EP2793202A1 - Self service device with a visual protection element - Google Patents

Abstract

A self-service device (1) comprises an input device (10) for manually inputting data by a user, a privacy screen element (2) for restricting the view of the input device (10) and a control device (4). In addition, at least one of the visual protection element (2) arranged optical conductor (3) is provided, which is connected to at least one end (31, 32) to the control device (4), wherein the control device (4) is formed, one via the optical To evaluate conductor (3) to be received optical signal (S, S ') and to detect a manipulation of the screen element (2) based on the evaluation. In this way, a self-service device is provided, which allows an improved detection of a manipulation on a screen element.

Description

The invention relates to a self-service device according to the preamble of claim 1.

Such a self-service device may be, for example, an ATM, an account statement printer, a ticket vending machine or another transaction terminal in which a user can make a transaction.

Such a self-service device comprises an input device for manually inputting data by a user, a privacy protection element for limiting the view of the input device and a control device.

The input device is configured, for example, at an ATM by a keypad via which a user, after inserting, for example, a debit card or credit card in a dedicated reader, an identification number (the so-called "PIN") can enter to the self-service device to authenticate and authorize.

The problem with such self-service devices today is that third parties attempt to spy on security-relevant data, for example a user identification, when entering data by a user in order to fraudulently access an account of the user and to withdraw money from the account. This spying can be done in different ways. For example, an additional keyboard on an input device in the form of a keyboard can be attached, which a user perceives as the actual keyboard and into which a user mistakenly enters his data, in particular his user ID. Or it can be attached to a self-service device, such as an ATM, a camera that receives the input of data in the input device, so that third parties can obtain information on the entered data by evaluating the camera images.

In order to make it difficult for a third party to spy on entered data and, in particular, to prevent the recording of the input process by a camera, users are often recommended to cover the input device by hand when manually entering data into the input device. In addition, a privacy protection element is provided which restricts the view of the input device from the outside and makes it difficult to see the input device, in particular for those persons who are not directly in front of the input device, or even makes it impossible.

Such privacy elements are used to at least partially cover the input device for the purpose of restricting the view of the input device. Because such privacy elements make it difficult to capture an input by a camera, fraudulently acting third parties may also remove the privacy shield when attaching a camera and, if desired, re-attach one or more input operations after capture.

There is a need for devices that can detect tampering, such as removal of a privacy screen element, to optionally generate an alarm or initiate other appropriate countermeasures, such as inhibiting an input event.

At one of the DE 10 2009 044 794 A1 known self-service device is provided a screen element, on which a tamper detection unit with a is arranged on the screen element extending electrical conductor. Instead of a conductor track, an electronic component, for example an RFID unit, may be attached to the privacy protection element, by means of which it is recognized whether or not a privacy protection element has been accessed in a manipulative manner.

The object of the present invention is to provide a self-service device which enables improved detection of a manipulation on a screen element.

This object is achieved by an article having the features of claim 1.

Accordingly, in a self-service device, at least one optical conductor arranged on the screening element is provided, which is connected to the control device with at least one end. The control device is designed to evaluate an optical signal to be received via the optical conductor and to detect a manipulation of the screening element on the basis of the evaluation.

The present invention is based on the idea of arranging an optical conductor on the screening element, through which an optical signal can be passed. The control device is in communication with the optical conductor and evaluates an optical signal to be received via the optical waveguide in order to detect, on the basis of the received optical signal, whether a manipulation of the visual protection element has taken place.

In the manipulation of the screen element, this may be a deformation of the screen element or, for example, a removal of the screen element. In the latter case, the controller determines that, although it expects to receive an optical signal, it does not receive an optical signal, which may indicate that the optical fiber itself or the connection of the optical fiber to the controller is broken, due may indicate a removal of the screen element.

By using a light guide for tamper detection on a screen element electrostatic charging and discharging, as they can occur, for example, in resistive electrical traces can be avoided. In addition, a light guide can hardly be manipulated without a assigned control device detects this. For example, bridging an optical fiber is difficult, if not impossible, and could be detected by the controller because bridging also changes the optical transmission characteristics of the optical system.

Preferably, the optical conductor, which may be configured for example as an optical fiber, connected via a first end and a second end to the control device. The optical conductor thus constitutes, together with the control device, a closed loop, wherein the control device is designed to feed an optical signal into the optical conductor via the first end and to receive it via the second end. In this case, the control device compares the transmitted optical signal and the received optical signal and, on the basis of the comparison, detects whether a manipulation of the screening element has taken place or not.

If, for example, bending of the screening element occurs, the optical conductor arranged on the screening element is also deformed, which alters the transmission characteristics of the optical signal and results in the actually received signal being different from the actually expected signal. The actually expected signal in this case corresponds to the signal fed into the optical conductor after passing through the optical conductor in the case of a non-manipulated screen element (which can be described, for example, by the transfer function of the optical system with the screen element not tampered with and thus undeformed optical fiber).

