FR3074945A1 - AUTOMATIC SECURED WORK TERMINAL - Google Patents

Abstract

An automatic business terminal (20) to be arranged in a manner accessible to users, comprising a control unit (23) configured to control devices fitted to the automatic loom terminal, a payment device (26) and a lockable door (21) allowing physical access to the control unit and the electronic payment device arranged inside the automatic loom terminal, the lockable door being provided with electric locks (22), this automatic loom terminal further comprising a module (27). ) access management module, this access management module comprising an electronic card connected to a first power supply from the control unit, and a second power supply independent of the first power supply, the electronic card comprising non-return diodes isolating the second power supply from the first power supply.

Description

The invention relates to the field of interactive digital communication systems, such as automatic business terminals, and more particularly to devices intended for managing access to the modules equipping such systems.

By interactive digital communication system is meant here a system provided with an interactive interface and intended to be arranged in self-service in a point of sale for customers allowing them to realize, following user interactions, a service offered by the point of sale. By way of nonlimiting example of these interactive digital communication systems, automatic machine terminals are cited such as:

order taking terminals (also called automatic order terminals) allowing a user to order a service or a product offered for sale by a point of sale (order a meal in a restaurant or a transport ticket in a travel agency travel, for example);

ATMs such as self-service banking machines, transport ticket machines, or food dispensers;

automatic teller machines to settle a transaction at a point of sale (a hypermarket, a service station, or a parking lot, for example).

Such systems generally include a screen configured to display interactive content for the user, input means (touch screen, keyboard, or selection buttons, for example), a central unit for the processing of user interactions, means of printing tickets, and electronic payment devices.

Electronic payment devices include an electronic payment terminal, with which various peripheral modules can be associated. On a non-exhaustive basis, these devices may contain:

an RFID reader, an NFC reader and / or a card reader (contactless card, magnetic stripe card, smart card, programmable card, for example);

a screen for viewing information such as the amount of a transaction;

an input keyboard or a touch screen intended to allow the user to enter data, such as confidential codes, or select a choice from a list displayed to him;

wired and / or radio communication modules (GSM, GPRS, 3G / 4G, WIFI), to connect the payment terminal to a telecommunications network and establish a communication link with a peripheral of the communication system terminal, a PC of security or a bank server, with modules | payment, or with an interactive digital device (a computer, cash register, for example); a processor, attached to a printed circuit to which are connected the other components of the configured to allow electronic payment.

In addition, the alement system end, for reasons of payment terminal production of electronics, terminal operation allows automatic business access, digital maintenance communication, physics different from the terminal, including, in particular, electronic payment devices.

or more interactive, component hatch [006] As a result, by being accessible to all users (customers and point of sale personnel), the automatic business terminal can be the target of extraction attempts, by accessing it via the maintenance hatch, sensitive information, such as bank data. In addition, users or hackers may be tempted to make changes or even render certain components inoperative.

The automatic business terminals are, in fact, installed in an accessible manner to users and therefore escape, including in particular electronic payment devices, from the total control of the administrator. They are therefore exposed to possible manipulation by unauthorized persons.

Electronic payment devices are, in particular, the regular target of fraud attempts, whether by adding spy systems intercepting the data, or by untimely reading of the codes entered, including by mini-camera systems.

[009] The interior of automatic business terminals incorporating electronic payment devices, or even coin-operated devices in certain systems, must therefore remain out of the reach of users. Electronic payment security is a major issue.

[010] To automatically (or lock) the interior of these systems.

[011] In addition, one (acronym for Anti-Fishing, banking service establishments), in order to irrigate electronic payment devices, automatic trades.

[012] This maintenance hatch reference, for opening the communication system [013] To do this, an input / output solution is generally adopted.

solution is implemented by controlling the opening of a hatch or several maintenance keys.

terminals and comply with security constraints, electric strikes are provided, to secure access to the protection repository, risks have been established in particular those called AFAS by several (GIE Cartes Exposés recommends them, in addition to opening electric of the recording these to be electronic. A lock the hatch [014] However, major. On the one hand, whole that cannot control) general on the other hand, are not because they require way native in these In addition, relatively expensive the systematic interactive digital requests.

comparable to piloting Concretely, this nate ”, configured for electronic control allows to present two constitute a separate component integrated in an automatic terminal machine unit.

suitable for use in a 24 Volt power supply, terminals.

automatons automatons by

Normally automatic. [016] The unforeseen drawbacks of industrial programmable logic controllers are other components of a programming terminal for the maintenance of more relevant skills, which in theirs exceed the business terminals not optimized when they are used in an automatic business terminal. Indeed, as illustrated in FIG. 1, the implementation of this solution is relatively complex, because the automaton must interact with all the elements of the terminal: the electronic key system, the control system of the lock, and the device providing information on the state of the lock (open / closed). A plurality of connections - that those skilled in the art are forced to choose from appropriate supply catalogs - are therefore required to interconnect multiple components including at least:

an industrial controller 1;

- a lock 2; an emergency power supply 3 configured to compensate for an electrical failure of the terminal and directly supply the lock 2; a set of non-return diodes 4 to isolate the emergency power supply 3 from the normal electrical circuit of the terminal, and authorize the opening of the maintenance hatch even in the event of a short circuit; a general supply 5 of the terminal. [017] The wiring resulting from such a "canvas" connection

spider "is relatively complex and uses connection technologies such as intermediate terminal block, splices, or distribution terminal blocks.

