EP3413278A1 - Methode et appareil autonome pour la supervision de la distribution illicite de billets d'un guichet automatique bancaire, et systeme le comprenant - Google Patents

Methode et appareil autonome pour la supervision de la distribution illicite de billets d'un guichet automatique bancaire, et systeme le comprenant Download PDF

Info

Publication number
EP3413278A1
EP3413278A1 EP17174625.8A EP17174625A EP3413278A1 EP 3413278 A1 EP3413278 A1 EP 3413278A1 EP 17174625 A EP17174625 A EP 17174625A EP 3413278 A1 EP3413278 A1 EP 3413278A1
Authority
EP
European Patent Office
Prior art keywords
atm
cash
illicit
vibration
action
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Withdrawn
Application number
EP17174625.8A
Other languages
German (de)
English (en)
Inventor
António Nuno Sampaio e Abrantes
Paulo Miranda Reis Duarte
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Pnp Tech SA
Original Assignee
Pnp Tech SA
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Pnp Tech SA filed Critical Pnp Tech SA
Priority to EP17174625.8A priority Critical patent/EP3413278A1/fr
Priority to PT2018050020A priority patent/PT2018226110B/pt
Priority to PCT/PT2018/050020 priority patent/WO2018226110A1/fr
Publication of EP3413278A1 publication Critical patent/EP3413278A1/fr
Withdrawn legal-status Critical Current

Links

Images

Classifications

    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07F—COIN-FREED OR LIKE APPARATUS
    • G07F19/00—Complete banking systems; Coded card-freed arrangements adapted for dispensing or receiving monies or the like and posting such transactions to existing accounts, e.g. automatic teller machines
    • G07F19/20—Automatic teller machines [ATMs]
    • G07F19/207—Surveillance aspects at ATMs
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07F—COIN-FREED OR LIKE APPARATUS
    • G07F19/00—Complete banking systems; Coded card-freed arrangements adapted for dispensing or receiving monies or the like and posting such transactions to existing accounts, e.g. automatic teller machines
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07F—COIN-FREED OR LIKE APPARATUS
    • G07F19/00—Complete banking systems; Coded card-freed arrangements adapted for dispensing or receiving monies or the like and posting such transactions to existing accounts, e.g. automatic teller machines
    • G07F19/20—Automatic teller machines [ATMs]
    • G07F19/205—Housing aspects of ATMs
    • G07F19/2055—Anti-skimming aspects at ATMs
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07F—COIN-FREED OR LIKE APPARATUS
    • G07F19/00—Complete banking systems; Coded card-freed arrangements adapted for dispensing or receiving monies or the like and posting such transactions to existing accounts, e.g. automatic teller machines
    • G07F19/20—Automatic teller machines [ATMs]
    • G07F19/206—Software aspects at ATMs

