection. For defense is erfmdungsgemaß now at least the transmission of the digital Image data Sb or Sb 'controlled so that no image data is transmitted, the sensitive processes or events, such as keyboard input or imports of a bank card could play. The control takes place according to the inventive method, which is described in more detail below with reference to FIG. 3.
Die Fig. 3 zeigt das Ablaufdiagramm für ein Verfahren 100 mit den Schritten 110 bis 130. In einem ersten Schritt fuhrt die Kamera CAM Bildaufnahmen durch und erzeugt entsprechende Bildsignale Sb (siehe auch Fig. 1 und 2) . Aus diesen analogen Bildsignalen werden digitale Bilddaten Sb in der Bildverarbeitungseinheit PRC erzeugt. Danach wird in einem Schritt 120 durch Auswertung der erzeugten Bilddaten festgestellt, ob ein Ereignis vorliegt, das die Bedienung von sensitiven Bereichen im Bedienbereich betreffen konnte. Beispielsweise wird anhand der Auswertung der Bilddaten Sb erkannt, dass eine Person die Tastatur KBD im Bedienbereich des Bankautomaten ATM bedient. Außerdem kann auch erkannt werden, ob eine Person eine Bankkarte in den Kartenschlitz SLT einfuhrt. Ist dies der Fall, so folgt in einem Schritt 121 die Erzeugung eines Auslösesignals bzw. Triggers TR (siehe Fig. 2) der die Erzeugung bzw. Übertragung der Bilddaten dahingehend steuert, dass zumindest Teilbilddaten ausgeblendet bzw. ersetzt werden, die die genannten sensitiven Bildbereiche Al bzw. A2 betreffen.3 shows the flow chart for a method 100 with the steps 110 to 130. In a first step, the camera performs CAM image recordings and generates corresponding image signals Sb (see also FIGS. 1 and 2). From these analog image signals, digital image data Sb are generated in the image processing unit PRC. Thereafter, in a step 120, by evaluating the generated image data, it is determined whether an event has occurred that could affect the operation of sensitive areas in the operating area. For example, it is recognized on the basis of the evaluation of the image data Sb that a person operates the keyboard KBD in the operating area of the ATM ATM. In addition, it can also be recognized whether a person introduces a bank card into the card slot SLT. If this is the case, the generation of a trigger signal TR (see FIG. 2) follows in a step 121 which controls the generation or transmission of the image data in such a way that at least partial image data which comprises the said sensitive image regions is hidden or replaced Al or A2 concern.
In einem nachfolgenden Schritt 122 werden dann die Bilddaten Sb' übertragen, wobei die sensitiven Bilddaten durch kunstlich erzeugte Daten (Dummy-Daten) ersetzt worden sind. In einem nachfolgenden Schritt 130 erfolgt dann die Übertragung der veränderten Bilddaten Sb' über die zweite Verbindung Cb. Wurde im Schritt 120 jedoch festgestellt, dass kein Ereiqms vorliegt, so erfolgt entsprechend dem Schritt 130 eine Übertragung der Oπgxnal-Bilddaten Sb, d.h. der unveränderten Bilddaten. Durch diese Maßnahme wird erreicht, dass nach wie vor eine sichere Überwachung des Selbstbedienungsterrninals bzw. Bankautomaten ATM durchgeführt werden kann, dass aber im Falle von Ereignissen, die sensitiv sind, entsprechende Bilddalen nicht erzeugt bzw. nicht übertragen werden.In a subsequent step 122, the image data Sb 'are then transmitted, the sensitive image data having been replaced by artificially generated data (dummy data). In a subsequent step 130, the transmission of the modified image data Sb 'then takes place via the second connection Cb. If, however, it was determined in step 120 that there is no event, a transmission of the image data Sb, ie the unchanged image data, takes place in accordance with step 130. This measure ensures that secure monitoring of the self-service terminal or cash dispenser ATM can still be carried out, but that in the case of events that are sensitive, corresponding image dales are not generated or not transmitted.
In einer einfachen Ausfuhrung kann für den Fall, dass ein sensitives Ereignis erkannt wird, die Vorrichtung DET auch einen Ausloser bzw. Trigger TR* erzeugen, der die Kamera CAM direkt ansteuert, um die Erzeugung des Bildsigna] s Sa gänzlich zu unterbinden. In diesem Fall wird also die komplette Bildaufnahme unterdruckt.In a simple embodiment, in the event that a sensitive event is detected, the device DET can also generate a trigger TR * which directly drives the camera CAM to completely prevent the generation of the image signal Sa. In this case, the complete image acquisition is suppressed.
