GB2430298A

GB2430298A - A concealed data entry device

Info

Publication number: GB2430298A
Application number: GB0513753A
Authority: GB
Inventors: Gordon Birtwistle; Paul Clancy
Original assignee: Individual
Current assignee: Individual
Priority date: 2005-04-20
Filing date: 2005-07-05
Publication date: 2007-03-21
Also published as: CN101160606A; GB0513753D0; GB0507942D0

Abstract

A concealed data entry device for an ATM comprises a hand rest and a keypad 1407 positioned under the hand rest (Fig. 10A) or on a pivoted support which can be angled away from the user (Fig. 11) or in a recess and/or facing away from the user of the ATM. A camera 1408 may transmit an image of the keypad to a viewer 1409 to aid data entry. A concealed data entry keypad provided on the rear surface of a door handle for operation of a mechanical or electronic lock (Figs 3 to 6) is also described. The keys may have different surface textures, shapes or groupings to aid identification; they may also have Braille markings. Instead of a keypad on a door handle the operation of the lock may be controlled by a series of different movements of the handle (Fig. 9).

Description

CONCEALED DATA ENTRY DEVICE

Field of the Invention

The present invention relates to concealed data entry devices, including data entry devices for automatic teller machines and data entry devices for locking and unlocking closure members such as doors and windows.

Background to the Invention

Locks are used for securing closure members, such as doors and windows.

io Locks have a mechanism by which they can be in a locked or an open position, as selected by a user. Traditional locks use a key to cooperate with the locking mechanism to operate the lock, and for example move a bolt between a locked and an open position. In addition to locks operated by keys, there are also "keyless locks". These have the advantage of not requiring a key to open the lock, for example, if a door to a building should remain locked to all except the personnel who work in the building, then the personnel can be given the means to open the lock. These means could be a swipe card, a combination code and so on.

There are many different types of keyless lock on the market. These include mechanical digital locks, wherein a user has to input a code to open the lock. These use mechanical actuator means to release the bolt. Electric digital locks can also be used wherein a user has to enter a code in order to open the lock. These can be powered either by batteries or by mains power. Magnetic stripes can be used, wherein a user is issued with a card having a magnetic strip with coded information on the magnetic strip. By swiping the card through the magnetic stripe lock, the magnetic stripe lock reads whether the code is correct and opens the lock if the code is correct. Proximity locks are also available, which can work by sensing a signal from a device carried by the user. Hand readers and retinal readers are also used, wherein the signature hand print or retinal print of a user is stored in the lock, and in order for a user to open the lock its hand prints or retinal prints must match the hand print or retinal print stored in the lock.

Referring to Figure 1 herein, there is illustrated schematically a first type of prior art digital lock. This could be a mechanical digital lock or an electric digital lock. The digital lock 101 comprises a base plate 102, a handle 103, a keypad 104 and an indicator 105. The prior art digital lock is affixed to a door, and operatively connected to a bolt. By entering the correct combination in the data entry device, in this instance a keypad 104, a user can move the bolt from a locked to an open position, thereby allowing a user to open the door. When the user has entered the correct combination in the keypad 104, an indicator light is activate to show the user that the door is now unlocked and may be opened.

In another embodiment, the handle 103 is operatively connected to a sprung latch (not shown). When the door is in a locked position, the handle 103 will not turn, and therefore will not release the latch to allow the user to open the door. When the correct combination is entered into the keypad 104, then the handle 103 is released, allowing itto turn and thereby allowing the sprung latch to open and allowing the user to open the door.

In a further embodiment, the door is held shut, and so effectively locked, by an electromagnet. By entering the correct combination in the keypad 104, power is cut to the electromagnet for a predetermined period of time, thereby allowing a user to open the door.

Other types of locking mechanism are known that can be re!eased by entering the correct combination in a keypad 104.

Digital keypads may be affixed to the door as shown in Figure 1, or may be fixed on a wall adjacent to the door. Referring to Figure 2 herein, there is illustrated schematically a second type of prior art digital lock. The door 201 comprises a handle 202 that must be turned by a user to release the latch (not shown), thereby allowing the user to open the door. In addition to the latch, there is a bolt (not shown) that maintains the door in a locked position. To release the bolt, the user must enter the correct combination in a keypad 203 dispose on a wall 204 adjacent to the door. The system operates in a similar manner to that described for Figure 1.

Problems with existing mechanical and electric digital locks include the following: The data entry device, or keypad 104, is in open view, and so when an authorized person enters the code to open the door, anyone who is not authorized to open the door can easily see the correct code being entered into the 104, and will then be able to open the lock themselves. This is a security is problem.

Another problem with existing mechanical or electric digital locks is that they require either sequential or two-handed operation. For sequential operation, the code is entered into the keypad 104 to unlock the door. When the correct combination is entered the indicator 105 indicates that the door is unlocked. The user then turns the handle 103 to open the door. For two-handed operation, the user must use one hand to enter the combination into the keypad 104 and the other hand to turn the handle 103. Two-handed operation is inconvenient if the user is carrying an object when he/she wishes to open the door.

A further problem with prior art mechanical or electric digital locks is that they do not necessarily allow easy access to a door by people with certain disabilities, for example, people with visual impairment. Where the keypad 104 is not located adjacent to the handle 103, but is located on a wall 204 adjacent to the door 201, it can be difficult for a visually impaired person to find the keypad to enter the correct combination. Furthermore, not all keypads 104 comprise tactile indicators on the keys, and so the visually impaired person cannot be sure that they are entering the correct combination.

