GB2351590A - Fraud protection for a self-service terminal - Google Patents

Fraud protection for a self-service terminal Download PDF

Info

Publication number
GB2351590A
GB2351590A GB0012139A GB0012139A GB2351590A GB 2351590 A GB2351590 A GB 2351590A GB 0012139 A GB0012139 A GB 0012139A GB 0012139 A GB0012139 A GB 0012139A GB 2351590 A GB2351590 A GB 2351590A
Authority
GB
United Kingdom
Prior art keywords
sensor
terminal
sst
user interface
proximity
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
GB0012139A
Other versions
GB0012139D0 (en
GB2351590B (en
Inventor
Alistair A Doig
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
NCR International Inc
Original Assignee
NCR International Inc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority to GBGB9915198.7A priority Critical patent/GB9915198D0/en
Application filed by NCR International Inc filed Critical NCR International Inc
Priority claimed from US09/589,692 external-priority patent/US6390367B1/en
Publication of GB0012139D0 publication Critical patent/GB0012139D0/en
Publication of GB2351590A publication Critical patent/GB2351590A/en
Application granted granted Critical
Publication of GB2351590B publication Critical patent/GB2351590B/en
Anticipated expiration legal-status Critical
Expired - Lifetime legal-status Critical Current

Links

Classifications

    • GPHYSICS
    • G07CHECKING-DEVICES
    • G07FCOIN-FREED OR LIKE APPARATUS
    • G07F19/00Complete banking systems; Coded card-freed arrangements adapted for dispensing or receiving monies or the like and posting such transactions to existing accounts, e.g. automatic teller machines
    • G07F19/20Automatic teller machines [ATMs]
    • GPHYSICS
    • G07CHECKING-DEVICES
    • G07FCOIN-FREED OR LIKE APPARATUS
    • G07F19/00Complete banking systems; Coded card-freed arrangements adapted for dispensing or receiving monies or the like and posting such transactions to existing accounts, e.g. automatic teller machines
    • G07F19/20Automatic teller machines [ATMs]
    • G07F19/201Accessories of ATMs
    • GPHYSICS
    • G07CHECKING-DEVICES
    • G07FCOIN-FREED OR LIKE APPARATUS
    • G07F19/00Complete banking systems; Coded card-freed arrangements adapted for dispensing or receiving monies or the like and posting such transactions to existing accounts, e.g. automatic teller machines
    • G07F19/20Automatic teller machines [ATMs]
    • G07F19/205Housing aspects of ATMs
    • GPHYSICS
    • G07CHECKING-DEVICES
    • G07FCOIN-FREED OR LIKE APPARATUS
    • G07F19/00Complete banking systems; Coded card-freed arrangements adapted for dispensing or receiving monies or the like and posting such transactions to existing accounts, e.g. automatic teller machines
    • G07F19/20Automatic teller machines [ATMs]
    • G07F19/205Housing aspects of ATMs
    • G07F19/2055Anti-skimming aspects at ATMs
    • GPHYSICS
    • G07CHECKING-DEVICES
    • G07FCOIN-FREED OR LIKE APPARATUS
    • G07F19/00Complete banking systems; Coded card-freed arrangements adapted for dispensing or receiving monies or the like and posting such transactions to existing accounts, e.g. automatic teller machines
    • G07F19/20Automatic teller machines [ATMs]
    • G07F19/207Surveillance aspects at ATMs

Abstract

A self-service terminal (e.g. ATM) comprises a user interface (12) and at least one proximity sensor (40) located adjacent the user interface (12), such that the sensor (40) may detect foreign objects placed in contact with or in close proximity to the user interface (12), e.g. at a card reader (14d) or keypad, and so detect/prevent fraud by giving an alarm if the detection lasts for longer than e.g. one minute.