Das Erkennen von Ereignissen kann nicht nur durch Auswertung der Bildsignale Sa bzw. der daraus gewonnenen Bilddaten Sb erfolgen, sondern kann alternativ oder zusätzlich dazu auch anhand von Sensorsignalen erfolgen. In diesem Falle ist die Vorrichtung DET mit Sensoren verbunden, die an den sensitiven Bedienelementen, wie z.B. der Tastatur KBD und/oder dem Kartenschlitz SLT angebracht sind. Der Sensor kann im einfachen Fall auch die jeweilige Taste der Tastatur selbst oder einen Detektor am Eingang des Kartenschlitzes SLT sein.The recognition of events can not only take place by evaluating the image signals Sa or the image data Sb obtained therefrom, but alternatively or additionally, they can also take place on the basis of sensor signals. In this case, the device DET is connected to sensors connected to the sensitive controls, e.g. the keyboard KBD and / or the card slot SLT are mounted. In the simple case, the sensor can also be the respective key of the keyboard itself or a detector at the entrance of the card slot SLT.
Als Kamera CAM kann eine Kamera üblicher Bauart eingesetzt werden, welche analoge oder digitale Bildaufndhmen durchfuhrt. Die erste Verbindung Ca kann beispielsweise als Koaxialkabel für analoge Bildsignale oder beispielsweise als USB-Kabel für digitalisierte Bildsignale bzw. Bilddaten ausgeführt sein. Die BildN/erarbeitung erfolgt m dei Bildverarbeitungseinheit PRC, die beispielsweise als dezidierte Elektronik oder auch als Softwareprogramm, welches auf einem Personal Computer lauft, ausgeführt sein kann. Das verarbeitete Bild bzw. die gewonnenen Bilddaten werden dann über die zweite Verbindung Cb weitergeleitet zu dem Speicher MEM bzw. zu einem entfernten Rechner, insbesondere einem Server, der die Bilddaten weiter auswertet bzw. zur Anzeige bringt. Der Server befindet sich beispielsweise in einer Uberwachungszentrale, die mehrere Selbstbedienungsterminals gleichzeitig überwacht.As camera CAM, a camera of conventional design can be used, which performs analog or digital Bildaufndhmen. The first connection Ca can be embodied, for example, as a coaxial cable for analogue image signals or, for example, as a USB cable for digitized image signals or image data. The image processing takes place in de Image processing unit PRC, which may be implemented, for example, as dedicated electronics or as a software program running on a personal computer. The processed image or the acquired image data is then forwarded via the second connection Cb to the memory MEM or to a remote computer, in particular a server, which further evaluates or displays the image data. For example, the server resides in a surveillance center that simultaneously monitors multiple self-service terminals.
Neben den bereits beschriebenen Maßnahmen können die übertragenen Bildsignale Sa bzw. Bilddaten Sb zusatzlich noch verschlüsselt werden, um gegen Lauschversuche Dritter noch starker gesichert zu sein. Vorzugsweise bilden die Kamera CAM und die Bildverarbeitungseinheit PRC eine bauliche Einheit in Form eines Moduls MD. Wie oben beschrieben worden ist, werden in der Bildverarbeitung diejenigen Bereiche des Bildes ausgeblendet und/oder erkenntlich gemacht, aus welchen sich Rückschlüsse auf die PIN-Emgabe oder auf Kartendaten gewinnen lassen können. Die Veränderung der Bilddaten erfolgt beispielsweise, indem alle Pixel in den besagten Teilbereichen auf den gleichen Färb- und/oder Helligkeitswert gesetzt werden.In addition to the measures already described, the transmitted image signals Sa or image data Sb can additionally be encrypted in order to be even more secure against eavesdropping attempts by third parties. The camera CAM and the image processing unit PRC preferably form a structural unit in the form of a module MD. As described above, those areas of the image are hidden and / or made visible in the image processing, from which conclusions can be drawn on the PIN delivery or on card data. The modification of the image data takes place, for example, by setting all pixels in the said subregions to the same color and / or brightness value.
Die Steuerung der Erzeugung der Bildsignale bzw. Übertragung der Bilddaten erfolgt zeitabhängig, indem die beschriebene Ausblendung von Bilddaten nur zu solchen Zeitpunkten durchgeführt wird, wenn ein Ereignis erkannt wird. Somit wird sichergestellt, dass keine sensitiven bzw. kritischen Vorgange, wie beispielsweise Eingaben von PIN-Nummern bzw. Einfuhren von Karten, aufgenommen und/oder übertragen werden. Die Festlegung der ausgeblendeten bzw. veränderten Teil- Bilddatenbereiche kann auch derart weiter ausgebildet weiden, dass nur dezidierte Teilbereiche, wie etwa Schriftzuge und Ziffernangaben auf Bankkarten ausgeblendet bzw. überschrieben werden. Die Abwehr gegen Lauschversuche kann auch derart erfolgen, dass mittels eines