EP2393070A1 - Security system for data receiving unit - Google Patents
Security system for data receiving unit Download PDFInfo
- Publication number
- EP2393070A1 EP2393070A1 EP10164694A EP10164694A EP2393070A1 EP 2393070 A1 EP2393070 A1 EP 2393070A1 EP 10164694 A EP10164694 A EP 10164694A EP 10164694 A EP10164694 A EP 10164694A EP 2393070 A1 EP2393070 A1 EP 2393070A1
- Authority
- EP
- European Patent Office
- Prior art keywords
- user interface
- security system
- electric field
- proximity sensor
- components
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Withdrawn
Links
Images
Classifications
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07F—COIN-FREED OR LIKE APPARATUS
- G07F19/00—Complete banking systems; Coded card-freed arrangements adapted for dispensing or receiving monies or the like and posting such transactions to existing accounts, e.g. automatic teller machines
- G07F19/20—Automatic teller machines [ATMs]
- G07F19/205—Housing aspects of ATMs
- G07F19/2055—Anti-skimming aspects at ATMs
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07F—COIN-FREED OR LIKE APPARATUS
- G07F19/00—Complete banking systems; Coded card-freed arrangements adapted for dispensing or receiving monies or the like and posting such transactions to existing accounts, e.g. automatic teller machines
- G07F19/20—Automatic teller machines [ATMs]
Definitions
- the invention relates to a security system for a data receiving unit comprising a housing with a user interface and an electric field proximity sensor.
- Any kind of data receiving units may be object of a fraud attack, especially if the data sent to the data receiving unit is secret and if the data receiving unit is part of a system that protects anything of value.
- Self service terminals such as for example automated teller machines (ATM)
- ATM automated teller machines
- Thieves have created several ways to get access to the money. One is known as "skimming", where the thieves try to espy the relevant data to get access to the account and with it to the money of the account.
- the most important data for that is the personal identification number (PIN) which has to be entered in the automated teller machine through a keypad.
- PIN personal identification number
- card readers may also be subject to fraud-attacks. It is known to overlay card readers with fake card readers and to capture the data stored on a card while it is introduced into the card reader. This fraud-attack is also very hard to notice.
- Card readers may be part of self service terminals as well or they may be part of other systems such as for example any kind of access systems. It is generally known to use a card reader as a component to get access to buildings or rooms. A person that wants to get into a room has to put his card in or next to a card reader. If the card contains the right information the system grants access to the room.
- Other possible data receiving units for access systems are again keypads or touch pads, scanners, fingerprint sensors, cameras etc..
- WO 2005/109358 A1 describes a security system for automated teller machines with a capacitive proximity sensor on an inner surface of a protective covering of the automated teller machines.
- the capacitive proximity sensor is able to detect any foreign components positioned at an outer surface of the machine.
- GB 2 351 590 A describes a self service terminal with a sensor that is located as to capture objects in the area of data capture devices, e.g. underneath the keypad.
- the sensor described in this document may be a capacitive, an inductive or an ultra sonic sensor.
- the present invention provides a security system for a data receiving unit with a user interface and an electric field proximity sensor.
- the user interface comprises at least two components with at least partially conductive properties, the conductive components being electrically isolated from each other.
- the electric field proximity sensor has emitting and/or receiving devices. According to the invention the conductive components of the user interface are used as emitting and/or receiving devices of the electric field proximity sensor.
- Data receiving units in the sense of the invention are all kind of electric systems that are able to collect, receive etc. data.
- the data may be any kind of data, especially but not limited to secret data, such as for examples personal identification numbers (PlNs), passwords, keywords, fingerprints, pictures etc.. Those data may for example be used to get access to private or secret information, access to money but also access to buildings, rooms in buildings etc..
- Data receiving units usually have an user interface with means for receiving the above mentioned data, such as for example a keypad, a card reader, a RFID reader, a USB stick reader a touch pad, a scanner, a fingerprint sensor, a camera etc. If someone wants to get access to data, the data receiving units may be manipulated as described above.
- Electric field proximity sensors are used in security systems for automated teller machines. Such systems are based on electric field proximity sensing. Usually an alternating voltage is applied and an electric field is created that has a certain impedance. The impedance may be measured and any change in the impedance may be registered and analysed. Electric field proximity sensors usually have devices for emitting and/or receiving the electric field. Such emitting and/or receiving devices need to have at least partially conductive properties. For creating an electric field two such at least partially conductive components are needed. Those components need to be electrically isolated from each other.
- conductive parts or components of the data receiving unit are used as emitting and/or receiving devices of an electric field proximity sensor.
- This is a very smart solution since existing parts are used to build up the proximity sensor of a security system.
- This has the advantage that this solution is a cost saving one since less parts are needed.
- this solution may be integrated in data receiving units such that the system itself is not visible for possible attackers, since no visible additional components need to be installed. Additionally existing data receiving units may be retrofitted very easily.
- Conductive and electrically isolated components only need to be electrically connected to a sensing unit of a proximity sensor of the security system. Sensing unit and emitting and/or receiving devices build up the electric field proximity sensor that is part of the security system according to the invention.
- the sensing unit of the proximity sensor applies an alternating voltage to the conductive components of the user interface for propagating an electric field in the area of the user interface.
- the amplitude of the applied voltage is chosen low enough so that the user will not recognize it when using the data receiving unit.
- the amplitude of the applied voltage is chosen high enough so that the resolution is high enough for the system to identify any significant changes in the impedance.
- the Voltage range could be from couple of Milivolts up to several Volts, such as for example from 2 mV up to 25 V, which is the maximal voltage for low-voltage equipment according to DIN VDE 0100.
- the electric field has a characteristic impedance.
- the impedance is measured by the sensing unit of the system and compared with a reference value of the impedance. Any change of the impedance or any discrepancy of the measured impedance and the reference value is recognized by the system and any possible further steps may be initiated such as for example activation a warning system.
- the proximity sensor may apply one single or several different frequencies or even a range of frequencies to the conductive components of the user interface. Applying more than one frequency to the conductive components has the advantage that the system can be adapted to the frequency with the most dynamic response.
