EP2838073B1 - Device for carrying out a financial transaction - Google Patents

Description

The invention relates to a device for carrying out a money transaction according to the preamble of claim 1 and a method for protecting a device for carrying out a money transaction.

Such a device can be, for example, an ATM in which a user carries out a money transaction, for example in the form of a withdrawal process. The device can, however, also be a device for carrying out a general bank transaction, for example a transfer process or the like, a payment terminal or a ticket machine.

Such a device comprises a reading device for reading data from a user's identification device, at least one magnetic field coil for generating an alternating magnetic field in a detection area on the reading device and a control and evaluation device which is designed to control the at least one magnetic field coil for generating the alternating magnetic field and at least one characteristic variable that is dependent on the generated alternating magnetic field to monitor the at least one magnetic field coil in order to use the characteristic variable to detect an object in the detection area.

In particular at ATMs there is the problem that third parties fraudulently install so-called skimming modules ("skimmers") in the area of a reader, for example in the area of a card slot of a reader for reading a magnetic stripe card such as a credit card or debit card is to read data from the magnetic stripe card in order to gain knowledge of user information and, if necessary, to access an identification number (the so-called PIN). If relevant card information is known and the relevant identification number is also available, money can be fraudulently withdrawn by third parties from the account to which the data relates.

Skimming modules can, for example, be designed as reading devices that are placed in front of the actual reading devices. For example, an external reader in the form of a plastic frame can be attached to a card slot of an ATM so that when a magnetic stripe card is inserted into the card slot, the external reader reads data from the magnetic stripe card.

For this reason, so-called anti-skimming modules are used in ATMs, the aim of which is to detect tampering with a reader. For example, such anti-skimming modules should detect when an additional reader has been attached to a card slot.

As part of such an anti-skimming module, an electrical or magnetic alternating field is generated on the reading device within a detection area. When an object is brought into this alternating field, for example when a foreign body in the form of an additional reader is attached to the card slot of an existing reader, the alternating field changes, so that a parameter on the antenna, for example the input impedance of the antenna, changes. The change can be recorded and evaluated in order to generate an alarm based on the change or to put the device out of operation.

Conventionally, capacitive sensors are used to generate an alternating electrical field or magnetic field coils are used to generate an alternating magnetic field. From the DE 10 2008 012 231 A1 is for example the Use of a metal detector is known which generates an electromagnetic field in the area of a card slot in order to determine on the basis of the properties of the electromagnetic field whether a foreign reading device has been installed. One from the US 2006/169764 A1 known device uses a capacitive proximity sensor on an ATM. And from the WO 2010/123471 A1 an anti-skimming unit of an ATM with a capacitive sensor which operates at 32 kHz is known.

Current devices which use magnetic field coils to monitor an area upstream of a reading device have the disadvantage that the detection area in which an object can potentially be detected is often large. This can lead to a false alarm, for example if a sun visor is moved on an ATM and the detection range of the magnetic field coil also extends to the sun visor.

The object of the present invention is to provide a device for carrying out a money transaction and a method for protecting such a device in which the risk of a false alarm is reduced.

This object is achieved by an object with the features of claim 1.

Accordingly, it is provided that the magnetic alternating field generated by the at least one magnetic field coil has a frequency greater than 100 kHz.

The present invention is based on the knowledge that for reliable detection of a foreign body, in particular a third-party reader, in the area of a reader on a device for carrying out a money transaction, the detection area of a magnetic field coil may and should be small. Skimming modules, that is, third-party reading devices attached to an actual reading device with fraudulent intent, are usually located in the immediate spatial vicinity of the actual reading device of the device, for example the automated teller machine. It is therefore only necessary to monitor an area in the immediate vicinity of the reader. The magnetic field coil can thus be controlled in such a way that it predominantly generates an alternating magnetic field in a detection area in close proximity to the reading device the detection area is thus limited to an area in the immediate vicinity of the reading device of the device.

Because the detection area is selected to be small by reducing the range of the magnetic field coil, the risk of a false alarm can be reduced. Only those objects are detected that are directly approached to the actual reader of the device, for example by attaching a third-party reader (“skimmer”) to the reader.