Triggers die BiIdaufnähme vollständig unterbrochen wird. Dies geschieht beispielsweise, sobald eine Hand bzw. ein Finger sich über der Tastatur KBD befindet und somit auf den Vorgang einer PIN-Eingabe geschlossen werden kann. Das Erkennen einer solchen Situation kann durch Bilderkennungstechmken durchgeführt werden, mittels denen z.B. das Erscheinen von Hand bzw. Fingern im Aufnahmebereich, insbesondere im Bereich der Tastatur KBD, oder das Einfuhren einer Bankkarte in den Kartenschlitz SLT erkannt werden.The control of the generation of the image signals or transmission of the image data is time-dependent in that the described masking of image data is performed only at such times when an event is detected. This ensures that no sensitive or critical processes, such as inputs of PIN numbers or imports of cards, are recorded and / or transmitted. The determination of the hidden or modified Image data areas can also be developed in such a way that only dedicated subareas, such as text characters and numbers, are hidden or overwritten on bank cards. The defense against eavesdropping tests can also be carried out in such a way that the image recording is completely interrupted by means of a trigger. This happens, for example, as soon as a hand or a finger is located above the keyboard KBD and thus can be closed to the process of entering a PIN. The recognition of such a situation can be carried out by Bildkennungstechmken, by means of which, for example, the appearance of hand or fingers in the recording area, in particular in the field of keyboard KBD, or the import of a bank card are detected in the card slot SLT.
Weiterhin können zur Überprüfung, ob ein sensitives Ereignis vorliegt, neben Sensoren noch zusätzliche Informationen herangezogen werden, die in der Regel m einem Selbstbedienungsterminal vorhanden sind. Dies ist beispiels- weise der aktuelle Status bezuglich des Zustandes des Selbstbedienungstermmals . So braucht beispielsweise die Hand bei der PIN-Emgabe nur dann im Bild maskiert zu werden, wenn auch tatsachlich eine PIN-Nummer eingegeben wird. Hingegen ist keine Maskierung erforderlich, wenn die Hand lediglich eine Menusteuerung durchfuhrt. Auch ist keine Maskierung erforderlich, solange sich eine Magnet- bzw. Chipkarte im System befindet.Furthermore, in order to check whether a sensitive event is present, in addition to sensors additional information is used, which is usually present in a self-service terminal. This is, for example, the current status regarding the state of the self-service feature. For example, when the PIN is issued, the hand only needs to be masked in the image when a PIN number is actually entered. On the other hand, no masking is required if the hand only performs a menu control. Also, no masking is required as long as a magnetic or chip card is in the system.
Die vorgeschlagene Erfindung verhindert effektiv jeden Lauschangriff auf die Übertragung von Kamerasignalen bzw. Bilddaten an einem Selbstbedienungsterminal. BezugszeichenlisteThe proposed invention effectively prevents any eavesdropping on the transmission of camera signals or image data to a self-service terminal. LIST OF REFERENCE NUMBERS
ATM Selbstbedienungs terminal, hier als Geldautomat ausgebildet;ATM self-service terminal, here designed as an ATM;
MON BildschirmMON screen
SLT KartenschlitzSLT card slot
KBD Bedienelement in Gestalt einer Tastatur BTN Bedienelemente in Gestalt von FunktionstastenKBD control element in the form of a keyboard BTN control elements in the form of function keys
LBL Schild bzw. BeschriftungLBL sign or label
CAM Kamera zur Überwachung des ATM-Bedienbereichs AO Aufnahmebereich Al, A2 sensitive Teilbereiche, die ausgeblendet bzw. maskiert werdenCAM camera for monitoring the ATM operating area AO Recording area Al, A2 sensitive subareas that are hidden or masked
DET Vorrichtung umfassend eine Detektionsemheit zumDET device comprising a detection unit for
Erkennen sensitiver Ereignisse PRC BildverarbeitungsemheitDetecting sensitive events PRC image processing unit
MD Modul mit CAM, PCR und DETMD module with CAM, PCR and DET
MEM externe Speichereinrichtung (z.B. eines Servers)MEM external storage device (e.g., a server)
TR, TR* Steuersignale bzw. Trigger Sa analoges Bildsignal von CAMTR, TR * control signals or trigger Sa analog image signal from CAM
Sb, Sb' digitale Bilddaten von PRC aus dem Bildsignal Sd gewonnen Ca, Cb Verbindungen zur Bild-UbertragungSb, Sb 'digital image data of PRC obtained from the image signal Sd Ca, Cb connections for image transmission
100 Verfahren zur Abwehr von Lauschversuchen mit100 methods to ward off eavesdropping with
Schritten 110 bis 130 Steps 110 to 130