- the impedance of the system depends among other things on the physical dimensions of the sensor, that are e.g. the emitting and/or receiving devices. Therefore the impedance changes from system to system and in every system the change of the impedance in the situation of an approaching object is depending on the specific frequency. In other words every system has its own preferred frequency, where the best measuring results may be achieved. To avoid complicated calibration procedures when installing a security system it is possible to run the system with more than one frequency or even with a range of frequencies and to use the sum or the maximum of all discrepancies of the measured impedance from the reference value.
- the proximity sensor may be electrically connected with at least two of the conductive components of the user interface. For propagating an electric field, it is enough to apply an alternating voltage to two electrically isolated conductive components - two poles.
- the sensing unit of the proximity sensor may also be electrically connected with more than two conductive components such as for example three or four. In such a case two or more conductive components need to be short-circuited to build up two electrically independent poles. This opens the possibility to select and to design the two needed poles such that the electric field created by these poles extends in the area of the data receiving unit that needs to be secured.
- the sensing unit of the proximity sensor may be electrically connected from a rear side with the at least two conductive components of the user interface.
- the rear side of the electrical conductive components of the user interface is the side that faces the interior of the data receiving unit and that is invisible for a user.
- Such an arrangement has the advantage that the security system itself is invisible for potential attackers.
- the system may be integrated into a housing of the data receiving unit such that the outer appearance of the receiving unit is not influenced at all.
- the user interface of the data receiving unit may comprise a faceplate and a keypad. That may for example be the case when the data receiving unit is part of a self service terminal such as for example an automated teller machine.
- the faceplate and/or the keypad may have conductive properties.
- the sensing unit of the proximity sensor may be electrically connected with either two keys of the keypad or with one key of the keypad and the faceplate. If the sensing unit of the proximity sensor is electrically connected with more than two conductive components it may be connected with more than one key of the keypad and the faceplate. It is also possible that the faceplate comprises several parts that are electrically isolated from each other. In that case it is also possible that the sensing unit of the proximity sensor is electrically connected with two or more parts of the faceplate. Any other combination is possible as well. In every case the components that are electrically connected with the sensing unit need to be designed such that they build up two electrically independent poles as described above.
- the user interface of the data receiving unit may comprise a card reader. That may also be the case when the data receiving unit is part of an automated teller machine.
- a data receiving unit comprising a card reader is the card reader being part of an access control system providing for example physical access to e.g. buildings, rooms or virtual access to data rooms, TV channels etc. or authorize money transactions for cashless payment systems or authorize treatment-payments with a health insurance card.
- the card reader may comprise two electrically isolated components with at least partially conductive properties.
- the sensing unit of the proximity sensor according to the invention may be electrically connected with those two components of the card reader and use them as emitting and/or receiving device.
- the card reader may comprise a block out of electrically conductive material.
- the block may be divided in two parts that are electrically isolated from each other.
- the block may also comprise a screw or bolt or something similar that is sitting in the block and that is also electrically isolated from the block.
- Fig. 1 is a schematic drawing of an automated teller machine 1.
- the automated teller machine 1 has a user interface 2 that comprises several different data receiving units such as a keypad 3, a display or a screen 4 and a card reader 5.
- the keypad 3 is surrounded by a faceplate 6.
- the keys of the keypad 3 and the faceplate 6 are made out of an electrically conductive material such as for example metal. Keys and faceplate 6 are electrically isolated from each other. Some of the keys may be electrically connected with each other to create one pole as will be described later.
- the automated teller machine 1 further comprises a security system surrounded by a dashed line indicated with reference number 7.
- the security system consists of several components such as a proximity sensor comprising a sensing unit 8 as well as emitting and/or receiving devices - here faceplate 6 and keys of a keypad 3 - a control unit 9 and means for warning 11.
- the security system 7 may be completely positioned in the automated teller machine 1. In such a scenario the existing warning system of the automated teller machine 1 may be used.
- Such a solution has a big advantage if the system is used for retrofitting an automated teller machine 1.
- components of the security system 7 are positioned inside the automated teller machine 1 and other components of the security system 7 are positioned outside the automated teller machine 1, wherein the components are connected with each other by a data exchange interface, such as for example an electrical connection or a wireless connection.
- a data exchange interface such as for example an electrical connection or a wireless connection.
- the sensing unit 8 of the proximity sensor is positioned inside the automated teller machine 1 while the control device 9 and the warning device 11 are located outside the automated teller machine 1.
- the emitting and/or receiving devices 3, 6 are located at the outer surface of the automated teller machine.
- the sensing unit 8 of the proximity sensor of the security system 7 is electrically connected with a key of the keypad 3 and with the faceplate 7 over - for example - shielded cables 12.
- the sensing unit 8 uses these two electrically conductive components - key of keypad 3 and faceplate 7 - to generate an electric field in the area of the user interface 2 by applying an alternating voltage to these components.
- Fig. 2 is a schematic drawing of a card reader 13 that is adapted to be equipped with a security system according to the invention.
- the card reader 13 comprises a block 15 with a slot 14 for introducing a card.
- Above the slot 14 the card reader 13 comprises a screw 16.
- the screw 16 is electrically conductive but isolated from the block 15.
- Block 15 and screw 16 may be used as emitting and/or receiving device of an electric field proximity sensor for a security system according to the invention.
- Fig. 3 is a schematic diagram of one embodiment of the invention showing the security system in more detail. From the left to the right it shows two emitting and/or receiving devices 21 that are positioned so that they are electrically isolated from each other. The two emitting and/or receiving devices 21 are electrically connected with a LC oscillator 22 in the sensing unit 8. The LC oscillator 22 produces a repetitive electronic signal, such as for example a sine wave. This signal is send to the emitting and/or receiving devices 21 and generates an electric field 24 in the area of the emitting and/or receiving devices 21. This field does have a certain impedance.
- This impedance may be used by the LC oscillator to create a frequency which can be measured by a frequency counter 23 within the sensing unit 8 which creates a signal.
- the created signal is further send to the control unit 9, where an algorithm, with for example a low-pass filtering function, fades out quick changes and filters out long term contents.
- the impedance of the system depends on the shape of, the material of, and the distance between the emitting and/or receiving devices 21 as well as on the frequency that is send to the devices 21. An approaching object 25 influences the impedance as well. Any change in the impedance is measured by the frequency counter and reflected by the signal send to the control unit 9.