Other fields where the problem of a data entry device being seen by a third party include keypads on data entry devices, for example automatic teller machines (ATMs). The keypad is in plain view and a third party can see confidential information being entered into the keypad, such as a personal identification number (PIN). Prior art solutions include retrofitting a cover over an existing keypad, although these can be easily removed. It is therefore desirable to find some way in which to restrict the view of a data entry keypads to reduce the risk of confidential information being seen by a third party.

Summary of the Invention

The inventor has realised the problems associated with security of data entry devices for, for example, opening a door having a keyless lock or accessing an ATM. Such data entry devices are generally in view of third parties and can be easily seen. The inventor has accordingly devised an ATM that restricts the view of a data entry device, thereby increasing the security of a user's confidential details, and a lock for a closure member in which the data entry device to open the closure member is concealed by disposing it on the handle for the closure member. In one embodiment, the means to operate the locking mechanism are disposed on a surface of the handle in a concealed location, thereby preventing third parties from seeing how to operate the locking mechanism. In another embodiment the means to operate the locking mechanism comprises means to respond to a plurality of movements of the handle. In a further embodiment, the inventor has devised According to a first aspect, there is provided a data entry device for an automatic teller machine, the automatic teller machine comprising: a screen configured to display information; a card entry port; a hand rest; and the data entry device comprising a key pad, the key pad comprising a plurality of keys, said keys being configured to allow a user to enter data; characterized in that said data entry device is disposed at said hand rest and substantially facing said screen, or disposed substantially at a lower surface of said hand rest, thereby restricting a view of said data entry device.

Preferably, the hand rest comprises a bar.

Preferably, the automatic teller machine further comprises a reflective is surface, the reflective surface configured to allow a user to see the keypad.

Alternatively, the automatic teller machine further comprises: a camera, the camera being configured to capture an image of the data entry device; a viewing port, the viewing port being operatively connected to the camera, and configured to display the captured image; wherein a view of the captured image is apparent to a single user.

Alternatively, the data entry device is mounted at a pivoting drum, the data entry device configured to move between a visible position and a concealed position substantially facing the screen.

Preferably, the automatic teller machine further comprises at least one projecting stud disposed in proximity to the card entry port, the stud configured to restrict a fitting of a dummy cover.

Preferably, the stud comprises a trapezoidal cross section.

Preferably, an upper surface of the stud is disposed substantially above the card entry port.

According to a second aspect there is provided a handle for a closure member, the closure member comprising a locking mechanism, the handle comprising: means for operating the locking; characterized in that the means for operating the locking mechanism is disposed on a surface of the handle, the surface of the handle substantially facing the closure member.

Preferably, the means for operating the locking mechanism comprises a plurality of elements, the elements configured to co-operate in combination to operate the locking mechanism.

Preferably, the elements are selected from a set including the following: buttons; sliders; dials; switches; direction dials.

Preferably, the elements are configured to be operated sequentially.

Alternatively, the elements are configured to be operated simultaneously.

Preferably, the handle further comprises a projecting lug configured to partially cover the means for operating the locking mechanism.

Preferably, the means for operating the locking mechanism comprises tactile indicators, the tactile indicators configured to impart information about the means for operating the locking mechanism.

Preferably, the tactile indicators are chosen from a set of the following: raised profile; surface finish; raised Braille profile.

Preferably, the locking mechanism comprises a bolt configured to selectively lock the closure member in a closed position.

Alternatively, the locking mechanism comprises means to selectively restrict operation of the ha ndle Preferably, the means for operating the locking mechanism comprises at least one mechanical actuator.

Alternatively, the locking mechanism comprises at least one electronic actuator.

Preferably, the handle for a closure further comprises a secondary device configured to restrict operation of the locking mechanism unless the secondary device is actuated, the secondary device being selected from: * a button * atouchpad * a swipe card reader * fob tag or key reader * identification technology * logistics * a proximity device such as a radio transmitter.

According to a third aspect, there is provided a handle for a closure member, the closure member comprising a locking mechanism, comprising: means for operating the locking mechanism comprises means to respond to a plurality of movements of the handle; wherein the locking mechanism is configured to be operated in response to the plurality of movements of the handle corresponding with a predetermined plurality of movements of the handle.

Preferably, the predetermined movements are selected from: rotation of the handle about an axis substantially perpendicular to a main plane of the closure member; rotation of the handle about an axis substantially parallel to a main plane of the closure member; movement of the handle in a direction substantially perpendicular to a main plane of the closure member.

Preferably, the means for operating the locking mechanism comprises at least one mechanical actuator.

Alternatively, the means for operating the locking mechanism comprises at is least one electronic actuator.

According to a fourth aspect there is provided a handle for a closure member comprising a combination lock, the combination lock being disposed at a surface of the handle substantially facing the closure member, and the combination lock configured to selectively operate a locking mechanism for the closure member.

Preferably, the combination lock comprises a plurality of elements, the elements selected from the following: buttons; sliders; switches; dials; direction dials.

Preferably, the locking mechanism comprises a bolt.

Alternatively, the locking mechanism comprises means to selectively restrict operation of the handle.

According to a fifth aspect, there is provided a door comprising: a locking mechanism; a handle; means for operating the locking mechanism; characterized in that the means for operating the locking mechanism is disposed at a surface of the handle, the surface of the handle substantially facing the door.

Preferably, the elements are configured to be operated sequentially.

Alternatively, the elements are configured to be operated simultaneously.