The range of the magnetic field coil is reduced in that the magnetic field coil is operated at a comparatively high frequency to generate an alternating magnetic field. Magnetic field coils are conventionally operated in the low kilohertz range. Because, according to the invention, the alternating magnetic field generated has a frequency greater than 100 kHz, preferably greater than 1 GHz, for example in a range between 2 and 6 GHz, preferably between 2.3 and 2.5 GHz, for example at 2.45 GHz , the near field area of the magnetic field coil is reduced in volume. Since approaching objects are preferably detected in the near field area of the magnetic field coil, the range for detecting a foreign body is reduced.

This is based on the knowledge that the size of the near field of a magnetic field coil changes with the wavelength (which is inversely proportional to the frequency). In the case of an electromagnetically small magnetic field coil (the radius of which is smaller than the wavelength), the alternating magnetic field changes into the far field at a distance between one wavelength and two wavelengths, for example. At a frequency of 1 GHz, the free space wavelength corresponds, for example, to 30 cm, at 2 GHz to 15 cm. The near field is correspondingly small at these frequencies.

The evaluation device is preferably designed to monitor the input impedance of the at least one magnetic field coil as a parameter. A foreign body approaching the reading device is then detected by detecting a change in the parameter, i.e. the input impedance, and if the parameter changes by more than a predetermined amount, e.g. compared to a reference value (if the device has not been manipulated), e.g. If the input impedance exceeds or falls below a threshold value, an alarm is generated and / or a suitable countermeasure is initiated, for example any monetary transaction is prevented.

The device has two magnetic field coils, a first of which generates an alternating magnetic field with a first frequency greater than 100 kHz and a second of which generates an alternating magnetic field with a second frequency which is lower than the first frequency. In this way, a first magnetic field coil can generate a high-frequency alternating field and a second magnetic field coil can generate a low-frequency alternating field. For example, the first magnetic field coil can generate an alternating field between 2 and 3 GHz, for example at 2.45 GHz, while the other magnetic field coil generates an alternating field with a frequency in the kilohertz range, for example between 10 and 50 kHz.

Using the second, low-frequency alternating magnetic field, an additional, second detection can be carried out under certain circumstances in order to reduce the risk of a false alarm due to moisture (rain, dew) in the area of the reader. Moisture due to, for example, rain in the area of the reader could possibly lead to a misinterpretation when evaluating the parameter obtained on the basis of the first alternating magnetic field, e.g. the input impedance Magnetic field coil, a second detection signal can be obtained, which can be used in addition to determining whether a harmful foreign body is present or not.

The second magnetic field coil, operated at a different frequency to generate a low-frequency alternating magnetic field, can also be used to generate an interference field that superimposes noise on a data signal read by a third-party reader so that data contained in the signal cannot be recognized. The first magnetic field coil is used to detect a third-party reader, while the second, low-frequency magnetic field coil is used to noise a signal and thus as a countermeasure to prevent data from an identification device such as a credit card or EC card from being read out by a third-party reader.

For example, the control and evaluation device can be designed to generate an alarm only when one of the parameters assigned to the first magnetic field coil and one of the parameters assigned to the second magnetic field coil each have one

Undergoes change that exceeds a respectively assigned, predetermined amount. An alarm is thus only triggered if a (significant) change in the conditions is detected both on the first magnetic field coil and on the second magnetic field coil. If a relevant change in the parameter is only detected on one magnetic field coil, an alarm will not be triggered.

• ein Lesegerät Daten einer Identifikationseinrichtung eines Nutzers eingibt,
• mindestens eine Magnetfeldspule ein magnetisches Wechselfeld in einem Erfassungsbereich an dem Lesegerät erzeugt und
• eine Steuer- und Auswerteeinrichtung die mindestens eine Magnetfeldspule zum Erzeugen des magnetischen Wechselfeldes ansteuert und zumindest eine von dem erzeugten magnetischen Wechselfeld abhängende Kenngröße der mindestens einen Magnetfeldspule überwacht, um anhand der Kenngröße ein

The object is also achieved by a method for protecting a device for carrying out a money transaction, in which

• a reader enters data from a user's identification device,
• at least one magnetic field coil generates an alternating magnetic field in a detection area on the reading device and
• a control and evaluation device which controls at least one magnetic field coil for generating the magnetic alternating field and monitors at least one parameter of the at least one magnetic field coil that is dependent on the generated magnetic alternating field in order to use the parameter

To detect object in the detection area.