Description

2351590 FRAUD PREVENTION ARRANGEMENT The present invention relates
primarily to self -service terminals (SSTs), such as automated teller machines (ATMs), and in particular to an SST incorporating an arrangement for fraud prevention by means of detection of unauthorised interference or tampering with data capture devices.
SSTs, such as ATMs, are commonly and increasingly used to carry out many everyday transactions which do not require human supervision. As such transactions may involve transfer or dispense of valuable media, such as banknotes or payment orders, SSTs may present a target f or f raud.
To make use of a conventional ATM, a user is f irst required to insert a magnetic strip card into a card reader slot to the ATM f ascia, the card serving as an identification token. The user must then confirm their identity by, for example, entering a. personal identification number (PIN) associated with the card, but known only to the user. The PIN is entered on a keypad incorporated in the ATM.
If an unauthorised individual wishes to gain access to an individual's account and thus make unauthorised withdrawals of funds, it is necessary to both obtain the data stored on the card, and gain knowledge of the appropriate PIN or other means used to confirm the user's identity. Thus, potential targets for fraud include the magnetic card reader, and the data input or capture device used for entry of a PIN or other identifier.
methods which have been used in attempts to execute such frauds include fitting false interfaces to the fascia of an ATM in order to intercept the relevant data as it is being communicated to the ATM. For example, an additional magnetic card reader may be placed in the entry to the existing card reader, so that the information stored on a card may be read as the card is inserted into the ATM. The intercepted data may then be used to construct a fraudulent card.
To obtain knowledge of a user's PIN a false keypad overlay may be located above the actual keypad, such that when a user enters their PIN, the sequence of digits is recorded by the false keypad. Alternatively, a user may simply be observed while using the ATM and their PIN noted. This information may then be subsequently retrieved and used in conjunction with a false card to withdraw funds from a user's account, which withdrawals may continue for an extended period before coming to the user's attention.
Similar methods may be used to interpret readings of biometrics data such as palm prints or iris appearance.
It is among the objects of embodiments of the present invention to provide an SST which reduces the risks of such frauds. It is further among the objects of embodiments of the present invention to provide an SST which alerts the SST operator to unauthorised interference with an SST.
According to a first aspect of the present invention, there is provided a self-service terminal (SST) comprising a user interface; and at least one proximity sensor located adjacent the user interface, such that the sensor may detect foreign objects placed in contact with or in close proximity to the user interface.
The sensor may be incorporated in the SST during its assembly or may be retrofitted thereto.
An advantage of this aspect of the invention is that the proximity sensor provides a self-contained detection system. That is, the operation of the proximity sensor does not rely on the interruption of a signal from a cooperating device that is located outside the SST; for example, the sensor does not detect a signal from an emitter or a transponder located outside of the SST.
The invention also relates to a method of detecting foreign objects placed in contact with or in close proximity to the user interface of an SST.
In such a manner, attempts to fit false magnetic card readers or keypad overlays to an SST may be detected.
Preferably, the proximity sensor is located rearwardly of the user interface outer surface, or is suitably disguised or concealed, such that the sensor will not be visible to a user of the SST. In a preferred embodiment, the proximity sensor is contained within the SST so that no part of it can be accessed from outside the SST. This has the advantages that a fraudulent third party is not able to see or tamper with the proximity sensor.
Proximity sensors are well known, and will not be described in detail here. Examples of sensors suitable for use in the present invention are available from Pepperl and Fuchs, Postfach 31 04 40, D-6800, Mannheim 31, Germany. Conveniently, the proximity sensor is a capacitive sensor to allow detection of metallic and non-metallic objects, or alternatively may be an inductive sensor.
Preferably also, the SST further comprises at least one data capture device that is part of or incorporated into the user interface, and the sensor is located so as to detect objects in the area immediately adjacent the data capture device. Conveniently, the SST comprises a plurality of data capture devices, each with an associated respective proximity sensor. Most preferably, the proximity sensor is located to sense objects adjacent a card reader mouth. The sensor and its associated control electronics may be powered from the card reader. Alternatively, the sensor and its associated control electronics may be powered by a dedicated unit.
Preferably also, the SST further comprises means for deactivating the SST on detection of a foreign object by the proximity sensor.
Preferably also, the SST comprises means for alerting an SST operator on detection of a foreign object by the proximity sensor. The operator may then, for example, view the SST remotely via a camera and determine if any action is required.
Preferably, the means for deactivating the SST and the means for alerting the SST operator are only actuated once the sensor detects the presence of an object for a certain minimum period of time. This will serve to help prevent said means being activated by, for example, the hands and fingers of users, or bags or purses placed on the SST fascia during a transaction.
According to a further aspect of the present invention there is provided an arrangement comprising: a data capture device; means for detecting the presence of an object in proximity to the device; and means for producing an alarm signal on detection of such an object.
In a preferred embodiment, the arrangement is suitable for being entirely enclosed by an SST.
According to a yet further aspect of the invention there is provided a method of detecting fraud at an SST, the method being characterised by the steps of: using a proximity detector to detect an object in the vicinity of a data capture device, and generating an alert signal in response to detecting such an object.
These and other aspects of the invention will be apparent from the following specific description, given by way of example, with reference to the accompanying drawings, in which:
Fig 1 is a schematic diagram of an SST in accordance with an embodiment of the invention; Fig 2 is a schematic diagram of one part of the SST shown in Fig 1; and Figs 3A and 3B are schematic plan and side views respectively of another part of the SST shown in Fig 1.
Referring to Fig 1, there is shown a schematic diagram of a public access SST 10 in the form of an ATM in accordance with an embodiment of the present invention. The ATM 10 has a user interface 12 in the form of a fascia incorporating user interface elements, and seven modules 14 interconnected by a proprietary network 16.
The modules 14 comprise a terminal controller 14a, a display 14b, an encrypting keypad 14c, a card reader 14d, a journal printer 14e, a receipt printer 14f, and a cash dispenser 14g. The modules 14 operate in a master/slave relationship, where the controller 14a is the master that controls the operation of the other modules 14b to 14g. However, each of the other modules 14b to 14g has a processor for operating on received data and for performing the specific functions of that module 14.
Journal printer 14e is internal to the ATM 10 and is used by the owner of the ATM 10 for reconciling transaction data, and by ATM service personnel in the event of a malfunction.
Referring to Fig 2, there is shown a simplified schematic diagram of the card reader module 14d (which is a data capture device) aligned with a card reader slot 20 in the user interface 12. Module 14d is a conventional card reader (such as a Sankyo motorised card reader module) having a throat 22 f or guiding a card towards a card reader head 24 within the module 14d. Module 14d also has an entry/exit slot 26 at the front of the throat 22 for receiving a card into and for ejecting a card from the module 14d.
Slot 26 includes a pair of rollers (not shown) to guide an inserted card onto a transport mechanism 28. Transport mechanism 28 conveys a card between the entry/exit slot 26 and the magnetic card reading head 24. The card reading head 24 and the transport mechanism 28 are both controlled by a controller 30.
A capacitive proximity sensor 40, of the type available from Pepperl and Fuchs, Postfach 31 04 40, D-6800, Mannheim 31, Germany, is located adjacent the user interface 12 (the fascia) so that the sensor 40 can detect foreign objects placed in contact with or in close proximity to the card reader slot 20.
The sensor 40 is controlled by controller 30. If the sensor detects a foreign object for longer than a certain minimum period of time (for example, one minute) then controller 30 generates an alert signal. This alert signal may be relayed to the terminal controller module 14a via output 42. On receiving an alert signal, module 14a may remove the ATM 10 from service and/or may alert a remote host.
Figs 3A and B show a keypad module 14c (which is a data capture device) having a proximity sensor 140 (similar to sensor 40) located beneath the keypad 14c. In this embodiment, the sensor 140 is controlled by the terminal controller module 14a. Sensor 140 is used to alert the controller module 14a to the presence of a foreign object on the keypad 14c; thereby providing the controller module 14a with a warning to the possible presence of a fraudulent overlay keypad. The area detected by sensor 140 is illustrated by ellipse 150.
It will be appreciated that in the embodiments of Fig 2 and Figs 3, the area detected by sensors 4 0, 14 0 is an area liable to attack by an alien device, that is, an area over which an alien device may be placed.
Various modifications may be made to the above described embodiments, within the scope of the present invention. For example, an inductive proximity sensor may be used instead of or in addition to a capacitive proximity sensor. Other suitable types of proximity sensor may include an ultrasonic proximity detector. In other embodiments, the sensor may be used in conjunction with a camera directed towards the user interface (fascia) so that when the sensor detects a foreign object the camera captures an image of that part of the user interf ace in which the object was detected. The captured image may be relayed to a remote control centre for review by security personnel. Using this system enables a single person located in the control centre to monitor a network of ATMs.