Alternatively, the means for operating the locking mechanism comprises means to respond to a plurality of movements of the handle; wherein the locking mechanism is configured to be operated in response to the plurality of movements of the handle corresponding with a predetermined plurality of movements of the handle.

Brief Description of the Drawings

For a better understanding of the invention and to show how the same may be carried into effect, there will now be described by way of example only, specific embodiments, methods and processes according to the present invention with reference to the accompanying drawings in which: Figure 1 illustrates schematically a first type of prior art digital lock.

Figure 2 illustrates schematically a second type of prior art digital lock.

Figure 3 illustrates schematically a perspective view of a handle and back plate according to a first specific embodiment.

Figure 4 illustrates schematically a rear elevation view of a handle and back plate according to a first specific embodiment.

Figure 5 illustrates schematically a plan view of a cross section through a door showing two handles and a locking bolt according to the first specific embodiment.

Figure 6 illustrates schematically a perspective view of a door showing two handles and a locking bolt according to the first specific embodiment.

Figure 7 illustrates schematically examples of elements for entering a code.

Figure 8 illustrates schematically examples of tactile indicators for elements for entering a code.

Figure 9 illustrates schematically examples of handle movements.

Figure 10 illustrates schematically an automatic teller machine (ATM).

Figure 11 illustrates schematically a cross-section view of an ATM having a pivotally mounted keypad.

Figure 12 illustrates schematically a cross-section view of an ATM having studs fitted to a surface of the ATM.

Figure 13 illustrates schematically an ATM comprising a trough with a keypad disposed in the trough.

Figure 14 illustrates schematically an ATM having a viewing port.

Detailed Description

There will now be described by way of example a specific mode contemplated by the inventors. In the following description numerous specific details are set forth in order to provide a thorough understanding. It will be apparent however, to one skilled in the art, that the present invention may be practiced without limitation to these specific details. In other instances, well- known methods and structures have not been described in detail so as not to

unnecessarily obscure the description.

Throughout this description, reference will be made to a door for the sake of clarity. However, the invention can be applied equally to other closure members, for example, exterior or interior doors, car doors, garage doors, windows, safe doors and so on.

Furthermore, reference is made throughout the description to a handle.

This applies to handles including lever handles, which actuate a latch when turned, knobs, pull handles (such as those found on car doors or filing cabinets).

Furthermore, reference is made throughout to a locking mechanism. A locking mechanism is distinct from a latch, in that a latch is configured to hold a door in a closed position, but to be released simply by turning a handle or oerfnrmino simiIr oneration A lockino mer.hnism on the other hand is

- - - -I -- - - - - - - -

mechanism that is configured to lock a door in a closed position, and requires a separate operation to operate and unlock. A locking mechanism can include, but is not limited to, a separate bolt from the latch, or means to restrict movement of the latch.

Referring to Figure 3 herein, there is illustrated schematically a perspective view of a handle and back plate according to a first specific embodiment.

Referring to Figure 4 herein, there is illustrated schematically a rear elevation view of a handle and back plate according to the first specific embodiment. The back plate 102 is configured in use to be affixed to a door. A handle 301 is provided. The handle 301 shown is a lever-type of handle. The handle 301 is operatively connected to a latch (not shown) in the door. The latch co-operates with an orifice in a doorframe such that when the latch is extended the door remains closed, and when the latch is retracted the door can be opened. When the handle 301 is in a first position, the latch is in its extended position. When a user wishes to open the door, he rotates the handle 301 such that the latch retracts and allows the door to be opened.

The handle 301 further comprises means 302, 303, 304 for operating a locking mechanism. The locking mechanism (not shown in Figure 1) allows a user to selectively lock or unlock a door. Typically the locking mechanism comprises a prior art locking mechanism such as a bolt that extends from the leading edge of the door into an orifice in the frame, an electromagnet disposed to hold the door to the frame when current is passed through the electromagnet, or means to immobilize the handle 301 such that it cannot be turned to retract the latch.

The means 302, 303, 304 for operating a locking mechanism in the first embodiments comprises a first set 302 of three elements, a second set 303 of three elements and a third set 304 of three elements. The elements in this embodiment are buttons.

The buttons 302, 303, 304 are disposed on a surface of the handle 301 that faces the door. This is for two reasons; the first is that it allows simple one- handed operation of the buttons. When a user grasps the handle 301, his fingers are placed over the buttons 302, 303, 304 in a position to press the buttons 302, 303, 304. In this way, a user can enter a code using the buttons 302, 303, 304 to unlock the door, and then turn the handle 301 to open the door without moving his hand. The second reason for disposing the buttons 302, 303, 304 on a surface of the handle that faces the door is security. If the user's hand is grasping the handle whilst entering the code, it is much more difficult for a third party to see the code that is entered, and therefore makes it less likely that unauthorized persons will be able to ascertain the code. This is because the third party's view of the buttons 302, 303, 304 is restricted as the code is being entered.

The buttons 302, 303, 304 are configured to operate the locking mechanism to unlock the door only if a predetermined code is entered using the buttons 302, 303, 304. In this way unauthorized persons cannot unlock the door, as they will not know the code required.

The correct code may be entered by pressing preselected buttons in the correct sequence. For example, the code to operate the locking mechanism may be pressing the second button from the first set of buttons 301 followed by the third button from the third set of buttons 304 followed by the second button from the second set of buttons 303. This type of sequential operation gives many different permutations to give many different codes that may be correct (729 possible codes in the example shown).

Alternatively, the correct code may be entered by simultaneously holding down the required buttons, although this gives fewer permutations of code.