Claims

Patentansprüche claims
1. Verfahren (100) zur Abwehr von Lauschversuchen bei der Übertragung von Bilddaten (Sb), die aus BildsignalenA method (100) for preventing eavesdropping in the transmission of image data (Sb) consisting of image signals
5 (Sa), die von einer an einem Selbstbedienungs terminal5 (sat), from one to a self-service terminal
(ATM) installierten Kamera (CAM) erzeugt werden, gewonnen werden, wobei die Kamera (CAM) einen Aufnahmebereich (AO) erfasst, der einen zu überwachenden Bedienbereich des(CAM) are produced, the camera (CAM) detects a recording area (AO), which is a monitored operating area of the
] 0 Selbstbedienungsterminals (ATM) abdeckt (110), dadurch gekennzeichnet, dass am Selbstbedienungsterminal (ATM) auftretende Ereignisse erkannt werden (120) und dass in Abhängigkeit von mindestens einem erkannten Ereignis] 0 Self-service terminals (ATM) covering (110), characterized in that at the self-service terminal (ATM) occurring events are detected (120) and that depending on at least one detected event
15 die Erzeugung der Bildsignale (Sa) und/oder die15 the generation of the image signals (Sa) and / or the
Übertragung der Bilddaten (Sb) gesteuert wird (122, 130) .Transmission of the image data (Sb) is controlled (122, 130).
2. Verfahren (100) nach Anspruch 1, dadurch2. Method (100) according to claim 1, characterized
20 gekennzeichnet, dass am Selbstbedienungsterminal (ATM) im Bedienbereich, insbesondere im Aufnahmebereich (AO) der Kamera (CAM) , und/oder außerhalb davon Ereignisse erkannt werden.20 characterized in that the self-service terminal (ATM) in the operating area, in particular in the recording area (AO) of the camera (CAM), and / or outside events are detected.
25 3. Verfahren (100) nach Anspruch 1 oder 2, dadurch gekennzeichnet, dass als Ereignis, die Betätigung einer Tastatur (KBD) im Bedienbereich des Selbstbedienungsterminals (ATM) erkannt wird (120) .25 3. The method (100) according to claim 1 or 2, characterized in that as an event, the operation of a keyboard (KBD) in the operating area of the self-service terminal (ATM) is detected (120).
30 4. Verfahren (100) nach einem der Ansprüche 1 bis 3, dadurch gekennzeichnet, dass als Ereignis, das Einfuhren einer Karte in einen Kartenschlitz (SLT) im Bedienbereich des Selbstbedienungsterminals (ATM) erkannt wird (120) .4. The method (100) according to one of claims 1 to 3, characterized in that as an event, the import of a card into a card slot (SLT) in Operating area of the self-service terminal (ATM) is detected (120).
5. Verfahren (100) nach einem der Ansprüche 1 bis 4, dadurch gekennzeichnet, dass die Erzeugung der5. Method (100) according to one of claims 1 to 4, characterized in that the generation of the
Bildsignale (Sa) unterbunden wird, wenn zumindest ein Ereignis erkannt wird.Image signals (Sa) is suppressed if at least one event is detected.
6. Verfahren (100) nach einem der Ansprüche 1 bis 4, dadurch gekennzeichnet, dass die Übertragung der aus den erzeugten Bildsignalen (Sa) gewonnenen Bilddaten (Sb) unterbunden wird, wenn zumindest ein Ereignis erkannt wird.6. Method (100) according to claim 1, characterized in that the transmission of the image data (Sb) obtained from the generated image signals (Sa) is prevented if at least one event is detected.
7. Verfahren (100) nach einem der Ansprüche 1 bis 4, dadurch gekennzeichnet, dass m den gewonnenen Bilddaten (Sb) zumindest Teilbilddaten (Sb' ) ausgeblendet oder durch künstlich erzeugte Daten ersetzt werden, wenn zumindest ein Ereignis erkannt wird.7. Method (100) according to one of claims 1 to 4, characterized in that m the image data (Sb) obtained at least partial image data (Sb ') hidden or replaced by artificially generated data when at least one event is detected.
8. Verfahren (100) nach Anspruch 7, dadurch gekennzeichnet, dass die Teilbilddaten (Sb' ) sich auf mindestens einen Teilbereich (Al, A2) des Aufnahmebereichs (AO) beziehen, insbesondere sich auf einen ersten und/oder zweiten Teilbereich (Al, A2 ) beziehen, der eine Tastatur (KBD) und/oder einen Kartenschlitz (SLT) im Bedienbereich des Selbstbedienungsterminals (ATM) abdeckt.8. Method (100) according to claim 7, characterized in that the partial image data (Sb ') relate to at least one partial area (A1, A2) of the receiving area (A0), in particular to a first and / or second partial area (A1, A2), which covers a keyboard (KBD) and / or a card slot (SLT) in the operating area of the self-service terminal (ATM).
9. Verfahren (100) nach einem der vorhergehenden Ansprüche, dadurch gekennzeichnet, dass die Ereignisse durch Auswertung der Bildsignale (Sa) und/oder der Bilddaten (Sb) erkannt werden (120) .9. The method (100) according to any one of the preceding claims, characterized in that the events by evaluation of the image signals (Sa) and / or the Image data (Sb) are detected (120).
10. Verfahren nach einem der vorhergehenden Ansprüche, dadurch gekennzeichnet, dass die Ereignisse durch Auswertung von mindestens einem Sensorsignal erkannt werden, das von einem Sensor zur Überwachung eines Bedienelementes (KBD, SLT) im Bedienbereich des Selbstbedienungsterminals (ATM) erzeugt wird.10. The method according to any one of the preceding claims, characterized in that the events are detected by evaluation of at least one sensor signal generated by a sensor for monitoring a control element (KBD, SLT) in the operating area of the self-service terminal (ATM).
11. Verfahren (100) nach einem der vorhergehenden11. Method (100) according to one of the preceding
Ansprüche, dadurch gekennzeichnet, dass zur Steuerung der Erzeugung der Bildsignale (Sa) und/oder der Übertragung der Bilddaten (Sb) mindestens ein Auslosesignal (TR, TR*) erzeugt wird (121), wenn ein Ereignis erkannt wird.Claims, characterized in that for controlling the generation of the image signals (Sa) and / or the transmission of the image data (Sb) at least one trigger signal (TR, TR *) is generated (121) when an event is detected.