In the extreme case, if the connection of the optical conductor to the control device is released at one or both ends when the privacy element is released from the self-service device, the control device does not receive any optical signal, from which an interruption of the optical fiber can be inferred.

The optical signal has, for example, a wavelength in a range between 200 nm and 2000 nm. For example, the optical signal may be in the range of visible light. It is also conceivable, however, for the optical signal to have a wavelength in the region of an optical window of the optical conductor formed as an optical fiber, for example 850 nm, 1300 nm or 1550 nm (for a quartz glass optical waveguide).

In an advantageous embodiment, the optical signal coupled into the optical conductor can be coded. For example, the optical signal may have a predetermined pulse sequence, or a suitable code word may otherwise be encoded in the optical signal. The control device can thus favorably differentiate the optical signal from other signals and recognize a possible manipulation based on a change in the signal.

The privacy element is preferably arranged on the input device and covers the input device at least partially for limiting the view of the input device. The screening element can, for example, span the input device in the manner of a hood, so that only a limited access to the one-handed input of data is left in the input device, but otherwise a view of the input device from the outside is not possible.

The screening element can be produced, for example, at least in sections from a flexible plastic, for example a dimensionally flexible, thermoplastic material with high tear resistance. The visual protection element can be made, for example, as a plastic injection molded part, in which case the optical conductor is inserted into the privacy protection element during injection molding and injected accordingly. Alternatively, it is also conceivable to provide the screen element with a path into which the optical conductor can be inserted in order to then cast or glue the optical conductor to the screen element.

The optical conductor is advantageously laid in loops on the screen element and thus extends meandering on the screen element. The optical conductor thus covers at least one surface section of the screening element, so that, for example, bending or breakage of the screening element can be reliably detected.

Fig. 1

eine schematische Ansicht eines Selbstbedienungsgeräts in Form eines Geldautomaten oder eines Fahrkartenautomaten oder dergleichen, bei dem mittels einer Eingabeeinrichtung ein Nutzer Daten eingeben kann; und

Fig. 2

eine schematische Ansicht eines Sichtschutzelements des Selbstbedienungsgeräts mit einem daran angeordneten optischen Leiter und einer mit dem optischen Leiter verbundenen Steuereinrichtung.

The idea underlying the invention will be explained in more detail with reference to the embodiments illustrated in the figures. Show it:

Fig. 1

a schematic view of a self-service device in the form of an ATM or a ticket vending machine or the like, in which by means of an input device, a user can enter data; and

Fig. 2

a schematic view of a privacy element of the self-service device with an optical conductor arranged thereon and a controller connected to the optical conductor.

Fig. 1 schematically shows a self-service device 1 with an input device 10 in the form of a keypad with individual keys 100, via which a user can enter data as part of a self-service device to be operated transaction 1. The self-service device 1 can be configured, for example, as an ATM, as an account statement printer, as a ticket machine or as another information or transaction terminal, in which a user inputs and identifies data about the input device 10, in particular a user identifier (for example the so-called PIN). to authenticate and authorize a transaction.

The self-service device 1 may, for example, further comprise a reader 12 for inserting a magnetic stripe card or chip card, for example a debit card or credit card, and furthermore an output device 11, for example for dispensing cash, account statements or a ticket.

To perform a transaction, for example, a user inserts a debit card or credit card into the reader 12 and is then prompted to enter data in the form of, for example, a user ID via the input device 10 and its keys 100. If the data correspond to the data associated with the debit card or credit card, the user can carry out the desired transaction.

At the input device 10, a privacy element 2 is arranged in the self-service device 1, which spans with side walls 20, 21 and an upper cover 22 in particular those keys 100 of the input device 10, via which a user security-relevant data, in particular a user ID has to enter. The screen element 2 thus covers the input device 10 at least partially in the manner of a hood and limits a view of the input device 10 at least for those third parties that are not directly in front of the input device 10 and, for example, look laterally at the input device 10. In addition, the screen element 2 also restricts the view of an optionally fraudulently arranged on the self-service device 1 Camera installed by a third party to spy on an input operation.

In order to prevent such a self-service device 1 that the screen element 2 is manipulated to allow, for example, a camera installed on the self-service device 1 a clear view of the input device 10, on the screen element 2, an optical fiber 3 in the form of an optical fiber ( also referred to as an optical waveguide), which extends in a loop shape, forming loops 30 on the side wall 20, for example. The optical conductor 3 has two ends 31, 32, which are connected via optical coupling devices 33, 34 with a control device 4, so that in conjunction with the control device 4 results in a closed loop conductor.

In operation, the control device 4 feeds an optical signal S into a first end 31 of the optical conductor 3, which is transmitted via the optical conductor 3 and received via the second end 32 as a received signal S 'again to the control device 4. In this case, the control device 4 evaluates the received optical signal S 'in comparison to the transmitted optical signal S and, based on the comparison, determines whether a manipulation of the screening element 2 has taken place or not.