The elements 302, 303, 304 disposed on the handle 301 effectively perform the same function as a keypad 104 that is disposed in proximity to the handle in

prior art keyless locks.

The locking mechanism is operated by the elements 302, 303, 304 by either mechanical means, electrical means or a combination of electrical and mechanical means. For example, depressing the elements 302, 303, 304 in the correct code may mechanically actuate a bolt to retract thereby unlocking the door. Alternatively, the elements 302, 303, 304 may form electrical contacts with a circuit such that entering the correct code on the buttons activates an electric actuator that unlocks the door. A combination of electric and mechanical means can be used to actuate the locking mechanism.

Where electrical means are used to actuate the locking mechanism, power is provided from a battery or from a mains power source. Where power is provided by a mains power source, it is desirable to have a backup battery in place to ensure that the electrical means to actuate the locking mechanism can still be used in the event of a power cut. A backup battery may be rechargeable to ensure that it remains charged as long as a mains power source is active.

Referring to Figure 5 herein, there is illustrated schematically a plan view of a cross section through a door showing two handles and a locking bolt according to the first specific embodiment. Referring to Figure 6 herein, there is illustrated schematically a perspective view of a door showing two handles and a locking bolt according to the first specific embodiment. The door 501 has an outer face on which the back plate 102 and the handle 301 is disposed. It is the outer face that has restricted entry. A user cannot open the door from the side of the outer face without knowing the code to enter in the elements 302, 303, 304. The door 501 also has an inner face on which a second back plate 502 is disposed, and a second handle 503 is disposed extending from the second back plate 502.

The second handle 503 does not comprise elements by which a user enters a code to operate the locking mechanism, as if the user is on the inner face side of the door 501 then they should already be authorized to be able to operate the locking mechanism.

A locking button (not shown) may be provided on the second handle 503.

When the locking button is depressed, then the elements 302, 303, 304 on the handle 301 are active so that the door can only be opened by a user who knows the code to operate the locking mechanism. When the locking button is released then the elements 302, 303, 304 are not active such that the door remains unlocked and can be opened by anyone from the outer face or the inner face side of the door without necessarily knowing the code to activate the locking mechanism.

A locking button is not necessary, but if one is required then an alternative to a locking button is raise the second handle 503 to deactivate the elements 302, 303, 304. Other methods of deactivating the elements may also be used.

In this embodiment a bolt 504 is shown that comprises part of the locking mechanism. The bolt is shown extended such that it would co-operate with a bolt orifice in a doorframe to lock the door. When the locking mechanism is operated then the bolt 504 is retracted to unlock the door.

A latch 601 is also shown. The latch is biased towards an extended position such that it co-operates with a latch orifice in the doorirame to keep the door shut. By lowering either handle 301, 503, the latch is retracted allowing the door to open.

In the embodiment shown, the latch is not part of the locking mechanism.

However, in an alternative embodiment a bolt 504 is not provided, but the means to operate the locking mechanism comprises means to selectively restrict operation of the handle 301. That is to say, if the correct code is not entered into the elements 302, 303, 304 then the handle 301 cannot be lowered and so the latch cannot be retracted, thereby effectively maintaining the door in a locked position.

To reduce the risk of unauthorized entry, the back plate 102 cannot be removed from the door 501 from the outer face of the door, as no attaching screws are used. The back plate 102 is secured to the door 501 by bolts from the second back plate 502. In this way, access to the locking mechanism can only be obtained by removing the second back plate 502 from the inner face of the door 501. Access to the locking mechanism is required for maintenance or repair of the locking mechanism, or for changing or resetting the code required to operate the locking mechanism.

In some circumstances a person who knows the correct code to operate the locking mechanism may inadvertently enter the wrong code. To this end, a rest mechanism is provided that clears the previous code entered and allows the user to re-enter the correct code.

Several different types of reset mechanism may be used. These include a separate rest button, a facility that allows the handle 301 to be pulled away from the door 501 and then returned to its usual position, or lifting the handle 301 upwards.

In alternative embodiments, different types of elements may be used for entering the code. Referring to Figure 7 herein, there is illustrated schematically examples of elements for entering a code.

Figure 7A shows 6 buttons 701, giving 216 permutations for a three-digit code or 1296 permutations for a four-digit code. The buttons are grouped into three groups of two to allow a user to easily identify the correct buttons are in the correct position. Alternatively, the groupings may add a further layer of complexity to the permutations of code. The correct buttons must be pressed in the correct sequence in order to operate the locking mechanism.

Figure 7B shows twelve buttons 702, giving 1728 permutations for a threedigit code or 20,736 permutations for a four-digit code. The buttons are grouped into four groups of three to allow a user to easily identify the correct buttons are in the correct position. Alternatively, the groupings may add a further layer of complexity to the permutations of code. The correct buttons must be pressed in the correct sequence in order to operate the locking mechanism.

Figure 7C shows a dial type 703 of combination that is commonly seen on combination locks for padlocks or briefcases. The correct code must be entered on the dials. Each dial must therefore be in the correct position to operate the locking mechanism. Where four dials having ten positions are used, as shown in Figure 7C, there are 10,000 permutations of code that may be used.

Figure 7D shows a switch-type of element. A required number of switch type elements can be used. In the example shown in Figure 7D, each switch hasthree positions; a first position 704, a second position 705 and a third position 706. Each switch must be in the correct position in order to operate the locking mechanism. Where four such switches are used there are 81 different permutations of code.