- the control unit 9 further compares the measured and filtered signals with a threshold as will be described later. If the signal is above the threshold the control unit 9 sends out an information to the warning unit 11.
- Fig. 4 is a schematic diagram of another embodiment of the invention showing the security system in more detail. Also from the left to the right it shows two emitting and/or receiving devices 21.The emitting and/or receiving devices 21 are electrically connected with a directional coupler 25 of the sensing unit 8.
- the sensing unit 8 also comprises a generator 26, a splitter 27 and a receiver.
- the generator 26 generates a wave like signal which is splitted at the splitter 27, going over the directional coupler 25 and send out as an incident wave 29 between the sending and/or receiving devices 21.
- the incident wave 29 is reflected somewhere and comes back as a reflected wave 31.
- the reflected wave 31 may have a displaced phase compared with the incident wave 29 as well as a different amplitude.
- the changes of the reflected wave depend on the distance to the object that reflects the wave.
- the reflected wave 31 is than received by the emitting and/or receiving devices 21 and send to the directional coupler 25.
- the directional coupler 25 sends it to the receiver 28 where the signal of the reflected wave 31 is compared with the original signal.
- This signal contains at least two information - one over the phase shift and the other over the difference in the amplitude.
- the compared signal is send to the control unit 9.
- the control unit 9 uses an algorithm - as in the embodiment described above - to fade out quick changes and to filter out long term contents and further compares the signal with a threshold. If the signal is above the threshold the control unit 9 sends out a signal to the warning unit 11.
- Fig. 5a is a cross-section of a faceplate 6 and three keys of a keypad 3 of for example an automated teller machine.
- the faceplate 6 is electrically connected to the sensing unit 8 of the proximity sensor over a shielded cable 12 and the middle key of the keypad 3 is electrically connected to the sensing unit 8 of the proximity sensor over another shielded cable 12.
- the three keys shown in this Figure are electrical connected with each other to build up one pole.
- the second pole is the faceplate 6. Those two poles are used as an emitting and/or receiving device of the sensing unit 8. An alternating voltage is applied to the two poles.
- the electric field is created around the keys of the keypad 3, which is the area that needs to be secured.
- FIG. 5a further shows a simulation of an electric field (equipotential lines) that is created in the area of the faceplate 6 and the keypad 3 with a frequency of 100 MHz in an undisturbed situation.
- An undisturbed situation in the sense of the invention is a user interface 2 with a faceplate 6 and a keypad 3 of a data receiving unit standing alone with nothing or no one approaching it.
- the electric flux lines of the electric field can deploy uninfluenced and generate a certain impedance that is measured by the sensing unit 8 of the proximity sensor of the security system 7 as described with reference to Fig. 3 and 4 .
- Fig. 5b is the same faceplate 6 and three keys of the keypad 3 of an automated teller machine in a disturbed situation, that means a dielectric object 15 is approaching the faceplate 6 and the keypad 3.
- Fig. 5b shows a simulation of an electric field (equipotential lines) that is created in the area of the faceplate 6 with the same frequency as in Fig. 5a .
- the electric flux lines are disturbed by the dielectric object 15. They still deploy - also through the dielectric object 15 - but the influence of the dielectric object changes the impedance. This change is measured by the sensing unit 8 of the security system 7 as described with reference to Fig. 2 and 3 .
- Fig. 5c does show the same situation as Fig.
- Fig. 6a to 6c show the same situations as Fig. 5a to 5c with another frequency (1000 MHz) being applied to the faceplate 6 and the keypad 3. Since the impedance of the system is influenced by the materials of the emitting and/or receiving unit, their shape, the distance between them etc. every system has its own characteristic impedance. Depending on the system a change of the impedance may be best measured at different frequencies. To get better results out of the measurements it is possible to send more than one or even a range of frequencies through the security system and to analyse or interpret the sum or the maximum of all discrepancies of the measured impedance from a reference value.
- Fig. 7a, 7b are diagrams indicating a possible method of operating a security system for a data receiving unit as described above.
- the axis of the abscissas in Fig. 7a and 7b represents the times in seconds; the axis of ordinates in Fig. 7a represents a signal proportional to the measured impedance and the axis of ordinates in Fig. 7b represents two different stages: activated and not activated, wherein 1 is activated and 0 is not activated.
- the dashed line at 50 in Fig. 7a indicates a possible threshold for the impedance. All measured impedances that are lying under that threshold are defined as not relevant and all measured impedances that are lying above the threshold are defined as being relevant. Relevant in the sense of the invention means a certain reaction is initiated, if relevant data are measured, e.g. a warning system is being activated.
- the bold graph in Fig. 7a is the measured impedance and the dashed graph is the calculated processed failure signal. This signal is calculated over the above mentioned algorithm with a low-pass filtering function. The measured impedance is shown for clarity reasons. For the method of operating the security system only the processed failure signal is relevant.
- the security system according to the invention When the security system according to the invention has been installed in a data receiving unit, for example in an automated teller machine, it first has to be calibrated. This is done by storing the level (# 1 in the diagram) of the measured impedance and the processed failure signal, when there is no object in front of the data receiving unit. This level is stored as reference value of the system.
- # 2 in the diagram a short disturbance of the electric field is detected. This could have been caused by a hand of a user, using the keypad for e.g. entering a PIN. It can be seen that this relatively short disturbance leads only to a short increase of the measured impedance and a slight increase of the failure signal. The failure signal does not reach the threshold level. Therefore no warning system is activated.
- the system If a longer impedance change is detected by the system (# 3 in the diagram), e.g. caused by an approaching object for example a fake front panel or a fake keypad mounted on the original parts of the user interface, the measured impedance and the failure signal increase.
- the failure signal reaches the threshold.
- the warning system will be activated. This is shown in Fig. 7b , when the graph is moving from zero to one.
- the failure signal is moving below the threshold again. This may be the case if the object is being removed from the user interface. In this situation the warning system may be deactivated again as can be seen in Fig. 7b .