It is provided that the magnetic alternating field generated by the at least one magnetic field coil has a frequency greater than 100 kHz.

The advantages and advantageous configurations described above for the device also apply analogously to the method.

The idea on which the invention is based is intended below with reference to the in the

Fig. 1

eine schematische Ansicht einer Vorrichtung mit einem Lesegerät und einem Antiskimming-Modul umfassend eine Steuer- und Auswerteeinrichtung sowie mindestens eine Magnetfeldspule;

Fig. 2

eine schematische Ansicht eines durch eine Magnetfeldspule erzeugten quasistatischen magnetischen Feldes; und

Fig.3A-3C

schematische Ansichten der hochfrequenten magnetischen Felderzeugung an einer Magnetfeldspule.

Figures illustrated embodiments are explained in more detail. Show it:

Fig. 1

a schematic view of a device with a reader and an anti-skimming module comprising a control and evaluation device and at least one magnetic field coil;

Fig. 2

a schematic view of a quasi-static magnetic field generated by a magnetic field coil; and

Figures 3A-3C

schematic views of the high-frequency magnetic field generation on a magnetic field coil.

Fig. 1 shows in a schematic arrangement a device 1 which is designed to carry out a money transaction. The device 1 can be, for example an ATM from which money can be withdrawn or a terminal for making a bank transaction, e.g. B. a transfer or the like, act. The device 1 can, however, also be designed, for example, as a ticket machine or as a payment terminal at which a payment process can be carried out in a business environment, for example by means of a credit card or an EC card.

The device 1 comprises a reading device 10 with a card slot into which an identification device 4 in the form of, for example, a magnetic stripe card can be inserted. The identification device 4 is used to identify and authorize a user and contains information stored on a magnetic strip, for example, which can be read out by the reader 10 and possibly in connection with the input of an identification number (so-called PIN) to authorize the user to carry out a monetary transaction serve.

The problem with such devices 1 is that third parties can, with fraudulent intent, attach objects 3 in the form of third-party readers to the reader 10 in order to read information from a magnetic stripe card, for example, when a user attaches it to the reader 10. Such foreign reading devices that are used with fraudulent intent can, for example, have the form of a plastic frame which is attached to a card slot of the reading device 10 and through which the identification device 4 in the form of the magnetic stripe card is guided when it is inserted into the reading device 10. If an identification number of the user is also tapped, the information read out enables a third party to use the information to carry out transactions such as payment processes and withdrawals.

In order to recognize whether a foreign object 3 has been placed on the reading device 10, a control and evaluation device 2 is provided in the device 1, which is connected to magnetic field coils 20, 21. The magnetic field coils 20, 21 serve to generate an alternating magnetic field H in the area of the reading device 10, so that an object 3 that is located in a detection area on the reading device 10 interacts with the alternating magnetic field H and the inductance or input impedance of the magnetic field coils 20 , 21 changes what can be evaluated by the control and evaluation device 2 in order to trigger an alarm if necessary generate or initiate a suitable countermeasure, for example preventing a monetary transaction.

The magnetic field coils 20, 21 are activated by the control and evaluation unit 2 to generate an alternating magnetic field with a frequency greater than 100 kHz. The detection area in which an object 3 can be recognized essentially corresponds to the near field of the magnetic field coils 20, 21, in which a predominantly magnetic field H is generated.

The magnetic field H interacts in particular with objects 3 which have a material with a high permeability or conductivity. In particular, parasitic, foreign objects 3 can be detected in the form of reading devices which, for example, have a battery for electrical supply.