Figure 7E shows a series of direction dial type of element. Direction dials allow a user to rotate each dial 707, 708, 709 to required positions, and the locking mechanism is only operated when each direction dial is in the correct position. In the example shown in Figure 7E, three direction dials are provided each having eight possible positions, giving a total of 512 permutations of code.

Figure 7E shows a series of slider type of element. Each slider in this example has seven discrete positions. Each slider must be in the correct position to operate the locking mechanism. Where three such sliders are provided there are 343 different permutations of code.

It will be apparent that other types of element may be used, and that combüiations of different types of element may be used.

A disadvantage of this type of system is that it requires a user to be able to see the code that has been entered. This is a disadvantage because where the elements are disposed on a surface of the handle 301 facing the door, it is difficult for a user to see which elements are in which position. Additionally, where a visually impaired person requires access they will not be able to easily distinguish the elements.

Referring to Figure 8 herein, there is illustrated schematically examples of tactile indicators for elements for entering a code. The elements shown comprise buttons, although it will be apparent that tactile indicators can be equally used on other types of elements.

Figure 8A illustrates a plurality of buttons having different surface finishes.

Different surface finishes include knurling 801, stripes 802, dimples 803 or a smooth finish 804. Other types of surface finish may also be used. The surface finish allows a user to distinguish between different elements using touch alone.

In this way, a user could think of the code to operate the locking mechanism as, for example, "smooth, knurled, striped, knurled".

Figure 8B illustrates a plurality of buttons having different raised profiles.

Raised profiles may include easily distinguishable shapes such as a diamond 805, a square 806, or a circle 807. Again, the raised profile allows a user to distinguish different buttons by the way they feel.

Figure 8C illustrates a plurality of buttons having different raised Braille profiles. This is of particular relevance to visually impaired users. The raised Braille profile allows buttons to be distinguished by letters or numbers using touch. In the example shown in Figure 8C, the buttons have Braille symbols for A 808,B809,C8lOandD8ll.

Where the elements are disposed on the handle, it is advantageous to provide a projecting hood disposed over the elements to partially shield them from atmospheric conditions. This is particularly advantageous where the handle is disposed on a surface of a door on the outside of a building, as the projecting hood can partially shield the elements from the effects of rain and other weather conditions.

In a further embodiment, the means for operating the locking mechanism comprises means to respond to a plurality of movements of the handle.

Referring to Figure 9 herein, there are illustrated schematically examples of handle movements.

Instead of having elements such as buttons disposed on a surface of the handle, a code can be entered directly using the handle itself, and the locking mechanism can be operated if the entered code corresponds with a predetermined code. The code is entered by moving the handle.

Figure 9A shows rotation of the handle about an axis substantially perpendicular to a main plane of the door. The door 901 comprises a main plane 902 of the face of the door 901. The handle 903 can be moved 904 by rotating it about an axis substantially perpendicular to the main plane 902 of the door 901.

The locking mechanism is configured to be operated in response to movements of the. Each rotation may be by a discrete amount. Indications such as audio clicks can notify the user how many discrete amounts the handle has been rotated. For example, by turning the handle upwards for two clicks, down for three clicks, upwards again for one click and down for a further two clicks, the locking mechanism can be operated. The precise code required to operate the locking mechanism is predetermined, and the code entered by the user in the form of handle movements must correspond with the predetermined movements required to operate the locking mechanism.

Other types of handle movement are illustrated in Figures 9B and 9C.

However, these types of movement may also be used to operate the locking mechanism.

Figure 9B illustrates rotation 906 of the handle 905 about an axis substantially parallel to the main plane 902 of the door 901. This type of movement is similar to a method of changing gears on a bicycle using the handlebars. The user grasps the handle and rotates it either clockwise or anti- clockwise in a predetermined code.

Figure 9C illustrates linear movement 908 of the handle 907 in a direction substantially perpendicular to the main plane 902 of the door 901. By pulling or pushing the handle relative to the door, a code may be entered.

The locking mechanism described with reference to Figures 9A, 9B and 90 may be operated mechanically where, for example, entering the code using the handle 903 allows tumblers to fall into place thereby releasing the locking mechanism.

Alternatively, the locking mechanism may be operated electrically where, for example, the code entered using the handle is analyzed digitally and the locking mechanism is operated using an electrical actuator if the code entered corresponds with the correct code for operating the locking mechanism.

Where the means for operating the locking mechanism comprises means to respond to a plurality of movements of the handle, different styles of handle may be used. A lever type of handle is particularly suitable where the handle 905 is rotated 906 about an axis substantially parallel to the main plane 902 of the door 901. Lever or knob types of handle are particularly suitable where the handle 903 is rotated 904 about an axis substantially parallel to the main plane 902 of the door 901, or where the handle 907 is moved in a direction substantially perpendicular to the main plane 902 of the door 901.

According to a further specific embodiment, a further operation is required to operate the locking mechanism. This further operation includes, but is not limited to, any of the following: operating a button * operating a touch pad * useofaswipecard s * useofafobtagorkey * use of identification technology, such as fingerprint recognition technology * use of logistics * automatic operation in response to a proximity device such as a radio transmitter If a user performs the further operation without having first entered a predetermined code, then the locking mechanism will not be operated. This type of locking mechanism may be used on, for example, a car door in which a combination of entering the correct code and having the correct key fob will open the door.