Landscapes
- Business, Economics & Management (AREA)
- Accounting & Taxation (AREA)
- Finance (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
Abstract
The invention provides a security system for a data receiving unit comprising a user interface (2), the user interface comprising at least two components (3, 6; 15, 16) with at least partially conductive properties, the conductive components being electrically isolated from each other, and an electric field proximity sensor with emitting and/or receiving devices. According to the invention the conductive components of the user interface are used as emitting and/or receiving devices of the electric field proximity sensor.
Description
- The invention relates to a security system for a data receiving unit comprising a housing with a user interface and an electric field proximity sensor.
- Any kind of data receiving units may be object of a fraud attack, especially if the data sent to the data receiving unit is secret and if the data receiving unit is part of a system that protects anything of value. Self service terminals (SST), such as for example automated teller machines (ATM), are often the target of fraud-attacks to gain access to the valuables contained therein. To prohibit these attacks automated teller machines are in the mean time very heavily armoured. Thieves have created several ways to get access to the money. One is known as "skimming", where the thieves try to espy the relevant data to get access to the account and with it to the money of the account. The most important data for that is the personal identification number (PIN) which has to be entered in the automated teller machine through a keypad. In combination with a stolen or copied cash card or bank card access to the account and the money is possible. A common way to get access to the PIN is to attach a hidden camera above the keypad and capture the pressed keys. Another way is to overlay the keypad with a fake keypad which contains a key logger. These types of fraud-attacks are very hard to notice to an everyday user.
- Other data receiving units, for example card readers, may also be subject to fraud-attacks. It is known to overlay card readers with fake card readers and to capture the data stored on a card while it is introduced into the card reader. This fraud-attack is also very hard to notice. Card readers may be part of self service terminals as well or they may be part of other systems such as for example any kind of access systems. It is generally known to use a card reader as a component to get access to buildings or rooms. A person that wants to get into a room has to put his card in or next to a card reader. If the card contains the right information the system grants access to the room. Other possible data receiving units for access systems are again keypads or touch pads, scanners, fingerprint sensors, cameras etc..
- Security systems for automated teller machines that protect a card slot of a card reader are known in the prior art, such as the system described in
EP 1 677 267 A1US 2008/0110975 A1 describes a cash dispensing automated banking machine with a sensing device for a card-slot of a card reader as protection. A protection of the key-pad is not described in these documents. - It is also known in the prior art to provide mechanical viewing barriers for automated teller machines' keypads such as described in
WO 95/23421 A -
WO 2005/109358 A1 describes a security system for automated teller machines with a capacitive proximity sensor on an inner surface of a protective covering of the automated teller machines. The capacitive proximity sensor is able to detect any foreign components positioned at an outer surface of the machine. -
GB 2 351 590 A - There is a need for an easy but dependable security system for a data receiving unit. Such a system should be easy to install as well as easy to retrofit to existing data receiving units. Furthermore such a system should be relatively cheap in production.
- The present invention provides a security system for a data receiving unit with a user interface and an electric field proximity sensor. The user interface comprises at least two components with at least partially conductive properties, the conductive components being electrically isolated from each other. The electric field proximity sensor has emitting and/or receiving devices. According to the invention the conductive components of the user interface are used as emitting and/or receiving devices of the electric field proximity sensor.
- Data receiving units in the sense of the invention are all kind of electric systems that are able to collect, receive etc. data. The data may be any kind of data, especially but not limited to secret data, such as for examples personal identification numbers (PlNs), passwords, keywords, fingerprints, pictures etc.. Those data may for example be used to get access to private or secret information, access to money but also access to buildings, rooms in buildings etc.. Data receiving units usually have an user interface with means for receiving the above mentioned data, such as for example a keypad, a card reader, a RFID reader, a USB stick reader a touch pad, a scanner, a fingerprint sensor, a camera etc. If someone wants to get access to data, the data receiving units may be manipulated as described above.
- As described above, it is known to use electric field proximity sensors in security systems for automated teller machines. Such systems are based on electric field proximity sensing. Usually an alternating voltage is applied and an electric field is created that has a certain impedance. The impedance may be measured and any change in the impedance may be registered and analysed. Electric field proximity sensors usually have devices for emitting and/or receiving the electric field. Such emitting and/or receiving devices need to have at least partially conductive properties. For creating an electric field two such at least partially conductive components are needed. Those components need to be electrically isolated from each other.
- According to the invention conductive parts or components of the data receiving unit are used as emitting and/or receiving devices of an electric field proximity sensor. This is a very smart solution since existing parts are used to build up the proximity sensor of a security system. This has the advantage that this solution is a cost saving one since less parts are needed. Furthermore this solution may be integrated in data receiving units such that the system itself is not visible for possible attackers, since no visible additional components need to be installed. Additionally existing data receiving units may be retrofitted very easily. Conductive and electrically isolated components only need to be electrically connected to a sensing unit of a proximity sensor of the security system. Sensing unit and emitting and/or receiving devices build up the electric field proximity sensor that is part of the security system according to the invention.
- According to one embodiment of the invention the sensing unit of the proximity sensor applies an alternating voltage to the conductive components of the user interface for propagating an electric field in the area of the user interface. On one side the amplitude of the applied voltage is chosen low enough so that the user will not recognize it when using the data receiving unit. On the other side the amplitude of the applied voltage is chosen high enough so that the resolution is high enough for the system to identify any significant changes in the impedance. The Voltage range could be from couple of Milivolts up to several Volts, such as for example from 2 mV up to 25 V, which is the maximal voltage for low-voltage equipment according to DIN VDE 0100. The electric field has a characteristic impedance. The impedance is measured by the sensing unit of the system and compared with a reference value of the impedance. Any change of the impedance or any discrepancy of the measured impedance and the reference value is recognized by the system and any possible further steps may be initiated such as for example activation a warning system.
- The proximity sensor may apply one single or several different frequencies or even a range of frequencies to the conductive components of the user interface. Applying more than one frequency to the conductive components has the advantage that the system can be adapted to the frequency with the most dynamic response. The impedance of the system depends among other things on the physical dimensions of the sensor, that are e.g. the emitting and/or receiving devices. Therefore the impedance changes from system to system and in every system the change of the impedance in the situation of an approaching object is depending on the specific frequency. In other words every system has its own preferred frequency, where the best measuring results may be achieved. To avoid complicated calibration procedures when installing a security system it is possible to run the system with more than one frequency or even with a range of frequencies and to use the sum or the maximum of all discrepancies of the measured impedance from the reference value.