Definitions

  • the present invention is enclosed in the area of security systems for Automated Teller Machines (ATM).
  • ATM Automated Teller Machines
  • Cash theft techniques directed for logic of an ATM have evolved to placing a computer program in its computer or in one of its peripheral devices, with a behaviour similar to a virus/malware, which will have priority control of the cash dispensing module of the ATM.
  • this computer program After being installed, this computer program allows a user to activate it through a specific ATM card, or introducing locally or remotely a personal code, or other type of order.
  • the used is enabled to control directly the dispensing operations of the ATM by means of such malware, allowing to withdraw part or the entirety of the available cash, in an action known as "jackpot", without the control software of the ATM to gain knowledge or the capacity of stopping or preventing the cash withdrawal process.
  • an autonomous apparatus (10, 20) for supervision of illicit cash dispense of an automated-teller machine (ATM) which comprises at least one sensor capable of detecting vibration and computational means, such computational means being configured to, based on a vibration variable obtained by said sensor capable of detecting vibration, identify an action of illicit cash dispense of an ATM, such action of illicit cash dispense consisting of a regular cash withdrawal illicitly issued through a malicious computer program.
  • ATM automated-teller machine
  • Such apparatus (10, 20) therefore identifies an action of illicit cash dispensing with resort to physical variables, therefore hardware, thereby providing detection such action through a specific vibration generated by the illicit withdrawal.
  • the apparatus of the present invention monitors vibration and identifies actions of illicit cash dispense which consist of logic attacks, issued by a malicious computer program, thereby remotely or locally, and logically, not physically, producing a different vibration pattern which is identified through the present invention, hence in a different way with regard to such cited prior art.
  • said computational means are further configured to, based on a vibration variable obtained by the sensor capable of detecting vibration and a time interval associated to such vibration variable, identify an action of illicit cash dispense of the ATM.
  • said vibration variable and said time interval define a vibration pattern
  • said computational means being configured to, based on the comparison of such measured vibration pattern with a preset vibration pattern associated to said ATM, identify an action of illicit cash dispense of an ATM.
  • the apparatus of the present invention monitors a vibration pattern, which is compared with a preset vibration pattern of the ATM, thereby not detecting a completely different vibration, as is the case of actions of breaking into the ATM, but detecting specific logic attacks, which provide a vibration pattern which corresponds to that of the equipment, but which may yet be detected.
  • the apparatus (10, 20) is further configured for comparing the time interval of the measured vibration pattern with the time interval of a preset vibration pattern corresponding to the maximum allowable cash withdrawal of the ATM.
  • the apparatus (10, 20) of the present invention consists of a bank note neutralisation system. It therefore does not require additional elements to be included in an ATM.
  • It is also an object of the present invention a system for supervision of illicit cash dispense of an ATM which comprises an ATM comprising dispensing means (300) and at least one cassette comprising cash (200), and at least two autonomous apparatus (10, 20) of any of its described configurations, such autonomous apparatus (10, 20) consisting of:
  • such system further comprises an ATM protection sub-system, in turn comprising bank note neutralisation means and cash dispenser blocking means, such cash dispenser blocking means preferably consisting of a power relay (30) which powers the cash dispenser.
  • cash dispenser blocking means preferably consisting of a power relay (30) which powers the cash dispenser.
  • the blocking means consisting of a power relay (30), so connected that it controls powering of the cash dispenser, allows to independently - without resort to physical access to any of the electrical or computational means of the ATM - controlling the powering of the dispenser, thereby allowing a quick and reliable way to stop the dispensing of bank notes in a case where an attack is detected.
  • the system of the present invention comprises an ATM, the computational means of the apparatus (10, 20) being isolated in terms of computational decision logic of any computational means comprised by said ATM and, preferably, the computational means of the second autonomous apparatus (20) consisting of computational means of the bank note neutralisation means (50. It therefore allows the apparatus (10, 20) to be immune to attempts of its own infection by the malware.
  • the apparatus (10, 20) comprises power supply means which provide power only to such apparatus (10, 20). It provides another way of immunity to attempts of infection/attack from the malware.
  • the method of the present invention further comprises the step of, based on a vibration variable obtained by the sensor capable of detecting vibration and a time interval associated to such vibration variable, identify an action of illicit cash dispense of an ATM, preferably said vibration variable and said time interval define a measured vibration pattern, said computational means being configured to, based on such vibration pattern, identify an action of illicit cash dispense of an ATM.
  • the comparison of the measured vibration pattern with the preset vibration pattern includes the identification of one or more of:
  • the measured vibration pattern is compared with the preset vibration pattern, identifying through such measured vibration pattern - for instance - how many notes will be dispensed in a single operation, per container of the ATM, and if such value overcomes a predefined maximum value.
  • the sensor capable of detecting vibration consists of a motion sensor.
  • bank note neutralisation means preferably an intelligent banknote neutralisation system (IBNS), e.g. with a degradation agent consisting of ink.
  • IBNS intelligent banknote neutralisation system
  • the microcontroller is further configured to identify an identification of a model of the ATM and, based on such identification, define the preset vibration pattern associated to said ATM.
  • the computational means of the apparatus (10, 20) consist of the computational means of the bank note neutralisation means, such neutralisation means comprising at least one sensor capable of detecting vibration, which consists of said at least one sensor capable of detecting vibration of the apparatus (10, 20).
  • connection cable (40) connecting the computational means of the ATM to the dispensing means (300) provides a constant supply voltage.
  • the system of the present invention comprises supervision means of such supply voltage. Thus, if the cable is cut off or disconnected, this voltage will no longer exist.
  • a closed ring technique is used, such ring passing through said cable and closing inside the computational means of the ATM, thereby enabling to detect if the cable is connected or cut.

Landscapes

  • Business, Economics & Management (AREA)
  • Accounting & Taxation (AREA)
  • Finance (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
  • Burglar Alarm Systems (AREA)
EP17174625.8A 2017-06-06 2017-06-06 Methode et appareil autonome pour la supervision de la distribution illicite de billets d'un guichet automatique bancaire, et systeme le comprenant Withdrawn EP3413278A1 (fr)

Priority Applications (3)

Application Number Priority Date Filing Date Title
EP17174625.8A EP3413278A1 (fr) 2017-06-06 2017-06-06 Methode et appareil autonome pour la supervision de la distribution illicite de billets d'un guichet automatique bancaire, et systeme le comprenant
PT2018050020A PT2018226110B (pt) 2017-06-06 2018-05-28 Método e aparelho autónomo para a supervisão da entrega ilícita de dinheiro de uma atm, e sistema que o inclui
PCT/PT2018/050020 WO2018226110A1 (fr) 2017-06-06 2018-05-28 Procédé et appareil autonome pour la supervision d'une distribution d'espèces illicites par un atm, et système comprenant ce procédé et cet appareil

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
EP17174625.8A EP3413278A1 (fr) 2017-06-06 2017-06-06 Methode et appareil autonome pour la supervision de la distribution illicite de billets d'un guichet automatique bancaire, et systeme le comprenant