In a further specific embodiment, each user has a personal code unique to that user. By entering their code, the locking mechanism may or may not be operated depending on whether that user is permitted to operate that locking mechanism. Thus a first user may have their own personal identification number (PIN), and a second user may also have their own personal PIN, which is different to the first user's PIN. If the first user has clearance to access a door, but the second user does not have clearance to access that door, then the first user's PIN will operate the locking mechanism, but the second user's PIN will not operate the locking mechanism.

A further specific embodiment that utilizes concealed locking elements is in automated teller machines (ATMs) and similar devices that require data to be entered via a keypad. Other such devices include, but are not limited to, point of sale PIN entry devices.

AIMs require a user to enter a code such as a personal identification number (PIN) and to enter instructions. The PIN and instructions are entered through a keypad on the ATM, which for prior art ATMs is in view of third parties other than the user of the ATM. The user therefore risks a third party being able to find their details such as a PIN number or the amount of money being deposited or withdrawn.

Referring to Figure IOA herein, there is illustrated schematically a cross- section view of an ATM according to this specific embodiment. The ATM 1001 comprises a screen 1002 to provide the user with information, a hand rest 1003 on which a user can rest his or her hand, and a plurality of keys 1004. The keys 1004 are disposed on a lower surface 1005 that is situated below the hand rest 1003.

Referring to Figure lOB herein, there is illustrated schematically a view of the ATM from the perspective of a user. The only parts of the ATM that are visible are the hand rest 1003 and the screen 1002. In use, the user places his/her hand on the hand rest 1003. The user's fingers are positioned such that they curl over the edge 1006 of the hand rest and come into contact with the keys 1004. The keys are disposed in a row along the lower surface 1005. The keys 1004 may comprise tactile indicators as described above. The screen 1002 displays a key map 1007 that shows the user the relative position of the keys 1004 on the lower surface 1005 to assist the user in quickly identifying the correct keys.

The keys 1004 can be used for any type of data input. Examples of the type of operations that can have keys 1004 assigned to them include, but are not limited to, the following: * Numerical data input for, for example, entering a PIN or a value * Cancelling a transaction * Confirming a transaction By disposing the keys below a hand rest, a third party cannot see which keys are being pressed. In this way, a user's PIN can remain confidential as it is entered through the keys 1004. Other aspects of a transaction, such as entering a value of money, cancelling a transaction, confirming a transaction and so on are also entered using the concealed keys 1004.

An ATM using these keys 1004 can be made to be triple data encryption standard (TDES) compliant, an industry standard algorithm for encrypting PINs, and for VISA ATMs should be compliant with VISA security requirements.

In an alternative specific embodiment, the keys 1004 are disposed substantially at a surface of a bar and facing substantially towards the screen 1002 to prevent a third party from seeing which keys are being pressed. The bar may be disposed at any suitable angle. Suitable angles include the disposition of a bar such that its longitudinal axis is substantially horizontal or such that its longitudinal axis is substantially vertical. The bar need not necessarily be linear along its full length but can be shaped and angled to provide a comfortable grasp for the user that allows the user to intuitively identify the key required.

In a further specific embodiment, the ATM includes disabled function keys to ensure compliance with both the Americans with Disability Act and the UK Disability Discrimination Act. Disabled function keys can include keys having, for example, Braille profiles to assist a visually impaired user. Disabled function keys can be included as part of a secondary keypad, the ATM further comprises means to alert the ATM if a disabled or visually impaired person is using the machine, thereby enabling the disabled function keys.

In a further specific embodiment, a numeric keypad is pivotally mounted on a surface of an ATM. Referring to Figure 11 herein, there is illustrated schematically a cross-section view of an ATM having a pivotally mounted keypad.

The ATM 1100 comprises a hand rest 1101 and a data entry device in the form of a keypad 1102. The keypad 1102 comprises a plurality of keys 1103 and is disposed at the hand rest 1101. The keypad 1102 is mounted on a pivotally moveable drum 1104. The drum can pivot 1105 such that the keypad can be angled substantially towards a user or substantially towards a screen 1106, and hence away from a user.

In this way, a user can see the keypad 1102 and the position of the keys 1103 when the keypad 1102 is angled towards the user. Once the user has seen the position of the keys 1103, the drum 1104 is rotated such that the keypad 1102 substantially faces the screen 1106, and is therefore more difficult for third parties to see. The restricted view of the keypad 1102 provides more security for a user's PIN. The keypad is therefore configured to move between a visible position relative to a user and a concealed position relative to a user.

A further advantage of having a pivoting drum 1104 on which a keypad 1102 is mounted is that it restricts fitting of a cover. A way of defrauding an ATM is to fit a cover having a dummy keypad that records keystrokes on the keypad, and hence a PIN, and a dummy card entrance that records card details. Dummy covers can look extremely convincing. However, having a pivoting keypad 1102 restricts the fitting of a dummy cover.

A further way to restrict fitting a dummy cover is to provide chamfered studs as part of an ATM. Referring to Figure 12A herein, there is illustrated schematically a cross-section view of an ATM having studs fitted to a surface of the ATM. A stud 1201 is provided ostensibly as a decorative feature. However, its function is to restrict the fitting of a dummy cover. The stud 1201 is disposed on a surface 1202 of the ATM in close proximity to a card entry port 1203. The stud is chamfered such that a surface width 1204 of the stud 1202 disposed on the surface 1202 is less than an opposite width 1205 of the stud 1201 opposing the surface 1202. The stud can be of any suitable shape that fits these criteria.

An example of such a shape would be an inverted truncated cone. In any case, a shape having a trapezoidal cross-section is suitable.

More than one chamfered stud 1201 can be provided at different regions of the ATM.