Claims (7)

Claims
1. A self-service terminal (10) comprising a user interface (12); and at least one proximity sensor (40) located adjacent the user interface (12), such that the sensor (40) may detect foreign objects placed in contact with or in close proximity to the user interface (12).
2. A proximity sensor according to claim 1, wherein the sensor 40 is located rearwardly of a user interface outer surface.
3. A terminal according to claim 1 or claim 2, wherein the terminal further comprises means for deactivating the SST on detection of a foreign object by the proximity sensor.
4. A terminal according to any preceding claim, wherein the terminal comprises means for alerting a terminal operator on detection of a foreign object by the proximity sensor.
5. A terminal according to claim 4, wherein the means for deactivating the terminal and the means for alerting the terminal operator are only actuated once the sensor detects the presence of an object for a certain minimum period of time.
6. A fraud prevention arrangement for use with a selfservice terminal, the arrangement comprising: a data capture device; means for detecting the presence of an object in proximity to the device; and means for producing an alarm signal on detection of such an object.
7. A method of detecting f raud at an SST, the method being characterised by the steps of: using a proximity detector to detect an object in the vicinity of a data capture device, and generating an alert signal in response to detecting such an object.
GB0012139A 1999-06-29 2000-05-19 Fraud prevention arrangement Expired - Lifetime GB2351590B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
GBGB9915198.7A GB9915198D0 (en) 1999-06-29 1999-06-29 Fraud prevention arrangement