- The proximity sensor may be electrically connected with at least two of the conductive components of the user interface. For propagating an electric field, it is enough to apply an alternating voltage to two electrically isolated conductive components - two poles. The sensing unit of the proximity sensor may also be electrically connected with more than two conductive components such as for example three or four. In such a case two or more conductive components need to be short-circuited to build up two electrically independent poles. This opens the possibility to select and to design the two needed poles such that the electric field created by these poles extends in the area of the data receiving unit that needs to be secured.
- The sensing unit of the proximity sensor may be electrically connected from a rear side with the at least two conductive components of the user interface. The rear side of the electrical conductive components of the user interface is the side that faces the interior of the data receiving unit and that is invisible for a user. Such an arrangement has the advantage that the security system itself is invisible for potential attackers. The system may be integrated into a housing of the data receiving unit such that the outer appearance of the receiving unit is not influenced at all.
- The user interface of the data receiving unit may comprise a faceplate and a keypad. That may for example be the case when the data receiving unit is part of a self service terminal such as for example an automated teller machine. The faceplate and/or the keypad may have conductive properties. The sensing unit of the proximity sensor may be electrically connected with either two keys of the keypad or with one key of the keypad and the faceplate. If the sensing unit of the proximity sensor is electrically connected with more than two conductive components it may be connected with more than one key of the keypad and the faceplate. It is also possible that the faceplate comprises several parts that are electrically isolated from each other. In that case it is also possible that the sensing unit of the proximity sensor is electrically connected with two or more parts of the faceplate. Any other combination is possible as well. In every case the components that are electrically connected with the sensing unit need to be designed such that they build up two electrically independent poles as described above.
- The user interface of the data receiving unit may comprise a card reader. That may also be the case when the data receiving unit is part of an automated teller machine. Another possible application of a data receiving unit comprising a card reader is the card reader being part of an access control system providing for example physical access to e.g. buildings, rooms or virtual access to data rooms, TV channels etc. or authorize money transactions for cashless payment systems or authorize treatment-payments with a health insurance card.
- The card reader may comprise two electrically isolated components with at least partially conductive properties. The sensing unit of the proximity sensor according to the invention may be electrically connected with those two components of the card reader and use them as emitting and/or receiving device. To build up two poles the card reader may comprise a block out of electrically conductive material. The block may be divided in two parts that are electrically isolated from each other. The block may also comprise a screw or bolt or something similar that is sitting in the block and that is also electrically isolated from the block.
- The invention will now be described in more detail with reference to the following Figures exemplifying particular exemplary embodiments of the invention:
- Fig. 1
- is a schematic drawing of an automated teller machine (ATM) with a security system according to the invention;
- Fig. 2
- is a schematic drawing of a card reader that is adapted to be equipped with a security system according to the invention;
- Fig. 3
- is a schematic diagram of one embodiment of the security system according to the invention;
- Fig. 4
- is a schematic diagram of another embodiment of the security system according to the invention;
- Fig. 5a
- is a cross-section of a user interface of an automated teller machine with a diagram of a simulation of an electric field that is created in the area of the user interface with a frequency of 100 MHz in an undisturbed situation;
- Fig. 5b
- is a cross-section of a user interface of an automated teller machine with a diagram of a simulation of an electric field that is created in the area of the user interface with a frequency of 100 MHz in a disturbed situation - the user interface is approached by a dielectric object;
- Fig. 5c
- is a cross-section of a user interface of an automated teller machine with a diagram of a simulation of an electric field that is created in the area of the user interface with a frequency of 100 MHz in a disturbed situation - the user interface is approached by a conductive object;
- Fig. 6a
- is a cross-section of a user interface of an automated teller machine with a diagram of a simulation of an electric field that is created in the area of the user interface with a frequency of 1000 MHz in an undisturbed situation;
- Fig. 6b
- is a cross-section of a user interface of an automated teller machine with a diagram of a simulation of an electric field that is created in the area of the user interface with a frequency of 1000 MHz in a disturbed situation - the user interface is approached by a dielectric object;
- Fig. 6c
- is a cross-section of a user interface of an automated teller machine with a diagram of a simulation of an electric field that is created in the area of the user interface with a frequency of 1000 MHz in a disturbed situation - the user interface is approached by a conductive object, and
- Fig. 7a, 7b
- are diagrams indicating a possible method of operating the security system according to the invention of an automated teller machine.
- Herein below various embodiments of the present invention are described and shown in the drawings wherein like elements are provided with the same reference numbers.