[018] As a result, access control inside the terminal

automatic trade by deploying an industrial programmable controller is governed by several constraints which make it complex, expensive and inconvenient.

[019] An object of the present invention is to remedy the

aforementioned drawbacks.

[020] Another object of the present invention is to improve the

security of self-service self-service kiosks for unrestricted users.

[021] Another object of the present invention and to promote the implementation

available to users of automatic trade terminals, without however compromising the security of electronic payment devices installed there.

[022] Another object of the present invention is to facilitate

Maintenance operations for [023] Another better access to automatic trade terminals.

present invention is to secure in particular electronic banking, installed in a terminal object of the device, automatic arranged in an accessible manner, restriction, to users.

Connection of without present invention configured for a business terminal the automatic.

place, a business terminal to be arranged in an accessible way

Another object of the present invention components configured for the interior of an automatic business terminal. Another object of the connection of electronic payment device components equipping [026] To this end, it is proposed, first automatic intended for users, comprising a control unit configured to control devices equipping the automatic business terminal, a electronic payment device and a lockable door allowing physical access to the control unit and to the electronic payment device arranged inside an automatic trade terminal, the lockable door being provided with electric locks, this automatic trade terminal comprising, in addition, a module for managing access, comprising a second power supply to this card module connected one by one to the electronics from electric i the electronic card comprising diodes of the first; the control unit, independent of the first power supply, non-return isolating the second power supply, power supply.

[027] planned, the characteristics alone or in combination:

Various can be memory access management module, memory the state of the electric locks, having a first locked state the processor is, memory one the processor being in addition, code identifying unlock includes configured a processor and for storing in the electric locks and a second unlocked state; configured to store the electric locks in a key, unlocked by at least possibly the access management module can include, digital used for these electric locks a digital key;

in addition, an electronic circuit making it possible to time stamp the change of state of the electric locks;

the processor is further configured to store in memory the time stamp for the change of state of the electric locks;

the access management module is configured to report the status of the electrical locks to the control unit;

the second power supply is 12 volts, this second power supply being an emergency power supply;

the access management module is connected to the electrical locks, to the first electrical supply and to the second electrical supply, respectively, by means of a contained cable;

the access management module is integrated into the control unit.

Other characteristics and advantages of the invention will appear more clearly and concretely on reading the following description of embodiments, which is made with reference to the appended drawings in which:

FIG. 1, commented on previously, schematically illustrates a connection, known from the state of the art, of an automatic machine with components of an automatic business terminal;

Figures 2 and 3 schematically illustrate an automatic business terminal according to various embodiments;

FIG. 4 schematically illustrates the connection of an access management module according to various embodiments with components of an automatic business terminal.

Referring to Figures 2-3, there is displayed an automatic loom 20 incorporating a plurality of devices, accessible via at least one lockable door 21. This lockable door 21 can be a maintenance hatch or a main door ( or secondary) of the automatic business terminal 20.

The graphic illustration in FIGS. 2 and 3 of the lockable door 21 arranged on the rear face of the automatic loom terminal 20 is given only by way of example, and is in no way limiting, because this lockable door 21 can be fitted on any other face of the automatic loom 20 with appropriate dimensions.

[031] Electric locks (or strikes) 22 make it possible to lock / unlock the lockable door 21 for the purpose of securing access to the devices arranged inside the automatic trade terminal 20.

In the illustrative example of Figures 2-3, the automatic business terminal 20 includes a control unit 23 (or control PC), a screen 24, a printer 25, and a payment device 26. Other means inputs / outputs such as a loudspeaker, a touch screen, a keyboard, a barcode scanner, a webcam, or semaphores can also equip the automatic trade terminal 20.

The control unit 23 is configured to control (or drive) the devices equipping the automatic business terminal 20. It is a data processing unit, such as a microcomputer. The control unit 23 manages interactive content intended to be displayed on the screen 24. The control unit 23 makes it possible, in fact, to interpret user interactions with the interactive content, via the touch screen 24 or any other input means, and to control the other devices of the automatic business terminal 20 in order to allow the performance of a service offered by a point of sale.

