GB2495792A

GB2495792A - ATM with spoiling system linked to shutter sensor

Info

Publication number: GB2495792A
Application number: GB201206700A
Authority: GB
Inventors: Nick Tripp
Original assignee: Spinnaker International Ltd
Current assignee: Secure Innovation Ltd
Priority date: 2012-04-17
Filing date: 2012-04-17
Publication date: 2013-04-24
Also published as: GB201206700D0

Abstract

The present application relates to an automated teller machine (ATM) 10 having a safe 20 for storing bank notes to be dispensed to users of the ATM. The ATM has a dispensing outlet 18 through which bank notes requested by a user are dispensed, and a shutter 34 which is moveable between a closed position in which it closes the dispensing outlet and an open position in which the dispensing outlet is exposed to permit dispensing of bank notes. The shutter is provided with a sensor for detecting physical attacks on the shutter. The sensor is linked to a spoiling system 24 which is operative to dispense a spoiling agent into the safe in the event of unauthorised interference or tampering with the ATM. Therefore, in the event of a physical attack on the shutter, the spoiling system dispenses the spoiling agent onto the bank notes stored in the safe, rendering them unusable. The sensor may comprise one or more electrically conductive tracks which are broken during the attack. An ATM shutter having a sensor comprising an electrically conductive track and a sensor comprising an electrically conductive track for attachment to the shutter of an ATM are also disclosed.

Description

ATM SECURITY

Technical Field

The present application relates to an automated teller machine (ATM), to a shutter for an ATM and to a sensor for a shutter of an ATM.

Background to the Invention

Automated teller machines (ATMs) offer customers of financial institutions such as banks convenient access to funds in their accounts, allowing the customers to withdraw money in the form of bank notes from their accounts automatically, without having to interact with a bank teller or cashier.

A typical ATM includes a safe or vault in which bank notes to be dispenscd are stored and a dispensing outlet through which bank notes are dispensed. A delivery mechanism is also housed within the safe, and is operative to deliver bank notes from the safe to the dispcnsing outlet on requcst from a customer. The dispensing outlet is normally closed by a moveable shutter, which moves into an open position when bank notes are to be dispenscd.

As ATMs typically contain a large amount of cash in the form of bank notes, they are frequently targeted by criminals. To deter would-be thieves from attempting to steal from AIMs it has become commonplace for the cash within the ATM to be protected by a spoiling system which is triggered on detection of an attack on the safe (e.g. an unauthorised attempt to open thc safe) and dispcnscs a spoiling agent onto thc hank notes stored in the safe to render them unusable and thus worthless.

Typically cash is storcd in the safe in one or more cassettes, to facilitatc rcplcnishment of the ATM, and to improve sccurity of the cash in transit and in situ within the safe. In such arrangements, the spoiling system may be provided in the safe of the ATM, or may be provided in the cash cassettes to provide protection for the cash in transit as well as in situ in the ATM.

The dispensing outlet typically provides the only means of accessing thc safe from the customer-facing exterior of the ATM, and as such has become the target of attacks by would-bc thieves seeking to access the cash stored in the safe. In one common form of attack the shutter is breached using a power tool such as a drill, exposing part or all of the dispensing outlet. Explosive gas is then pumped into the safe through the exposed dispensing outlet and ignited, causing the safe to explode, permitting access to its contents. In a variant on this form of attack, solid explosives may be forced into the interior of thc safe and detonated, again causing the safe to explode and permitting access to its contents. It will be appreciated that attacks of this nature are extremely costly and disruptive, as the damage caused by the explosion typically destroys not only the ATM but also part or all of the building in which the ATM is installed, giving rise to costly and disruptive rebuilding work.

In response to the threat of such attacks, some ATMs are now fitted with gas suppression systems, which include sensors to detect explosive gas that may be introduced into the safe or the interior of the ATM. On detection of explosive gas the gas suppression system releases a neutralising gas, which alters the composition of the explosive gas, rendering it ineffective. However, such systems may be triggered accidentally by harmless gases or other substances that are present in the environment around the ATM, but which arc not intended for use in attacking the ATM. Additionally, gas suppression systems of the type described above offer no protection against solid explosives.