-
Fig. 1 is a schematic drawing of anautomated teller machine 1. Theautomated teller machine 1 has auser interface 2 that comprises several different data receiving units such as akeypad 3, a display or ascreen 4 and acard reader 5. In the embodiment shown thekeypad 3 is surrounded by afaceplate 6. The keys of thekeypad 3 and thefaceplate 6 are made out of an electrically conductive material such as for example metal. Keys andfaceplate 6 are electrically isolated from each other. Some of the keys may be electrically connected with each other to create one pole as will be described later. - The
automated teller machine 1 further comprises a security system surrounded by a dashed line indicated withreference number 7. The security system consists of several components such as a proximity sensor comprising asensing unit 8 as well as emitting and/or receiving devices - herefaceplate 6 and keys of a keypad 3 - a control unit 9 and means for warning 11. Thesecurity system 7 may be completely positioned in theautomated teller machine 1. In such a scenario the existing warning system of theautomated teller machine 1 may be used. Such a solution has a big advantage if the system is used for retrofitting anautomated teller machine 1. It is also possible that components of thesecurity system 7 are positioned inside theautomated teller machine 1 and other components of thesecurity system 7 are positioned outside theautomated teller machine 1, wherein the components are connected with each other by a data exchange interface, such as for example an electrical connection or a wireless connection. In the embodiment shown inFig. 1 thesensing unit 8 of the proximity sensor is positioned inside theautomated teller machine 1 while the control device 9 and thewarning device 11 are located outside theautomated teller machine 1. The emitting and/or receivingdevices - The
sensing unit 8 of the proximity sensor of thesecurity system 7 is electrically connected with a key of thekeypad 3 and with thefaceplate 7 over - for example - shieldedcables 12. Thesensing unit 8 uses these two electrically conductive components - key ofkeypad 3 and faceplate 7 - to generate an electric field in the area of theuser interface 2 by applying an alternating voltage to these components. -
Fig. 2 is a schematic drawing of acard reader 13 that is adapted to be equipped with a security system according to the invention. Thecard reader 13 comprises ablock 15 with aslot 14 for introducing a card. Above theslot 14 thecard reader 13 comprises ascrew 16. thescrew 16 is electrically conductive but isolated from theblock 15.Block 15 and screw 16 may be used as emitting and/or receiving device of an electric field proximity sensor for a security system according to the invention. -
Fig. 3 is a schematic diagram of one embodiment of the invention showing the security system in more detail. From the left to the right it shows two emitting and/or receivingdevices 21 that are positioned so that they are electrically isolated from each other. The two emitting and/or receivingdevices 21 are electrically connected with aLC oscillator 22 in thesensing unit 8. TheLC oscillator 22 produces a repetitive electronic signal, such as for example a sine wave. This signal is send to the emitting and/or receivingdevices 21 and generates anelectric field 24 in the area of the emitting and/or receivingdevices 21. This field does have a certain impedance. This impedance may be used by the LC oscillator to create a frequency which can be measured by afrequency counter 23 within thesensing unit 8 which creates a signal. The created signal is further send to the control unit 9, where an algorithm, with for example a low-pass filtering function, fades out quick changes and filters out long term contents. The impedance of the system depends on the shape of, the material of, and the distance between the emitting and/or receivingdevices 21 as well as on the frequency that is send to thedevices 21. An approachingobject 25 influences the impedance as well. Any change in the impedance is measured by the frequency counter and reflected by the signal send to the control unit 9. The control unit 9 further compares the measured and filtered signals with a threshold as will be described later. If the signal is above the threshold the control unit 9 sends out an information to thewarning unit 11. -
Fig. 4 is a schematic diagram of another embodiment of the invention showing the security system in more detail. Also from the left to the right it shows two emitting and/or receiving devices 21.The emitting and/or receivingdevices 21 are electrically connected with adirectional coupler 25 of thesensing unit 8. Thesensing unit 8 also comprises agenerator 26, asplitter 27 and a receiver. Thegenerator 26 generates a wave like signal which is splitted at thesplitter 27, going over thedirectional coupler 25 and send out as anincident wave 29 between the sending and/or receivingdevices 21. Theincident wave 29 is reflected somewhere and comes back as a reflectedwave 31. The reflectedwave 31 may have a displaced phase compared with theincident wave 29 as well as a different amplitude. The changes of the reflected wave depend on the distance to the object that reflects the wave. The reflectedwave 31 is than received by the emitting and/or receivingdevices 21 and send to thedirectional coupler 25. Thedirectional coupler 25 sends it to thereceiver 28 where the signal of the reflectedwave 31 is compared with the original signal. This signal contains at least two information - one over the phase shift and the other over the difference in the amplitude. The compared signal is send to the control unit 9. The control unit 9 uses an algorithm - as in the embodiment described above - to fade out quick changes and to filter out long term contents and further compares the signal with a threshold. If the signal is above the threshold the control unit 9 sends out a signal to thewarning unit 11. -
Fig. 5a is a cross-section of afaceplate 6 and three keys of akeypad 3 of for example an automated teller machine. Thefaceplate 6 is electrically connected to thesensing unit 8 of the proximity sensor over a shieldedcable 12 and the middle key of thekeypad 3 is electrically connected to thesensing unit 8 of the proximity sensor over another shieldedcable 12. The three keys shown in this Figure are electrical connected with each other to build up one pole. The second pole is thefaceplate 6. Those two poles are used as an emitting and/or receiving device of thesensing unit 8. An alternating voltage is applied to the two poles. The electric field is created around the keys of thekeypad 3, which is the area that needs to be secured.Fig. 5a further shows a simulation of an electric field (equipotential lines) that is created in the area of thefaceplate 6 and thekeypad 3 with a frequency of 100 MHz in an undisturbed situation. An undisturbed situation in the sense of the invention is auser interface 2 with afaceplate 6 and akeypad 3 of a data receiving unit standing alone with nothing or no one approaching it. In such a situation the electric flux lines of the electric field can deploy uninfluenced and generate a certain impedance that is measured by thesensing unit 8 of the proximity sensor of thesecurity system 7 as described with reference toFig. 3 and 4 . -
Fig. 5b is thesame faceplate 6 and three keys of thekeypad 3 of an automated teller machine in a disturbed situation, that means adielectric object 15 is approaching thefaceplate 6 and thekeypad 3.Fig. 5b shows a simulation of an electric field (equipotential lines) that is created in the area of thefaceplate 6 with the same frequency as inFig. 5a . The electric flux lines are disturbed by thedielectric object 15. They still deploy - also through the dielectric object 15 - but the influence of the dielectric object changes the impedance. This change is measured by thesensing unit 8 of thesecurity system 7 as described with reference toFig. 2 and3 .Fig. 5c does show the same situation asFig. 5b with the only difference that theobject 16 approaching thefaceplate 6 and thekeypad 3 being electrically conductive. The electric flux lines are blocked by the electricallyconductive object 16. The electricallyconductive object 16 influences the impedance of the system dramatically. This change is also measured by thesensing unit 8. -
Fig. 6a to 6c show the same situations asFig. 5a to 5c with another frequency (1000 MHz) being applied to thefaceplate 6 and thekeypad 3. Since the impedance of the system is influenced by the materials of the emitting and/or receiving unit, their shape, the distance between them etc. every system has its own characteristic impedance. Depending on the system a change of the impedance may be best measured at different frequencies. To get better results out of the measurements it is possible to send more than one or even a range of frequencies through the security system and to analyse or interpret the sum or the maximum of all discrepancies of the measured impedance from a reference value. -
Fig. 7a, 7b are diagrams indicating a possible method of operating a security system for a data receiving unit as described above. The axis of the abscissas inFig. 7a and 7b represents the times in seconds; the axis of ordinates inFig. 7a represents a signal proportional to the measured impedance and the axis of ordinates inFig. 7b represents two different stages: activated and not activated, wherein 1 is activated and 0 is not activated. - The dashed line at 50 in
Fig. 7a indicates a possible threshold for the impedance. All measured impedances that are lying under that threshold are defined as not relevant and all measured impedances that are lying above the threshold are defined as being relevant. Relevant in the sense of the invention means a certain reaction is initiated, if relevant data are measured, e.g. a warning system is being activated. The bold graph inFig. 7a is the measured impedance and the dashed graph is the calculated processed failure signal. This signal is calculated over the above mentioned algorithm with a low-pass filtering function. The measured impedance is shown for clarity reasons. For the method of operating the security system only the processed failure signal is relevant. - When the security system according to the invention has been installed in a data receiving unit, for example in an automated teller machine, it first has to be calibrated. This is done by storing the level (# 1 in the diagram) of the measured impedance and the processed failure signal, when there is no object in front of the data receiving unit. This level is stored as reference value of the system. At # 2 in the diagram a short disturbance of the electric field is detected. This could have been caused by a hand of a user, using the keypad for e.g. entering a PIN. It can be seen that this relatively short disturbance leads only to a short increase of the measured impedance and a slight increase of the failure signal. The failure signal does not reach the threshold level. Therefore no warning system is activated. If a longer impedance change is detected by the system (# 3 in the diagram), e.g. caused by an approaching object for example a fake front panel or a fake keypad mounted on the original parts of the user interface, the measured impedance and the failure signal increase. At # 4 the failure signal reaches the threshold. At that time the warning system will be activated. This is shown in
Fig. 7b , when the graph is moving from zero to one. At # 5 the failure signal is moving below the threshold again. This may be the case if the object is being removed from the user interface. In this situation the warning system may be deactivated again as can be seen inFig. 7b .