Publications (1)

Publication Number Publication Date
EP3413278A1 true EP3413278A1 (fr) 2018-12-12

Family

ID=59014539

Family Applications (1)

Application Number Title Priority Date Filing Date
EP17174625.8A Withdrawn EP3413278A1 (fr) 2017-06-06 2017-06-06 Methode et appareil autonome pour la supervision de la distribution illicite de billets d'un guichet automatique bancaire, et systeme le comprenant

Country Status (3)

Country Link
EP (1) EP3413278A1 (fr)
PT (1) PT2018226110B (fr)
WO (1) WO2018226110A1 (fr)

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
GB2365187A (en) 2000-03-16 2002-02-13 Staplethorne Xtra Sense Ltd Piezo-electric sensor and alarm system
US20150278818A1 (en) * 2014-03-31 2015-10-01 Ncr Corporation Fraud Detection in Self-Service Terminal
US20160132887A1 (en) * 2014-11-10 2016-05-12 Mastercard International Incorporated Systems and methods for detecting compromised automated teller machines

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
GB2365187A (en) 2000-03-16 2002-02-13 Staplethorne Xtra Sense Ltd Piezo-electric sensor and alarm system
US20150278818A1 (en) * 2014-03-31 2015-10-01 Ncr Corporation Fraud Detection in Self-Service Terminal
US20160132887A1 (en) * 2014-11-10 2016-05-12 Mastercard International Incorporated Systems and methods for detecting compromised automated teller machines

Also Published As

Publication number Publication date
PT2018226110B (pt) 2022-10-24
WO2018226110A1 (fr) 2018-12-13

Similar Documents

Publication Publication Date Title
EP3416148A1 (fr) Systèmes et procédés pour fournir une notification d'une cyber-attaque dans un système de sécurité
AU2015100234A4 (en) Security system for cash handling machine
WO2013013194A1 (fr) Détection d'atteinte à la sécurité dans un appareil électronique
US10552811B2 (en) Cash machine security systems and methods
US20160004225A1 (en) Method and protection device for protecting an electric motor and/or an operating machine which is coupled thereto from incorrect control operations
US8418248B2 (en) Method and device for defending against attacks to systems comprising a plug and play function
EP3413278A1 (fr) Methode et appareil autonome pour la supervision de la distribution illicite de billets d'un guichet automatique bancaire, et systeme le comprenant
US20130038448A1 (en) Access Control System
EP3190769B1 (fr) Procédé et système permettant de détecter une reprogrammation malveillante de plc dans des systèmes scada à l'aide d'une déception temporelle
EP3627465B1 (fr) Procédé et système de détection d'effraction
CN106485849B (zh) 用于自助服务终端技术状况监控和报警的方法和系统
EP3792886A1 (fr) Système atm avec porte virtuelle
EP3958227B1 (fr) Dab avec connecteurs capteurs pour detecter leur retrait du pc du dab avec blocage des fonctions de livraison
CN106815904B (zh) 门禁控制方法、装置及门禁设备、系统
EP3091515B1 (fr) Procédé et dispositif pour la protection des récipients d'un distributeur d'une machine bancaire
CN114187720A (zh) 监控方法、监控装置、电子设备及计算机可读介质
CN106789929A (zh) 一种面向云控制平台的工业机器人信息安全管理方法
WO2016055760A1 (fr) Sécurité de gab
US8294575B2 (en) Reteachable non-contact switching circuit
KR20150108240A (ko) 에너지 저장 장치를 위한 침입 보호 장치
Kumar et al. A review on application of data mining techniques for intrusion detection
KR20160019615A (ko) 화이트리스트와 블랙리스트 혼용 기반의 보안장치 및 방법
CN218299070U (zh) 一种安全防御装置、电子设备及智能门锁
CN108875432A (zh) 用于识别电子安全模块上的物理操作的设备和方法
CN113538767B (zh) 一种半双工的驱动层找零方法、系统及介质

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE APPLICATION HAS BEEN PUBLISHED

AK Designated contracting states

Kind code of ref document: A1

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

AX Request for extension of the european patent

Extension state: BA ME

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: REQUEST FOR EXAMINATION WAS MADE

17P Request for examination filed

Effective date: 20190530

RBV Designated contracting states (corrected)

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: EXAMINATION IS IN PROGRESS

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: EXAMINATION IS IN PROGRESS

17Q First examination report despatched

Effective date: 20210125

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: EXAMINATION IS IN PROGRESS

GRAP Despatch of communication of intention to grant a patent

Free format text: ORIGINAL CODE: EPIDOSNIGR1

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: GRANT OF PATENT IS INTENDED

INTG Intention to grant announced

Effective date: 20230330

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE APPLICATION IS DEEMED TO BE WITHDRAWN

18D Application deemed to be withdrawn

Effective date: 20230810