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
US09/589,692 US6390367B1 (en) 1999-06-29 2000-06-08 Fraud prevention arrangement

Publications (3)

Publication Number Publication Date
GB0012139D0 GB0012139D0 (en) 2000-07-12
GB2351590A true GB2351590A (en) 2001-01-03
GB2351590B GB2351590B (en) 2001-05-30

Family

ID=10856283

Family Applications (2)

Application Number Title Priority Date Filing Date
GBGB9915198.7A Ceased GB9915198D0 (en) 1999-06-29 1999-06-29 Fraud prevention arrangement
GB0012139A Expired - Lifetime GB2351590B (en) 1999-06-29 2000-05-19 Fraud prevention arrangement

Family Applications Before (1)

Application Number Title Priority Date Filing Date
GBGB9915198.7A Ceased GB9915198D0 (en) 1999-06-29 1999-06-29 Fraud prevention arrangement

Country Status (1)

Country Link
GB (2) GB9915198D0 (en)

Cited By (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP1577856A1 (en) 2004-03-18 2005-09-21 Ncr International Inc. A self-service terminal
WO2006001781A1 (en) * 2004-06-24 2006-01-05 Kronik Elektrik Elektronik Ve Bilgisayar Sistemleri Sanayi Ticaret Limited Sirketi Apparatus for prevention of reading of magnetic cards
WO2006007810A1 (en) * 2004-07-21 2006-01-26 Wincor Nixdorf International Gmbh Self service device with manipulation recognition
EP1677267A1 (en) * 2004-12-30 2006-07-05 Firpo Polledo, Luis Juan Electronic security device for automated teller machines and card reader driver including such device
GB2422705A (en) * 2005-01-28 2006-08-02 Ncr Int Inc An ATM with sensors to detect the addition of a fraud device
US7469825B2 (en) 2004-06-30 2008-12-30 Ncr Corporation Self-service terminal
EP2393070A1 (en) 2010-06-02 2011-12-07 3M Innovative Properties Company Security system for data receiving unit
NL2005529C2 (en) * 2010-10-15 2012-04-17 Angelique Jacoba Floriberta Nooijen DEVICE FOR SECURING A CARD READER.
US20150278818A1 (en) * 2014-03-31 2015-10-01 Ncr Corporation Fraud Detection in Self-Service Terminal

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4245902A (en) * 1978-10-18 1981-01-20 Cataldo Joseph W Bank deposit identification device
US4420751A (en) * 1981-10-29 1983-12-13 Ncr Corporation Detection method and apparatus for a user device or automatic teller bank machine
US4514623A (en) * 1983-01-10 1985-04-30 American Magnetics Corporation Automatic teller machine with entrance adapted to prevent access by foreign objects
US4942464A (en) * 1988-03-09 1990-07-17 Erhard Milatz Surveillance device for the protection of an automatic delivery apparatus
EP0790590A1 (en) * 1996-02-12 1997-08-20 Siemens Nixdorf Informationssysteme AG Infrared security system

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4245902A (en) * 1978-10-18 1981-01-20 Cataldo Joseph W Bank deposit identification device
US4420751A (en) * 1981-10-29 1983-12-13 Ncr Corporation Detection method and apparatus for a user device or automatic teller bank machine
US4514623A (en) * 1983-01-10 1985-04-30 American Magnetics Corporation Automatic teller machine with entrance adapted to prevent access by foreign objects
US4942464A (en) * 1988-03-09 1990-07-17 Erhard Milatz Surveillance device for the protection of an automatic delivery apparatus
EP0790590A1 (en) * 1996-02-12 1997-08-20 Siemens Nixdorf Informationssysteme AG Infrared security system