If a dummy cover were to be fitted to the ATM, it would be apparent to a user that a dummy cover was in place on the ATM as the chamfered studs would no longer look chamfered, but straight-walled. For example, where the chamfered studs have the shape of an inverted truncated cone, the dummy cover would need to have cylindrical covers to cover the chamfered studs. Referring to Figure 12A herein, there is illustrated schematically a cross-section view of an ATM having studs fitted to a surface of the ATM with a dummy cover placed over the stud.

The dummy cover 1206 has a cross-section to fit over the opposite width 1205 of the stud 1201, and therefore does not have angled walls 1206. As the waIls 1206 are not angled, they block off the card entry port 1203 owing to the proximity of the stud 1201 to the card entry port 1203. This prevents a user from being able to use the ATM if a dummy cover is fitted, thereby reducing ATM fraud. The card entry port 1203 is blocked off because the opposite width 1205, or upper surface of the stud 1201 is disposed above the card entry port 1203.

In a further specific embodiment, a keypad for an ATM is disposed in a trough on a surface of the ATM. Referring to Figure 13A herein, there is illustrated schematically an ATM comprising a trough with a keypad disposed in the trough. The ATM 1301 comprises a screen 1302 configured to provide a user with information, a trough 1303 at the ATM having a base, the base being substantially perpendicular to the main plane of the screen 1302. A data entry device in the form of a keypad 1304 is disposed at said base.

Owing to the depth of the trough, a line of sight 1305 directly above the keypad 1304 allows a user to see the keypad 1304. However, a third party standing a little way behind or to one side of the user cannot see the keypad 1304 as their line of sight 1306 is restricted. In this way the information entered by a user is more likely to remain confidential.

Referring to Figure 13B herein, there is illustrated schematically an ATM comprising a trough with a keypad disposed on a wall of the trough. The ATM 1301 comprises the screen 1302 and a trough. The keypad 1306 is disposed on a wall of the trough substantially facing the screen 1302, and in a main plane substantially parallel to a main plane of the screen 1302. A reflective surface such as a mirror 1308 is disposed on an opposing wall of the trough, thereby allowing a user to view the mirror in their line of sight 1309 and view the reflection 1310 of the keypad. It is considered that by inverting the normal array of keys on the keypad 1307, the mirror image of the keypad 1307 will be apparent to the user, allowing him or her to easily enter data.

More that one mirror can be used to reflect the keypad if it is disposed at a different point in the trough 1303.

In a further specific embodiment, a viewing port can be provided to allow a user to see the keypad. Referring to Figure 14 herein, there is illustrated schematically an ATM having a viewing port. Figure 14A illustrates schematically a cross-section of an ATM having a viewing port. The ATM 1401 comprises a display device 1402, in the form of a screen. The display device 1402 is configured to display information to the user. The ATM further comprises a trough 1403 at the ATM, the trough having a base 1404 and side walls, a main plane of the base being substantially perpendicular to a main plane of the screen 1402. A first side wall 1405 has a main plane substantially parallel to the main plane of the screen 1402, and has a face substantially facing said screen. A second side wall 1406 also has a main plane substantially parallel to the main plane of the screen 1402 and is substantially facing the first side wall 1405.

A data entry device in the form of a keypad 1407 is disposed on the first side wall 1405 of the trough. The keypad 1407 is configured to allow the user to enter data, and is disposed on the first side wall 1405 to restrict the view of the keypad 1407.

A camera 1408 is disposed on the second side wall 1408 of the trough 1403, and is configured to capture an image of the keypad 1407. The camera 1408 is operatively connected to a viewing port 1409. The viewing port 1409 allows the user to see the image of the keypad 1407, and thereby see which keys are being pressed. The viewing port 1409 is configured so that only the user looking directly down the viewing port 1409 can see the image of the keypad 1407. In this way, no third party can see the image of the keypad 1407 whilst the user is operating the keypad 1407.

The viewing port 1409 is mounted on a slider 1410 that allows a user to adjust the height of the viewing port 1409 Referring to Figure 14B, there is illustrated schematically a perspective view of the ATM having a viewing port 1409. A marker 1411 is placed on a surface of the ATM adjacent the first side wall 1407 of the trough to illustrate to the user the location of the keypad 1407 and assist the user in positioning his or her hand in the correct place for operating the keypad.

The camera may be provided with an on/off switch to conserve energy. The camera 1409 defaults to an off mode, and if the user wishes to use the facility of the camera he or she may turn the camera to an on mode.

Alternatively, the camera may be configured to turn on in response to a hand being placed over the marker 1411, and to turn off again when the usere's hand is removed from over the marker 1411.