Summary of Invention

The present application relates to an automated teller machine (ATM) having a safe for storing bank notes to be dispensed to users of the ATM. The ATM has a dispensing outlet through which bank notes requested by a user are dispensed, and a shutter which is moveable between a closed position in which it closes the dispensing outlet and an open position in which the dispensing outlet is exposed to permit dispensing of bank notes.

The shutter is provided with a sensor for detecting physical attacks on the shutter, which sensor is linked to a spoiling system which is operative to dispense a spoiling agent into the safe in the event ofunauthorised interference with the ATM, such that in the event of a physical attack on the shutter the spoiling system is triggered to dispense the spoiling agent onto the bank notes stored in the safe, to render them unusable and therefore According to a first aspect of the present invention there is provided an automated teller machine (ATM) comprising: a safe for storing bank notes to be dispenseth a spoiling system for dispensing a spoiling agent onto the contents of the safe; an outlet through which the bank notes arc dispensed; and a shutter that is moveable between a closed position in which it closes the outlet and an open position in which access to the outlet is permitted, the shutter being provided with a sensor for detecting tampering with the shutter, such that on detection by the sensor of tampering with the shutter the spoiling system of the ATM is activated to dispense the spoiling agent onto the bank notes stored in the safe.

The sensor of the shutter of the ATM is configured to trigger the spoiling system of the ATM in the event of an attack on the shutter, such that in the event of such an attack the bank notes contained in the safe are rendered unusable and therefore worthless even before the safe has been accessed. This provides a deterrent to attacks of the type described above which target the shutter of the ATM.

The sensor may comprise an electrically conductive track which is configured to break in the event of an attack on the shutter of the ATM.

The electrically conductive track may be provided on a substrate that is attachable to the shutter of the ATM.

The substrate may have a thickness of between 0.4mm and 0.8mm. This allows thc substrate to bend or flex slightly to conform to any curvature of the shutter of the ATM.

The substrate may be flexible.

For example, the substrate may be of polyamide or polyester. Polyamide has a relatively low tear strength (in comparison to other flexible materials such as polyester), and thus the use of polyamide as the substrate increases the likelihood that the substrate and the electrically conductive track will break in the event of an attack on the shutter of the ATM. On the other hand, polyester may be used as the substrate where a more robust sensor is required.

The substrate may be provided with one or more zones of weakness. This increases the likelihood that the substrate and the electrically conductive track provided on the substrate will break in the event of an attack on the shutter of the ATM.

The one or more zones of weakness maybe formed by holes drilled through the substrate.

These holes may be drilled during manufacture of the sensor as part of the manufacturing process, thereby minimising any additional manufacturing cost arising from the provision of zones of weakness on the substrate.

The spoiling system of the ATM may be configured to be triggered if the electrically conductive track is broken.

Alternatively, the sensor may comprise a plurality of different electrically conductive tracks which are configured to break in the event of an attack on the shutter of the ATM, in which case the spoiling system of the ATM may be configured to be triggered if one or more of the plurality of electrically conductive track is broken.

Alternatively, the spoiling system of the ATM may be configured to be triggered only if all of the plurality of different electrically conductive tracks are broken. This reduces the chance of the spoiling system being triggered accidentally, e.g. if one of the plurality of electricafly conductive tracks fails for a reason other than an attack on the shutter.

The sensor may comprise strain relieving means for accommodating movement of connecting cables of the sensor. This reduces the risk of the connecting cables becoming detached from the sensor as a result of normal movement of the shutter, thereby reducing the risk of fathe or accidental triggering of the spoiling system.

According to a second aspcct of the invention there is provided a sensor for attachment to a shutter of an ATM for detecting tampering with the shutter, the sensor comprising an electrically conductive track which is configured to break in the event of an attack on the shutter of the ATM.

The sensor may further comprising the features recited in any of the preceding paragraphs.