12. Vorrichtung (DET) zur Abwehr von Lauschversuchen bei der Übertragung von Bilddaten (Sb) , die aus Bildsignalen (Sa) , die eine an einem Selbstbedienungsterminal (ATM) installierte Kamera12. Apparatus (DET) for the prevention of eavesdropping in the transmission of image data (Sb) consisting of image signals (Sa), which is a camera installed on a self-service terminal (ATM)
(CAM) erzeugt, gewonnen werden, wobei die Kamera (CAM) einen Aufnahmebereich (AO) erfasst, der einen zu überwachenden Bedienbereich des Selbstbedienungsterminal (ATM) abdeckt (110), dadurch gekennzeichnet, dass die Vorrichtung (DET) Signale über an dem Selbstbedienungsterminal (ATM) auftretende Ereignisse erhalt und/oder im Aufnahmebereich (AO) auftretende Ereignisse mittels Auswertung der Bildsignale (Sa), der Bilddaten (Sb) und/oder von Sensorsignalen erkennt und in Abhängigkeit von mindestens einem erkannten Ereignis die Erzeugung der Bildsignale (Sa) und/oder die Übertragung der Bilddaten (Sb) steuert.(CAM), wherein the camera (CAM) detects a reception area (AO) covering a control area of the self-service terminal (ATM) to be monitored (110), characterized in that the device (DET) transmits signals via to the self-service terminal (ATM) occurring events and / or occurring in the recording area (AO) events by evaluating the image signals (Sa), the image data (Sb) and / or detects sensor signals and depending on at least one detected event, the generation of the image signals (Sa) and / or the Transmission of image data (Sb) controls.
13.Vorrichtung (DET) nach Anspruch 12, dadurch gekennzezch.net, dass die Vorrichtung (DET) mit der Kamera (CAM) und/oder mit einer13.Vorrichtung (DET) according to claim 12, characterized gekennzez.net, that the device (DET) with the camera (CAM) and / or with a
Bildverarbeztungseinhezt (PRC) verbunden ist, die aus den Bildsignalen (Sa) die Bilddaten (Sb) erzeugt oder ableitet .Image processing unit (PRC) which generates or derives the image data (Sb) from the image signals (Sa).
14. Selbstbedienungstermznal (ATM) mit einer Vorrichtung (DET) zur Abwehr von Lauschversuchen bei der Übertragung von Bilddaten (Sb) , die aus Bildsignalen (Sa) , die eine an dem Selbstbedzenungstermmal (ATM) installierte Kamera (CAM) erzeugt, gewonnen werden, wobei die Kamera (CAM) einen Aufnahmebereich (AO) erfasst, der einen zu überwachenden Bedienbereich des Selbstbedzenungstermmal (ATM) abdeckt (110), dadurch gekennzeichnet, dass die Vorrichtung (DET) Signale über an dem Selbstbedzenungstermznal (ATM) auftretende Ereignisse erhalt und/oder im Aufnahmebereich (AO) auftretende Ereignisse mittels Auswertung der Bildsignale (Sa) , der Bilddaten (Sb) und/oder von Sensorsignalen erkennt und m Abhängigkeit von mindestens einem erkannten Ereignis die Erzeugung der Bildsignale (Sa) und/oder die14. A self-service terminal (ATM) having a device (DET) for preventing eavesdropping in the transmission of image data (Sb) obtained from image signals (Sa) produced by a camera (CAM) installed on the self-confession terminal (ATM), wherein the camera (CAM) detects a receiving area (AO) covering (110) an operating area of the self-contemplation terminal (ATM) to be monitored, characterized in that the device (DET) receives signals via events occurring at the self-contemplation terminal (ATM) and / or in the recording area (AO) occurring events by evaluating the image signals (Sa), the image data (Sb) and / or sensor signals recognizes m and depending on at least one detected event, the generation of the image signals (Sa) and / or the
Übertragung der Bilddaten (Sb) steuert.Transmission of image data (Sb) controls.
15. Selbstbedzenungstermmal (ATM) nach Anspruch 14, dadurch gekennzeichnet, dass das Selbstbedzenungstermznal (ATM) eine mit der Kamera15. Selbstbedzenungstermmal (ATM) according to claim 14, characterized in that the Selbstbedzenungstermznal (ATM) one with the camera
(CAM) über eine erste Verbindung (Ca) verbundene Bzldverarbeztungseznhezt (PRC) aufweist, die aus den Bildsignalen (Sa) die Bilddaten (Sb) erzeugt oder able it et .(CAM) has a first connection (Ca) connected Bzldverarztztungznehezt (PRC), which generates from the image signals (Sa) the image data (Sb) or able it et.
16. Selbstbedienungsterminal (ATM) nach Anspruch 15, dadurch gekennzeichnet, dass die Bildverarbeitungsemheit (PRC) die Bilddaten (Sb) über eine zweite Verbindung (Cb) an einen internen oder externen Datenspeicher (MEM) übertragt.16. Self-service terminal (ATM) according to claim 15, characterized in that the Bildverarbeitungsemheit (PRC) transmits the image data (Sb) via a second connection (Cb) to an internal or external data memory (MEM).
17. Selbstbedienungsterminal (ATM) nach einem der Anspiuche 13 bis 15, dadurch gekennzeichnet, dass die Kamera17. Self-service terminal (ATM) according to one of Anspiuche 13 to 15, characterized in that the camera
(CAM) und die Bildverarbeitungsemheit (PRC) in einem Modul (MD) integriert sind.(CAM) and the Bildverarbeitungsemheit (PRC) in a module (MD) are integrated.
18. Selbstbedienungsterminal (ATM) nach einem der Ansprüche 13 bis 16, dadurch gekennzeichnet, dass das18. Self-service terminal (ATM) according to one of claims 13 to 16, characterized in that the
Selbstbedienungsterminal als ein Geldautomat (ATM) ausgebildet ist, der einen Bedienbereich mit einer Tastatur (KBD) und/oder einem Kartenschlitz (SLT) aufweist . Self-service terminal as an ATM (ATM) is formed, which has an operating area with a keyboard (KBD) and / or a card slot (SLT).
EP09782032.8A 2008-08-26 2009-08-20 Method and device for deflecting eavesdropping attempts in image data transfer at a self-service terminal Active EP2321806B1 (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
DE102008039689A DE102008039689A1 (en) 2008-08-26 2008-08-26 A method and apparatus for preventing eavesdropping during image data transmission at a self-service terminal
PCT/EP2009/060774 WO2010023153A1 (en) 2008-08-26 2009-08-20 Method and device for deflecting eavesdropping attempts in image data transfer at a self-service terminal