[034] For example, in a point of sale such as a fast food sign, the automatic trade terminal 20 makes it possible to display on the screen 24 products / services interactions in touch menus, or more generally those offered at the sale. A user can, a particular path with the content displayed on the screen 24, select an order, and adjust the level of the business terminal via interactive command, automatic product / service offered to via the electronic payment device 26 at

20. A sales receipt, or more the sale, generally proof of his order, is subsequently printed to him by the printer 25, displayed on the screen 24 or sent to him by SMS, MMS or email.

The control unit 23 communicates, via at least one communication interface (analog line, GPRS, Wifi, or IP for example) with at least one other device such as a bank server, an update terminal interactive content, a command center, and / or the POS system.

The electronic payment device 26 comprises, in this example, a payment terminal provided with a card reader, an input keyboard, a screen, and a communication interface. The electronic payment device 26 makes it possible to carry out financial transactions, under the control of the control unit 23.

[037] In order to secure physical access to the devices fitted to the automatic trade terminal 20 (including in particular the electronic payment device 26), this automatic trade terminal 20 comprises an access management module 27 configured to control the electric locks 22. The access management module 27 is in fact configured:

to control the locking and unlocking of the electric locks 22. This command can originate from the control unit 23 or locally from the access management module 27;

to memorize any information concerning any event of opening or closing of the lockable door 21, in other words the locked or unlocked state of the electric locks 22.

[038] For this, the access management module 27 comprises a processor (an Atmel® type microcontroller, for example) and a memory configured to store there, by means of the processor, the locked / unlocked states of the electric locks 22 (or, in an equivalent manner, the open / closed states of the lockable door 21). The processor is in charge of read / write operations from / into the memory and of controlling the electrical locks 22. In one embodiment, this memory is a read only memory of EEPROM type. The data recorded therein is therefore not lost when the access management module 27 is not supplied with electricity. It is also possible to read the information concerning the state of the electric locks 22 from this memory. Reading of the stored information is done on request, via software communicating with the access management module 27, for example, via a USB link.

[039] The memory of the access management module 27 communicates with the processor via an I2C bus (acronym for "Inter-integrated Circuit" in English). This memory is, for example, of type 24LC512-1 / SN. The data stored there is in ASCII format.

The access management module 27 comprises, in one embodiment, a battery, in order to keep, if necessary, the time stamp of the openings / closings of the lockable door 21. The battery is intended to supply a circuit electronic to time stamp the change of state of the electric locks 22. It follows that it is possible to recover the dates and times of the various events. The memory of the access management module 27 is configured to locally store the time stamps of the openings of the lockable door 21, even if the control unit 23 is powered off or has failed, for example.

[041] The stored information includes, in one embodiment, a code identifying the digital key used to unlock the electric locks 22, the time stamp of the unlocking event, the time stamp of the locking event, and l origin of the command to unlock the electric locks 22 (locally from the access management management module 27 or from the control unit 23). The electric locks 22 can be unlocked by at least one digital key.

[042] The access management module 27 comprises, in one embodiment, one or more electronic cards.

[043] The access management module 27 is, in one embodiment, an electronic card integrated into the control unit 23 (variant not shown). The access management module 27 is, in this case, in the form of an electronic extension card connected to the control unit 23.

[044] The access management module 27 is connected on the one hand to the control unit 23 and on the other hand to the electric locks 22. The command for the electric locks 22 can thus be issued from the module 27 access management (by means of an appropriate button provided for this purpose) or from the control unit 23 via the access management module 27. As a result, advantageously, the access management module 27 records all requests for locking / unlocking of the electric locks 22 so that it keeps up-to-date information on the locked or unlocked state of the electric locks 22.

The information concerning the state of the electric locks 22 is, in one embodiment, in addition to their storage in a memory arranged in the access management module 27, returned to the control unit 22, by the intermediary of the access management module 27.

[046] As for its electrical supply, the access management module 27 is connected, as illustrated in FIG. 4, to a first electrical supply 28 internal to the automatic trade terminal 20 and to a second electrical supply 29 backup (or external to the automatic trade terminal 20), independent of the first power supply 28.

[047] The first power supply 28 is the general power supply for the automatic business terminal 20.

[048] In one embodiment, the first power supply 28 comes from the control unit 23, while the second power supply 23 comes from an electrical source independent of the first power supply 28. The second power supply 29 is , in one embodiment, from a battery, while the first power supply 28 comes from a mains power source. As a variant, the second electrical supply 29 comes directly from a mains supply source, without passing through the control unit 23.

[049] As a result, advantageously, the access management module 27 can operate independently of the control unit 23. The traceability of the state of the electric locks 22 is therefore ensured even when the control unit 23 is faulty or is switched off.