Claims (11)
- A security system for a data receiving unit comprising:- a user interface (2), the user interface comprising at least two components (3, 6; 15, 16) with at least partially conductive properties, the conductive components being electrically isolated from each other, and- an electric field proximity sensor with emitting and/or receiving devices, characterized in thatthe conductive components of the user interface being used as emitting and/or receiving devices of the electric field proximity sensor.
- The security system according to claim 1, wherein a sensing unit (8) of the electric field proximity sensor applies an alternating voltage to the conductive components of the user interface (2) for propagating an electric field in the area of the user interface.
- The security system according to claim 2, wherein the sensing unit (8) of the electric field proximity sensor applies one or different frequencies to the conductive components of the user interface (2).
- The security system according to any of the preceding claims, wherein the sensing unit (8) of the electric field proximity sensor is electrically connected with at least two conductive components of the user interface (2).
- The security system according to claim 4, wherein the sensing unit (8) of the electric field proximity sensor is electrically connected from a rear side with the at least two conductive components of the user interface (2).
- The security system according to any of the preceding claims, wherein the user interface (2) comprises a faceplate (7) and a keypad (3).
- The security system according to claim 6, wherein the faceplate (7) and/or the keys of the keypad (3) have conductive properties.
- The security system according to any of the claims 1 to 5, wherein the user interface comprises a card reader (13).
- The security system according to claim 8, wherein the card reader (13) comprises two electrically isolated components (15, 16) with at least partially conductive properties.
- The security system according to any of the preceding claims comprising a control unit (9).
- The security system according to any of the preceding claims comprising a warning unit (11).
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
EP10164694A EP2393070A1 (en) | 2010-06-02 | 2010-06-02 | Security system for data receiving unit |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
EP10164694A EP2393070A1 (en) | 2010-06-02 | 2010-06-02 | Security system for data receiving unit |
Publications (1)
Publication Number | Publication Date |
---|---|
EP2393070A1 true EP2393070A1 (en) | 2011-12-07 |
Family
ID=42981162
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
EP10164694A Withdrawn EP2393070A1 (en) | 2010-06-02 | 2010-06-02 | Security system for data receiving unit |
Country Status (1)
Country | Link |
---|---|
EP (1) | EP2393070A1 (en) |
Cited By (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
BE1023815B1 (en) * | 2016-05-10 | 2017-07-28 | Atos Worldline S.A. | MULTI-SUPPORT PAYMENT TERMINAL |
EP3244376A1 (en) * | 2016-05-10 | 2017-11-15 | Atos Worldline | Multimedia payment terminal |
CN114544709A (en) * | 2022-02-24 | 2022-05-27 | 张海良 | Intelligent detection device for durability of hidden structure engineering of existing stone curtain wall |
US11695448B2 (en) | 2014-07-31 | 2023-07-04 | Gilbarco Inc. | Fuel dispenser anti-skimming input device |
US12056559B2 (en) | 2020-09-16 | 2024-08-06 | Gilbarco Inc. | Fuel dispenser fraud detection apparatus and method |
Citations (13)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
WO1995023421A1 (en) | 1994-02-25 | 1995-08-31 | International Business Machines Corporation | Visual privacy-protection device for keypads |
WO1996006688A1 (en) * | 1994-08-31 | 1996-03-07 | The Whitaker Corporation | Proximity sensor utilizing polymer piezoelectric film with protective metal layer |
EP0742448A2 (en) * | 1995-05-08 | 1996-11-13 | Eaton Corporation | Electromagnetic wave reflective type, low cost, active proximity sensor for harsh environments |
WO1998026506A1 (en) * | 1996-12-10 | 1998-06-18 | Caldwell David W | Differential touch sensors and control circuit therefor |
GB2351590A (en) | 1999-06-29 | 2001-01-03 | Ncr Int Inc | Fraud protection for a self-service terminal |
US6390367B1 (en) * | 1999-06-29 | 2002-05-21 | Ncr Corporation | Fraud prevention arrangement |
WO2005109358A1 (en) | 2004-05-06 | 2005-11-17 | Eloy Branco Graminho | A safety device for automated teller machines, and an automated teller machine |
EP1677267A1 (en) | 2004-12-30 | 2006-07-05 | Firpo Polledo, Luis Juan | Electronic security device for automated teller machines and card reader driver including such device |
GB2422705A (en) * | 2005-01-28 | 2006-08-02 | Ncr Int Inc | An ATM with sensors to detect the addition of a fraud device |
US20060237527A1 (en) * | 2002-11-26 | 2006-10-26 | Diebold Self-Service Systems Division Of Diebold, Incorporated | Automated banking machine with improved resistance to fraud |
DE102005043317B3 (en) * | 2005-09-12 | 2007-04-12 | Wincor Nixdorf International Gmbh | Method and device for generating an electromagnetic protective field for a card reader |
US20080110975A1 (en) | 2002-11-25 | 2008-05-15 | Diebold Self-Service Systems Division Of Diebold, Incorporated | Cash dispensing automated banking machine diagnostic method |
DE102008012231A1 (en) * | 2008-03-03 | 2009-09-10 | Wincor Nixdorf International Gmbh | Protective device, self-service terminal and method for preventing skimming on a card reader |