Publications (2)

Publication Number Publication Date
EP2321806A1 true EP2321806A1 (en) 2011-05-18
EP2321806B1 EP2321806B1 (en) 2015-10-28

Family

ID=41264181

Family Applications (1)

Application Number Title Priority Date Filing Date
EP09782032.8A Active EP2321806B1 (en) 2008-08-26 2009-08-20 Method and device for deflecting eavesdropping attempts in image data transfer at a self-service terminal

Country Status (5)

Country Link
US (1) US20110134246A1 (en)
EP (1) EP2321806B1 (en)
CN (1) CN102132328B (en)
DE (1) DE102008039689A1 (en)
WO (1) WO2010023153A1 (en)

Families Citing this family (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE102010036350A1 (en) * 2010-07-12 2014-01-16 Wincor Nixdorf International Gmbh Device for video surveillance of a self-service terminal
DE102010060624A1 (en) 2010-11-17 2012-05-24 Wincor Nixdorf International Gmbh Method and device for the prevention of manipulation attempts on a camera system
EP2897112B1 (en) 2014-01-17 2019-03-06 Wincor Nixdorf International GmbH Method and apparatus for the prevention of false alarms in monitoring systems
US11215785B2 (en) 2017-07-13 2022-01-04 Hewlett-Packard Development Company, L.P. Selective defocus of cameras