Claims

Claims: 1. A data entry device for an automatic teller machine, the

automatic teller machine comprising: a screen configured to display information; a card entry port; a hand rest; and the data entry device comprising a keypad, the keypad comprising a plurality of keys, said keys being configured to allow a user to enter data; characterized in that said data entry device is disposed at said hand rest and substantially facing said screen, or disposed substantially at a lower surface of said hand rest, thereby restricting a view of said data entry device.
2. An automatic teller machine as claimed in claim 1 wherein said hand rest comprises a bar.
3. An automatic teller machine as claimed in claim 1 or claim 2 further comprising a reflective surface, said reflective surface configured to allow a user to see said keypad.
4. An automatic teller machine as claimed in claim 1 or claim 2 further i'rm n ris jfl fl* a camera, said camera being configured to capture an image of said data entry device; a viewing port, said viewing port being operatively connected to said camera, and configured to display said captured image; wherein a view of said captured image is apparent to a single user.
5. An automatic teller machine as claimed in claim I where said data entry device is mounted at a pivoting drum, said data entry device configured to move between a visible position and a concealed position substantially facing said screen.
6. An automatic teller machine as claimed in any of claims I to 5 further comprising at least one projecting stud disposed in proximity to said card entry port, said stud configured to restrict a fitting of a dummy cover.
7. An automatic teller machine as claimed in claim 6 wherein said stud comprises a trapezoidal cross section.
8. An automatic teller machine as claimed in claim 7 wherein an upper surface of said stud is disposed substantially above said card entry port.
9. A handle for a closure member, said closure member comprising a locking mechanism, said handle comprising: means for operating said locking; characterized in that said means for operating said locking mechanism is disposed on a surface of said handle, said surface of said handle substantially facing said closure member.
10. A handle for a closure member as claimed in claim 9 wherein said means for operating said locking mechanism comprises a plurality of elements, said elements configured to co-operate in combination to operate said locking mechanism.
11. A handle for a closure member as claimed in claim 10 wherein said elements are selected from a set including the following: buttons; Sliders; dials; switches; direction dials.
12. A handle for a closure member as claimed in claim 10 or claim 11 wherein said elements are configured to be operated sequentially.
13. A handle for a closure member as claimed in claim 10 or claim 11 wherein said elements are configured to be operated simultaneously.
14. A handle for a closure member as claimed in any of claims 9 to 13 wherein said handle further comprises a projecting lug configured to partially cover said means for operating said locking mechanism.
15. A handle for a closure member as claimed in any of claims 9 to 14 wherein said means for operating said locking mechanism comprises tactile indicators, said tactile indicators configured to impart information about said means for operating said locking mechanism.
16. A handle for a closure member as claimed in claim 15 wherein said tactile indicators are chosen from a set of the following: raised profile; surface finish; raised Braille profile.
17. A handle for a closure member as claimed in any one of claims 9 to 16 wherein said locking mechanism comprises a bolt configured to selectively lock said closure member in a closed position.
18. A handle for a closure member as claimed in any one of claims 9 to 16 wherein said locking mechanism comprises means to selectively restrict operation of said handle.
19. A handle for a closure member as claimed in any of claims 9 to 18 wherein said means for operating said locking mechanism comprises at least one mechanical actuator.
20. A handle for a closure member as claimed in any of claims 9 to 19 wherein said means for operating said locking mechanism comprises at least one electronic actuator.
21. A handle for a closure member as claimed in any of claims 9 to 20 further comprising a secondary device configured to restrict operation of said locking mechanism unless said secondary device is actuated, said secondary device being selected from: a button * a touch pad * a swipe card reader * fob tag or key reader * identification technology * logistics * a proximity device such as a radio transmitter.
22. A handle for a closure member, said closure member comprising a locking mechanism, comprising: means for operating said locking mechanism comprises means to respond to a plurality of movements of said handle; wherein said locking mechanism is configured to be operated in response to said plurality of movements of said handle corresponding with a predetermined plurality of movements of said handle.
23. A handle for a closure member as claimed in claim 22 wherein said predetermined movements are selected from: rotation of said handle about an axis substantially perpendicular to a main plane of said closure member; rotation of said handle about an axis substantially parallel to a main plane of said closure member; movement of said handle in a direction substantially perpendicular to a main plane of said closure member.
24. A handle for a closure member as claimed in claim 22 or claim 23 wherein said means for operating said locking mechanism comprises at least one mechanical actuator.
25. A handle for a closure member as claimed in claim 22 or claim 23 wherein said means for operating said locking mechanism comprises at least one electronic actuator.
26. A handle for a closure member comprising a combination lock, said combination lock being disposed at a surface of said handle substantially facing said closure member, and said combination lock configured to selectively operate is a locking mechanism for said closure member.
27. A handle for a closure member as claimed in claim 26 wherein said combination lock comprises a plurality of elements, said elements selected from the following: buttons; sliders; switches; dials; direction dials.
28. A handle for a closure member as claimed in claim 26 or claim 27 wherein said locking mechanism comprises a bolt.
29. A handle for a closure member as claimed in claim 26 or claim 27 wherein said locking mechanism comprises means to selectively restrict operation of said handle.
30. A door comprising: a locking mechanism; a handle; means for operating said locking mechanism; characterized in that said means for operating said locking mechanism is disposed at a surface of said handle, said surface of said handle substantially facing said door.
31. A door as claimed in claim 30 wherein said means for operating said locking mechanism comprises a plurality of elements, said elements configured to co-operate in combination to operate said locking mechanism.
32. A door as claimed in claim 31 wherein said elements are selected from a set including the following: buttons; Sliders; dials; switches; direction dials.
33. A door as claimed in claim 31 or claim 32 wherein said elements are configured to be operated sequentially.
34. A door as claimed in claim 31 or claim 32 wherein said elements are configured to be operated simultaneously.
35. A door as claimed in claim 30 wherein said means for operating said locking mechanism comprises means to respond to a plurality of movements of said handle; wherein said locking mechanism is configured to be operated in response to said plurality of movements of said handle corresponding with a predetermined plurality of movements of said handle.
36. A door as claimed in claim 35 wherein said predetermined movements are selected from: rotation of said handle about an axis substantially perpendicular to a main plane of said closure member; rotation of said handle about an axis substantially parallel to a main plane of said closure member; movement of said handle in a direction substantially perpendicular to a main plane of said closure member.