Cited By (19)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP1577856A1 (en) 2004-03-18 2005-09-21 Ncr International Inc. A self-service terminal
EP1577856B1 (en) * 2004-03-18 2012-10-03 NCR International, Inc. A self-service terminal
WO2006001781A1 (en) * 2004-06-24 2006-01-05 Kronik Elektrik Elektronik Ve Bilgisayar Sistemleri Sanayi Ticaret Limited Sirketi Apparatus for prevention of reading of magnetic cards
TR200401513A1 (en) * 2004-06-24 2006-01-23 Kroni̇k Elektroni̇k Elektroni̇k Ve Bi̇lgi̇sayar Si̇stemleri̇ Sanayi̇ Ti̇caret Li̇mi̇ted Şi̇rketi̇ Magnetic card reading device.
US9033222B2 (en) 2004-06-24 2015-05-19 Kronik Elektrik Elektronik Ve Bilgisayar Sistemleri Sanayi Ticaret Limited Sirketi Apparatus for prevention of reading of magnetic cards
US8517268B2 (en) 2004-06-24 2013-08-27 Kronik Elektrik Elektronik Ve Bilgisayar Sistemleri Sanayi Ticaret Sirketi Apparatus for prevention of reading of magnetic cards
AU2010100714B4 (en) * 2004-06-24 2010-10-07 Kronik Elektrik Elektronik Ve Bilgisayar Sistemleri Sanayi Ticaret Limited Sirketi Apparatus for prevention of reading of magnetic cards
AU2010100712B4 (en) * 2004-06-24 2010-10-07 Kronik Elektrik Elektronik Ve Bilgisayar Sistemleri Sanayi Ticaret Limited Sirketi Apparatus for prevention of reading of magnetic cards
US7469825B2 (en) 2004-06-30 2008-12-30 Ncr Corporation Self-service terminal
DE102004035224B4 (en) * 2004-07-21 2006-11-23 Wincor Nixdorf International Gmbh Self-service device with tamper detection
DE102004035224A1 (en) * 2004-07-21 2006-02-16 Wincor Nixdorf International Gmbh Self-service device with tamper detection
WO2006007810A1 (en) * 2004-07-21 2006-01-26 Wincor Nixdorf International Gmbh Self service device with manipulation recognition
EP1677267A1 (en) * 2004-12-30 2006-07-05 Firpo Polledo, Luis Juan Electronic security device for automated teller machines and card reader driver including such device
GB2422705A (en) * 2005-01-28 2006-08-02 Ncr Int Inc An ATM with sensors to detect the addition of a fraud device
EP2393070A1 (en) 2010-06-02 2011-12-07 3M Innovative Properties Company Security system for data receiving unit
NL2005529C2 (en) * 2010-10-15 2012-04-17 Angelique Jacoba Floriberta Nooijen DEVICE FOR SECURING A CARD READER.
US20150278818A1 (en) * 2014-03-31 2015-10-01 Ncr Corporation Fraud Detection in Self-Service Terminal
US10515367B2 (en) * 2014-03-31 2019-12-24 Ncr Corporation Fraud detection in self-service terminal
US11308499B2 (en) 2014-03-31 2022-04-19 Ncr Corporation Fraud detection in self-service terminal

Also Published As

Publication number Publication date
GB2351590B (en) 2001-05-30
GB9915198D0 (en) 1999-09-01
GB0012139D0 (en) 2000-07-12

Similar Documents

Publication Publication Date Title
US6390367B1 (en) Fraud prevention arrangement
EP1043704B1 (en) Self service terminal
US8959029B2 (en) System, apparatus, and methods for currency processing control and redemption
US8162207B2 (en) Currency dispense and control system with anti-theft features
US6422475B1 (en) Self-service terminal
US7469825B2 (en) Self-service terminal
GB2351585A (en) Fraud protection for a self-service terminal
US20070138256A1 (en) Enhanced accessibility of self-service terminals
GB2422705A (en) An ATM with sensors to detect the addition of a fraud device
GB2351590A (en) Fraud protection for a self-service terminal
GB2351587A (en) Fraud protection for a self-service terminal
JP5877760B2 (en) Crime prevention system and crime prevention method
WO2008057057A1 (en) A state control sensor activating and/or deactivating an anti-fraud device and a magnetic card reader/writer for an sst or an atm
JP2012027641A (en) Unit and program for controlling display image, and automated teller machine
WO2012063577A1 (en) Automatic transaction device
JP5359419B2 (en) Automatic transaction equipment
JP2004094482A (en) Recording medium recording device and transaction device
JP2005346174A (en) Automatic transaction device
KR20050020729A (en) The ATM and the Method for Preventing Disturbing CCTV in Photographing and an Illegal Withdrawal
KR940022351A (en) Automatic payment and deposit and withdrawal of cash and check
EP0788083A1 (en) Personal security system for use with a self-service terminal
JP5433241B2 (en) Automatic transaction equipment
JP2007087316A (en) Automatic transaction device and automatic transaction system
CN107862813A (en) A kind of ATM
JP2007328575A (en) Transaction processor

Legal Events

Date Code Title Description
746 Register noted 'licences of right' (sect. 46/1977)

Effective date: 20090416

PE20 Patent expired after termination of 20 years

Expiry date: 20200518