Family Cites Families (12)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6731778B1 (en) * 1999-03-31 2004-05-04 Oki Electric Industry Co, Ltd. Photographing apparatus and monitoring system using same
US6509926B1 (en) * 2000-02-17 2003-01-21 Sensormatic Electronics Corporation Surveillance apparatus for camera surveillance system
DE10037175A1 (en) * 2000-07-31 2002-02-21 Orga Kartensysteme Gmbh transaction confirmation
JP4187935B2 (en) * 2000-08-23 2008-11-26 株式会社東芝 RADIO COMMUNICATION SYSTEM, TRANSMITTING DEVICE, RECEIVING DEVICE, AND CONTENT DATA TRANSFER METHOD
WO2003021545A1 (en) * 2001-08-30 2003-03-13 Fujitsu Limited Automatic money transacting apparatus, and paper currency unit having built-in camera
US20040223054A1 (en) * 2003-05-06 2004-11-11 Rotholtz Ben Aaron Multi-purpose video surveillance
DE10326657B4 (en) * 2003-06-11 2006-03-09 Vin - Videotronic Infosystems Gmbh Method for operating a camera system
JP2005010826A (en) * 2003-06-16 2005-01-13 Fujitsu Ltd Authentication terminal device, biometrics information authentication system and biometrics information acquisition system
DE20318489U1 (en) * 2003-11-26 2004-02-19 Conect Kommunikations Systeme Gmbh Monitoring system for use with cashpoint machines has pair of digital image capture units to observe user
JP4433985B2 (en) * 2004-11-09 2010-03-17 日本ビクター株式会社 Surveillance image processing device
JP4961158B2 (en) * 2006-04-12 2012-06-27 日立オムロンターミナルソリューションズ株式会社 Automatic transaction device and suspicious object detection system
DE102006049518A1 (en) * 2006-10-20 2008-04-24 Wincor Nixdorf International Gmbh Self-service device with monitoring device

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See references of WO2010023153A1 *

Also Published As

Publication number Publication date
CN102132328A (en) 2011-07-20
DE102008039689A1 (en) 2010-03-04
US20110134246A1 (en) 2011-06-09
WO2010023153A1 (en) 2010-03-04
CN102132328B (en) 2015-11-25
EP2321806B1 (en) 2015-10-28

Similar Documents

Publication Publication Date Title
DE69935144T2 (en) METHOD AND DEVICE FOR VIDEO MOTION DETECTION
EP2422328B1 (en) Automated teller machine comprising at least one camera to detect manipulation attempts
WO2010121959A1 (en) Method for recognizing attempts at manipulating a self-service terminal, and data processing unit therefor
WO2010121951A1 (en) Automated teller machine comprising camera to detect manipulation attempts
CH695003A5 (en) Method and apparatus for protecting ATMs against manipulation.
DE102004035224A1 (en) Self-service device with tamper detection
DE60310139T2 (en) DETECTION OF MANIPULATION ON A CHIP CARD INTERFACE
EP2897112A1 (en) Method and apparatus for the prevention of false alarms in monitoring systems
EP2321806B1 (en) Method and device for deflecting eavesdropping attempts in image data transfer at a self-service terminal
EP2736026A1 (en) Device for reading out a magnetic strip and/or chip card with a camera for detecting inserted skimming modules
WO2010037610A1 (en) Method and device for recognizing attacks on a self-service machine
DE112018004563T5 (en) SECURITY DEVICE FOR A MONEY MACHINE
DE20318489U1 (en) Monitoring system for use with cashpoint machines has pair of digital image capture units to observe user
DE102006025207B3 (en) Self service device particularly cash dispenser, has detection device having receiver for high-frequency electromagnetic signal, where signal has scan module for scanning frequency range
EP2603905B1 (en) Method and device for detecting and verifying attempts to manipulate a self-service terminal
EP2455925B1 (en) Method and device for defending against attempts to manipulate a camera system
DE102010060128B4 (en) Method and device for checking a self-service facility
EP2422324B1 (en) Automated teller machine comprising camera arrangement to detect manipulation attempts
DE102010060473A1 (en) Method for controlling image acquisition in cash dispenser, involves triggering alarm if probability for disturbing intervention in operation of cash dispenser exceeds threshold
DE202007018769U1 (en) Fraud detection system for point-of-sale terminals
DE102015115194A1 (en) Card reading device and a self-service terminal equipped therewith and method for monitoring the same
EP1780684A1 (en) System and method for dispensing cash
DE102010036350A1 (en) Device for video surveillance of a self-service terminal
DE102010033498A1 (en) Device for recognizing manipulations at self-service machine e.g. automated teller machine, compares image data regarding specific condition of machine with image data regarding machine actual condition to recognize machine manipulation
DE102010060921A1 (en) Self-service system e.g. automated teller machine (ATM) system has document processing unit that scans barcode of document and performs optical character recognition of document based on input data of surveillance camera