The second external power supply 29 allows the control of the electric locks 22 in order to unlock the lockable door 21 when the control unit 23 is no longer supplied or is broken (but still supplied).

[051] The first power supply 28 and the second power supply 29 are, respectively, 5 volts and 12 volts. 5 volt and 12 volt power supplies are generally provided by default in an automatic trade terminal.

[052] The access management module 27 preferably comprises multicolored LEDs indicating the power supply source, and an Rx / Tx LED on a USB link which connects it to the control unit 23.

[053] The access management module 27 is preferably protected against electrostatic discharges by one or more Transil diodes. The electronic circuits of the access management module 27 between the second external power supply 29 (backup) and the first electrical supply 29 coming from the control unit 23 are protected by non-return diodes. These non-return diodes isolate the second power supply 29 from the first power supply 28 and allow the electrical locks 22 to be opened, even in the event of a short circuit.

Advantageously, the non-return diodes are included in embodiment, in the form of the first power supply being isolated from access and therefore form an integral part of this access management occurs, in a mode of a card. electronic connected on the one hand electric 28 and on the other hand to the second these two electric 29, by the diodes module 27 of non-return management electric power supplies 28-29 mounted on the electric card, access is connected to the latches [ 055] The electrical 22 and to the first and second electrical supply 2829, by means of standardized cables. Advantageously, in this connection, a cable connects only two components of the automatic loom terminal 20. More generally, it is a cable going simply from point A to point B (i.e. a contained cable), without there being a bifurcation towards a plurality of components of the automatic business terminal 20. The access management module 27 is, in fact, connected to each of the components comprising the electric locks 20 , the first internal power supply 28, the second emergency power supply 29 by means of contained cables, that is to say without these cables being "split" between several components. This results, advantageously, in a simplification in the connection (reduced number of cables and connection compatible with the various electrical closing technologies supplied with 12 volts DC) of the various components of an automatic business terminal 20.

[056] In one embodiment, the access management module 27 ensures the management of other devices equipping the automatic business terminal 20 such as semaphores indicating the customer journey, via the lighting of indicators guiding the customer in the production a service offered by the point of sale, or advertising media associated with the automatic business terminal 20.

[057]

By memorizing information relating to any locking / unlocking event of the electric locks 22, the access management module 27 described above advantageously allows centralized access management inside the automatic business terminals 20. This solution is particularly suitable for automatic trade terminals 20 arranged in a way that is accessible to the 5 users (arranged in self-service), such as the order taking terminals intended for fast food. It responds to a request for security, in particular electronic payment devices placed in automatic terminals accessible to all users.

Claims (9)

claims 1. Automatic trade terminal (20) intended to be arranged in an accessible manner to users, comprising a control unit (23) configured to control devices fitted to the automatic trade terminal (20), a electronic payment device (26) and a door lockable (21) allowing physical access to the control unit (23) and to the electronic payment device (26) arranged inside the automatic trade terminal (20), the lockable door (21) being provided with electric locks (22), this automatic business terminal (20) being characterized in that it further comprises an access management module (27), this access management module (27) comprising an electronic card, connected a first power supply (28) from the control unit (23), and a second power supply (29) independent of the first power supply (28), the electronic card comprising anti-r diodes etour, isolating the second power supply (29) from the first power supply (28). 2. Automatic business terminal (20) according to claim 1, characterized in that the access management module (27) comprises a processor and a memory, the processor being configured to store in the memory the state of the electrical locks ( 22), the electric locks (22) having a first locked state and a second unlocked state. 3. Automatic business terminal (20) according to the preceding claim, characterized in that the processor is, moreover, configured to store in the memory a code identifying a digital key used to unlock the electric locks (22), these electric locks ( 22) can be unlocked by at least one digital key. 4. Automatic business terminal (20) according to claim 2 or 3, characterized in that the access management module (27) further comprises an electronic circuit making it possible to time stamp the change of state of the electric locks ( 22). 5. Automatic business terminal (20) according to the preceding claim, characterized in that the processor is, moreover, configured to store in the memory the time stamp of the change of state of the electric locks (22). 6. Automatic business terminal (20) according to any one of claims 2 to 5, characterized in that the access management module (27) is configured to report the state of the locks 5 electric (22) to the control unit (23). 7. Automatic trade terminal (20) according to any one of the preceding claims, characterized in that the second electrical supply (29) is 12 volts, this second electrical supply (29) being a backup supply. 8. Automatic business terminal (20) according to any one of the preceding claims, characterized in that the access management module (27) is connected to the electrical latches (22), to the first electrical supply (28) and to the second electric (29), respectively, by means of a contained cable. 15 9. Automatic business terminal (20) according to any one of the preceding claims, characterized in that the access management module (27) is integrated into the control unit (23).