Magnetic field coils 20, 21 are conventionally operated on such devices 1 with a comparatively low frequency in the kilohertz range, for example between 20 and 30 kHz. This has the result that the range of the near field is comparatively large, which may lead to other objects 3 also interacting with the magnetic field H, although they are neither arranged in particular spatial proximity to the reading device 10 nor with the device 1 fraudulently intended be approximated. For example, the device 1 can have a sun visor that can be adjusted. When such a sun visor is adjusted, no signals may be detected at the control and evaluation device 2 which would incorrectly indicate the presence of a harmful object 3.

As shown schematically in Fig. 2 If a magnetic field coil 20, 21 is fed with a low-frequency current I, this results in a quasi-static alternating magnetic field H .. Because the magnetic field H is low-frequency, there is a very extensive near field in which objects 3 are also at a great distance to the magnetic field coil 20, 21 can still lead to a signal on the magnetic field coil 20, 21.

If the magnetic field coil 20, 21 is fed with a high-frequency current I (t), as shown schematically in FIG Figures 3A to 3C is shown, there is a magnetic field H (t) in the high frequency range. For example, an alternating magnetic field with a frequency greater than 1 GHz, for example in a frequency range between 2 and 6 GHz, preferably between 2.3 and 2.5 GHz, for example around 2.45 GHz, can be generated will. With such operation of the magnetic field coils 20, 21, the range of the near field N is comparatively small and is, for example, of the order of magnitude of the wavelength of the generated magnetic field H. Objects 3, such as a sun visor, which are arranged in the far field of the magnetic field coil 20, 21 have In this case, there is a comparatively low interaction with the magnetic field H of the magnetic field coil 20, 21, which can be explained in a highly simplified representation by the fact that magnetic waves H1, H2 detach from the magnetic field coil 20, 21 and only after detachment with the object 3 interact in the far field. This is schematically shown in Figures 3B and 3C shown.

By exciting the magnetic field coils 20, 21 with a high-frequency current I (t) to generate a high-frequency magnetic field H, the detection area in which the magnetic field coil 20, 21 reacts sensitively to an object 3 can thus be reduced in its size, i.e. its volume will. The detection area corresponds approximately to the near field of the magnetic field coil 20, 21.

The in Fig. 1 The illustrated embodiment of the device 1, two magnetic field coils 20, 21 are provided, one of which is operated at high frequency to generate a high-frequency magnetic field H and the other is operated at low frequency to generate a low-frequency magnetic field H.

The combination of the two magnetic field coils 20, 21 can have different functions.

Firstly, it is conceivable to use the high-frequency operated first magnetic field coil (e.g. magnetic field coil 20) to recognize whether a foreign body, in particular a foreign reader, is present on the basis of a change in the parameter (e.g. the input impedance). With the other, second magnetic field coil (e.g. magnetic field coil 21), on the other hand, an interference field can be generated which - if necessary depending on a detection by the first magnetic field coil 20, superimposes a noise on data signals received from a third-party reader and thus makes them unusable.

Secondly, it is also conceivable to use the two magnetic field coils 20, 21 to carry out two independent measurements and to evaluate signals on the magnetic field coils 20, 21 separately from one another, with the presence of an object 3 in the immediate area of the reader 10 only being concluded and correspondingly a Alarm is generated. For example, if an object is not detected either by means of the high-frequency magnetic field coil 20, 21 or by means of the low-frequency magnetic field coil 20, 21, it can be concluded that no harmful object is present. If only the high-frequency magnetic field coil 20, 21 detects an object, this can indicate that the input impedance of the high-frequency magnetic field coil 20, 21 has changed due to moisture in the area of the reading device 10, but that no harmful object 3 is actually present. If only the low-frequency magnetic field coil 20, 21 changes its input impedance, this can indicate a foreign body at a great distance, but not a harmful object 3 in the immediate vicinity of the reader 10 , 21 a foreign body, this can indicate a harmful object 3, that is to say a “skimmer”, in the immediate area of the reading device 10, so that an alarm is output accordingly.