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

17P Request for examination filed

Effective date: 20110315

AK Designated contracting states

Kind code of ref document: A1

Designated state(s): AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO SE SI SK SM TR

AX Request for extension of the european patent

Extension state: AL BA RS

DAX Request for extension of the european patent (deleted)
17Q First examination report despatched

Effective date: 20140312

GRAP Despatch of communication of intention to grant a patent

Free format text: ORIGINAL CODE: EPIDOSNIGR1

INTG Intention to grant announced

Effective date: 20150717

GRAS Grant fee paid

Free format text: ORIGINAL CODE: EPIDOSNIGR3

GRAA (expected) grant

Free format text: ORIGINAL CODE: 0009210

AK Designated contracting states

Kind code of ref document: B1

Designated state(s): AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO SE SI SK SM TR

REG Reference to a national code

Ref country code: GB

Ref legal event code: FG4D

Free format text: NOT ENGLISH

REG Reference to a national code

Ref country code: CH

Ref legal event code: EP

REG Reference to a national code

Ref country code: AT

Ref legal event code: REF

Ref document number: 758308

Country of ref document: AT

Kind code of ref document: T

Effective date: 20151115

REG Reference to a national code

Ref country code: IE

Ref legal event code: FG4D

Free format text: LANGUAGE OF EP DOCUMENT: GERMAN

REG Reference to a national code

Ref country code: DE

Ref legal event code: R096

Ref document number: 502009011778

Country of ref document: DE

REG Reference to a national code

Ref country code: LT

Ref legal event code: MG4D

REG Reference to a national code

Ref country code: NL

Ref legal event code: MP

Effective date: 20151028

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: IT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20151028

Ref country code: LT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20151028

Ref country code: ES

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20151028

Ref country code: IS

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20160228

Ref country code: NO

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20160128

Ref country code: NL

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20151028

Ref country code: HR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20151028

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: FI

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20151028

Ref country code: GR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20160129

Ref country code: LV

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20151028

Ref country code: PL

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20151028

Ref country code: SE

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20151028

Ref country code: PT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20160229

REG Reference to a national code

Ref country code: FR

Ref legal event code: PLFP

Year of fee payment: 8

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: CZ

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20151028

REG Reference to a national code

Ref country code: DE

Ref legal event code: R097

Ref document number: 502009011778

Country of ref document: DE

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: EE

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20151028

Ref country code: SM

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20151028

Ref country code: SK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20151028

Ref country code: RO

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20151028

Ref country code: DK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20151028

PLBE No opposition filed within time limit

Free format text: ORIGINAL CODE: 0009261

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: NO OPPOSITION FILED WITHIN TIME LIMIT

26N No opposition filed

Effective date: 20160729

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: SI

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20151028

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: BE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20160831

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: MC

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20151028

REG Reference to a national code

Ref country code: CH

Ref legal event code: PL

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: LI

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20160831

Ref country code: CH

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20160831

REG Reference to a national code

Ref country code: IE

Ref legal event code: MM4A

REG Reference to a national code

Ref country code: FR

Ref legal event code: PLFP

Year of fee payment: 9

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: IE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20160820

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: LU

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20160820

REG Reference to a national code

Ref country code: AT

Ref legal event code: MM01

Ref document number: 758308

Country of ref document: AT

Kind code of ref document: T

Effective date: 20160820

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: AT

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20160820

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: HU

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT; INVALID AB INITIO

Effective date: 20090820

Ref country code: CY

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20151028

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: MK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20151028

Ref country code: MT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20151028

Ref country code: TR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20151028

REG Reference to a national code

Ref country code: FR

Ref legal event code: PLFP

Year of fee payment: 10

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: BG

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20151028

REG Reference to a national code

Ref country code: FR

Ref legal event code: PLFP

Year of fee payment: 14

REG Reference to a national code

Ref country code: GB

Ref legal event code: 732E

Free format text: REGISTERED BETWEEN 20230323 AND 20230329

REG Reference to a national code

Ref country code: GB

Ref legal event code: 732E

Free format text: REGISTERED BETWEEN 20230525 AND 20230601

REG Reference to a national code

Ref country code: DE

Ref legal event code: R081

Ref document number: 502009011778

Country of ref document: DE

Owner name: DIEBOLD NIXDORF SYSTEMS GMBH, DE

Free format text: FORMER OWNER: WINCOR NIXDORF INTERNATIONAL GMBH, 33106 PADERBORN, DE

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: GB

Payment date: 20230720

Year of fee payment: 15

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: FR

Payment date: 20230720

Year of fee payment: 15

Ref country code: DE

Payment date: 20230720

Year of fee payment: 15