-
2010
- 2010-06-02 EP EP10164694A patent/EP2393070A1/en not_active Withdrawn
Patent Citations (13)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
WO1995023421A1 (en) | 1994-02-25 | 1995-08-31 | International Business Machines Corporation | Visual privacy-protection device for keypads |
WO1996006688A1 (en) * | 1994-08-31 | 1996-03-07 | The Whitaker Corporation | Proximity sensor utilizing polymer piezoelectric film with protective metal layer |
EP0742448A2 (en) * | 1995-05-08 | 1996-11-13 | Eaton Corporation | Electromagnetic wave reflective type, low cost, active proximity sensor for harsh environments |
WO1998026506A1 (en) * | 1996-12-10 | 1998-06-18 | Caldwell David W | Differential touch sensors and control circuit therefor |
GB2351590A (en) | 1999-06-29 | 2001-01-03 | Ncr Int Inc | Fraud protection for a self-service terminal |
US6390367B1 (en) * | 1999-06-29 | 2002-05-21 | Ncr Corporation | Fraud prevention arrangement |
US20080110975A1 (en) | 2002-11-25 | 2008-05-15 | Diebold Self-Service Systems Division Of Diebold, Incorporated | Cash dispensing automated banking machine diagnostic method |
US20060237527A1 (en) * | 2002-11-26 | 2006-10-26 | Diebold Self-Service Systems Division Of Diebold, Incorporated | Automated banking machine with improved resistance to fraud |
WO2005109358A1 (en) | 2004-05-06 | 2005-11-17 | Eloy Branco Graminho | A safety device for automated teller machines, and an automated teller machine |
EP1677267A1 (en) | 2004-12-30 | 2006-07-05 | Firpo Polledo, Luis Juan | Electronic security device for automated teller machines and card reader driver including such device |
GB2422705A (en) * | 2005-01-28 | 2006-08-02 | Ncr Int Inc | An ATM with sensors to detect the addition of a fraud device |
DE102005043317B3 (en) * | 2005-09-12 | 2007-04-12 | Wincor Nixdorf International Gmbh | Method and device for generating an electromagnetic protective field for a card reader |
DE102008012231A1 (en) * | 2008-03-03 | 2009-09-10 | Wincor Nixdorf International Gmbh | Protective device, self-service terminal and method for preventing skimming on a card reader |
Cited By (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US11695448B2 (en) | 2014-07-31 | 2023-07-04 | Gilbarco Inc. | Fuel dispenser anti-skimming input device |
BE1023815B1 (en) * | 2016-05-10 | 2017-07-28 | Atos Worldline S.A. | MULTI-SUPPORT PAYMENT TERMINAL |
EP3244376A1 (en) * | 2016-05-10 | 2017-11-15 | Atos Worldline | Multimedia payment terminal |
US12056559B2 (en) | 2020-09-16 | 2024-08-06 | Gilbarco Inc. | Fuel dispenser fraud detection apparatus and method |
CN114544709A (en) * | 2022-02-24 | 2022-05-27 | 张海良 | Intelligent detection device for durability of hidden structure engineering of existing stone curtain wall |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
EP2393070A1 (en) | Security system for data receiving unit | |
CN103456108B (en) | A kind of casing switched with contactless protection and POS | |
EP1043704B1 (en) | Self service terminal | |
EP3416031B1 (en) | Water-rejection proximity detector and method | |
US6950540B2 (en) | Fingerprint apparatus and method | |
US20130222320A1 (en) | Safety protection method and device of electronic device touch screen | |
EP3254179B1 (en) | Contactless gesture based access control | |
CN104012010A (en) | Method for preventing interference of contactless card reader and touch functions | |
US9406013B2 (en) | User interface unit, smart card and manufacturing method | |
US20080315989A1 (en) | Security functionality for magnetic card readers and point of sales devices | |
US20150091547A1 (en) | Method, device, sensor and algorythm for detection of devices stealing information from atm devices | |
CN112880545A (en) | Capacitive proximity sensor in a mobile device and method of limiting radiation absorption | |
US20210326827A1 (en) | Tamper resistant device | |
KR20090104863A (en) | Electromagnetic sheilding device | |
WO2017059780A1 (en) | Display device | |
CN110235144A (en) | Method and electronic equipment for fingerprint recognition | |
US11562377B2 (en) | Fraud detection system and method | |
US8622297B1 (en) | Card reader anti-skimming assembly and method | |
CN1898760A (en) | Anti-intrusion device primarily for an electronic payment terminal | |
EP2006794B1 (en) | Device and method for capacitive reading of a code | |
AU2007228477A1 (en) | A device for checking the regularity of the operation of automatic payment terminals | |
DE102011111205B4 (en) | Input device with anti-counterfeiting features, in particular for a self-service device | |
US12056559B2 (en) | Fuel dispenser fraud detection apparatus and method | |
EP1205068B1 (en) | Detection of manipulation of an electronic security device inserted in the port of a host device | |
EP4312200A1 (en) | Skimmer detection and mitigation |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
AK | Designated contracting states |
Kind code of ref document: A1 Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO SE SI SK SM TR |
|
AX | Request for extension of the european patent |
Extension state: BA ME RS |
|
PUAI | Public reference made under article 153(3) epc to a published international application that has entered the european phase |
Free format text: ORIGINAL CODE: 0009012 |
|
STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: THE APPLICATION IS DEEMED TO BE WITHDRAWN |
|
18D | Application deemed to be withdrawn |
Effective date: 20120609 |