The signals generated by the magnetic field coils 20, 21 are evaluated by the control and evaluation device 2. The control and evaluation device 2 can, for example, evaluate the input impedance Z of the magnetic field coils 20, 21 in order to use a change in the input impedance and, for example, a comparison with a reference value (which corresponds to a value when the device 1 has not been manipulated) to infer the presence of an object 3. If the input impedance Z changes, for example, by more than a predetermined amount and accordingly exceeds or falls below a threshold value, this can indicate a harmful object 3. The control and evaluation unit 2 evaluates this accordingly, the control and evaluation unit 2 possibly only drawing conclusions about the actual presence of a harmful object 3 in the area of the reading device 10 if there is a suitable signal combination on the two magnetic field coils 20, 21. In this respect, the input impedance Z represents a parameter of the magnetic field coil 20, 21 which is evaluated by the control and evaluation unit 2 in order to infer the presence of a harmful object 3.

List of reference symbols

1

contraption

10

Reader (magnetic stripe card reader)

2

Control and evaluation device

20.21

Magnetic field coil

3

object

4th

Identification device

H

Alternating magnetic field

H1, H2

wave

I.

electricity

N

Near field

Z

Input impedance

Claims (7)

1. Device (1) for carrying out a financial transaction, having

   - a reader (10) for reading data from an identification device (4) belonging to a user,

   - at least two magnetic field coils (20, 21) for generating an alternating magnetic field (H) in a detection range at the reader (10), and

   - a control and evaluation device (2) which is designed to control a first of the at least two magnetic field coils (20, 21) for the purpose of generating the alternating magnetic field (H) and to monitor at least one characteristic variable (Z) of the magnetic field coil (20, 21) which depends on the alternating magnetic field (H) generated in order to detect an object (3) in the detection range using the characteristic variable (Z),

   characterized
   in that the first of the at least two magnetic field coils (20, 21) generates an alternating magnetic field (H) at a first frequency of greater than 100 kHz, and a second of the at least two magnetic field coils (20, 21) generates an alternating magnetic field (H) at a second frequency which is lower than the first frequency.
2. Device (1) according to Claim 1, characterized in that the alternating magnetic field (H) generated by the first of the at least two magnetic field coils (20, 21) has a frequency of greater than 1 GHz.
3. Device (1) according to Claim 1 or 2, characterized in that the alternating magnetic field (H) generated by the first of the at least two magnetic field coils (20, 21) is in a frequency band between 2 and 6 GHz, preferably between 2.3 and 2.5 GHz.
4. Device (1) according to one of Claims 1 to 3, characterized in that the evaluation device (2) is designed to monitor the input impedance (Z) of the first of the at least two magnetic field coils (20, 21) as a characteristic variable.
5. Device (1) according to one of the preceding claims, characterized in that the control and evaluation device (2) is designed to generate an alarm if the characteristic variable changes by more than a predetermined amount.
6. Device (1) according to one of the preceding claims, characterized in that the control and evaluation device (2) is designed to generate an alarm if a characteristic variable (Z) assigned to the first magnetic field coil (20) and a characteristic variable (Z) assigned to the second magnetic field coil (21) each change by more than a predetermined amount.
7. Method for protecting a device (1) for carrying out a financial transaction, in which

   - a reader (10) reads data from an identification device (4) belonging to a user,

   - at least two magnetic field coils (20, 21) generate an alternating magnetic field (H) in a detection range at the reader (10), and

   - a control and evaluation device (2) controls a first of the at least two magnetic field coils (20, 21) for the purpose of generating the alternating magnetic field (H) and monitors at least one characteristic variable (Z) of the first of the at least two magnetic field coils (20, 21) which depends on the alternating magnetic field (H) generated in order to detect an object (3) in the detection range using the characteristic variable (Z),

   characterized
   in that the first of the at least two magnetic field coils (20, 21) generates an alternating magnetic field (H) at a first frequency of greater than 100 kHz, and a second of the at least two magnetic field coils (20, 21) generates an alternating magnetic field (H) at a second frequency which is lower than the first frequency.

Images