If the screen element 2 is bent, for example, in sections, the optical conductor 3 is also deformed, which has an effect on the transmission properties of the optical conductor 3 and correspondingly leads to a change in the received optical signal S ', which can be detected by the control device 4.

If the screen element 2 is completely removed from the self-service device 1, the connection of the optical conductor 3 to the control device 4 is also interrupted. The control device 4 recognizes that no optical signal S 'is received and can conclude that an interruption of the optical conductor 3 has occurred. Likewise, the control device 4 may also recognize that there are reflections in the feeding of the optical signal S, already to deduce that the connection of the optical conductor 3 is interrupted with the control device 4, which indicates a removal of the screen element 2.

In Fig. 2 schematically shows the side wall 20 of the screen element 2 with optical conductor 3 arranged thereon. Advantageously, optical waveguides 3 are provided in a similar arrangement on all the walls, thus also on the side wall 21 and the upper cover 22.

The control device 4 is advantageously arranged within a housing of the self-service device 1 and may also be part of a central control of the self-service device 1.

The control device 4 preferably feeds a coded optical signal S into the optical conductor 3. The optical signal S thus transports a codeword, for example a predetermined pulse sequence or another sequence of coded characters. On the basis of the received optical signal S ', the control device 4 also evaluates the coded character string in order to assign the received optical signal S' to the transmitted optical signal S.

In principle, however, it is not necessary for the optical signal S, S 'to be coded. In principle, it is sufficient that light is fed into the optical conductor 3 at one end 31 and received at the other end 32, wherein, for example, it can already be detected from a change in the received light intensity that manipulation of the screening element has occurred.

The privacy element 2 is advantageously at least partially made of a flexible plastic material, such as a thermoplastic material. In this case, the optical conductor 3 can be injected into the screening element 2 in the same tool when the screening element 2 is manufactured. It is also conceivable, however, to provide in the screen element 2 webs which predetermine the course of the optical conductor 3 and into which the optical conductor 3 can be inserted in order to fasten the optical conductor 3 to the screen element 2 by gluing or casting.

In principle, more than one optical conductor 3 can be arranged on the screen element 2.

The idea underlying the invention is not limited to the above-described embodiments, but can be realized even in completely different embodiments.

For example, it is not absolutely necessary that the optical signal from the same control device is fed into the optical conductor and also received again. It is also conceivable to provide separate control devices, one of which feeds a signal and the other receives the signal.

The present invention is basically applicable to all such self-service devices in which a privacy element can be used on an input device to limit the view of the input device. <B> LIST OF REFERENCES </ b> 1 Self-service device 10 input device 100 Keys 11 output device 12 reader 2 Mounted screen 20, 21 sidewall 22 Upper cover 3 Optical conductor 30 grind 31, 32 The End 33, 34 Optical coupling device 4 control device S, S ' Optical signal

Claims (9)

Self-service device (1), with an input device (10) for manually inputting data by a user, - A privacy element (2) for limiting the view of the input device (10) and a control device (4),
marked by
at least one optical conductor (3) which is arranged on the screening element (2) and is connected to the control device (4) by at least one end (31, 32), wherein the control device (4) is designed to have an optical conductor (3 ) to be received optical signal (S, S ') and to recognize based on the evaluation of a manipulation of the screen element (2). Self-service device (1) according to claim 1, characterized in that the optical conductor (3) has a first end (31) and a second end (32) and via the first end (31) and the second end (32) with the control device (4), wherein the control device (4) is designed to inject an optical signal (S, S ') into the optical conductor (3) via the first end (31) and to receive it via the second end (32). Self-service device (1) according to claim 1 or 2, characterized in that the control device (4) is designed to detect a manipulation of the screen element (2) on the basis of a comparison of the transmitted optical signal (S) and the received optical signal (S ') , Self-service device (1) according to one of claims 1 to 3, characterized in that the optical signal (S, S ') has a wavelength in a range between 200 nm and 2000 nm. Self-service device (1) according to one of the preceding claims, characterized in that the optical conductor (3) is encoded coupled optical signal (S, S '). Self-service device (1) according to one of the preceding claims, characterized in that the privacy screen (2) is arranged on the input device (10) and covers the input device (10) at least partially for restricting the view of the input device (10). Self-service device (1) according to one of the preceding claims, characterized in that the screening element (2) is at least partially made of a flexible plastic. Self-service device (1) according to any one of the preceding claims, characterized in that the optical conductor (3) is at least partially injected into the manufactured as a plastic injection part screen element (2) or inserted into a web on the screen element (2). Self-service device (1) according to one of the preceding claims, characterized in that the optical conductor (3) is laid in loops on the screening element (2).

Images