According to a third aspect of the invention there is provided a shutter for an ATM, the shutter having a sensor for detecting tampering with the shutter, the sensor comprising an electrically conductive track which is configured to break in the event of an attack on the shutter.

The sensor of the shutter may further comprise the features of any one of the preceding paragraphs.

Brief Description of the Drawings

Embodiments of the invention will now be described, strictly by way of example only, with reference to the accompanying drawings, of which: Figure 1 is a schematic representation of an automated teller machine (ATM); Figure 2 is a schematic view from one side, showing part of an ATM with a shutter in a closed position, closing a dispensing outlet; Figure 3 is a schematic representation showing the part of the ATM shown in Figure 1, with the shutter in an open position such that the dispensing outlet is open; and Figure 4 is a schematic illustration of an exemplary sensor for use in detecting an attack on a shutter of an ATM; Figure 5 is a schematic representation showing a sensor attached to a shutter of an ATM; Figure 6 is a schematic representation showing a sensor attached to a shutter of an ATM using an alternative attachment method; and Figure 7 is a schematic representation showing an alternative sensor for use in detecting an attack on a shutter of an ATM.

Description of the Embodiments

Referring first to Figure 1, an ATM is shown generally at 10, and has a screen 12 for providing instructions to a user of the ATM 10 and a slot 14 for receiving a user's ATM card. A keyboard 16 is provided to permit a user to interact with the ATM 10 to request services such as cash dispensing, balance enquiries and the like. Cash is dispensed by the ATM 10 through a dispensing outlet 18. A shutter is provided to permit or deny access to the dispensing outlet 18, as will be described in more detail below.

The ATM 10 includes a safe 20 in which cash to be dispensed to customers is stored. In the example illustrated in Figure 1, the safe 20 includes a plurality of cash cassettes 22 containing the cash. The use of the cash cassettes 22 in this way facilitates replenishment of the ATM 10, as an empty (or partially empty) cash cassette 22 may simply be removed from the safe 20 of the ATM 10 and replaced with a full cash cassette 22.

Each cash cassette 22 is provided with a spoiling system 24, which is configured to be activated if an attack on the cash cassette 22 is detected to dispense a spoiling agent such as ink, dye or an adhesive onto the contents of the cash cassette 22, thereby spoiling the bank notes stored in the cash cassette to render them unusable and therefore worthless.

The cash cassettes 22 may also interface with a security system of the ATM 10 which includes sensor to detect tampering with the ATM 10, such that the spoiling systems 24 of the cash cassettes 22 are triggered in the event of an attack on the ATM 10.

Turning now to Figures 2 and 3, part of the automated teller machine (ATM) 10 is shown generally at 30. The ATM 10 includes wall sections 32 having an opening which defines the dispensing outlet 18 through which bank notes may be dispensed by the ATM 10.

The ATM 10 further includes a shutter 34 which is moveable between the closed position shown in Figure 2, in which the shutter 34 closes the dispensing outlet 18, and the open position shown in Figure 3, in which the dispensing outlet 18 is open, as the shutter 34 is moved away from the opening.

In the example illustrated in Figures 2 and 3, the shutter 34 is pivotally mounted and rotates around a pivot point 36 to move between the closed position of Figure 2 and the open position of Figure 3. However, it is to be appreciated that the present invention is equally applicable to other types of shutter, such as roller shutters or shutters that move linearly between open and closed positions.

S

The shutter 34 is moved between the open and closed positions by means of an electric motor such as a stepper motor, which is controlled by a processor of the ATM 10. The electric motor also acts as a locking mechanism for the shutter 34 in its closed position, by preventing forced rotation of the shutter 34 around the pivot point 36. Thus, the shutter 34 can only be moved between its open and dosed positions when the processor of the ATM issues a command to the motor to move the shutter 34.

As is described above, ATMs are vulnerable to attacks in which the shutter 34 is breached by a tool such as a drill or hammer and explosives in gaseous or solid form are inserted into the interior of the ATM through the exposed dispensing outlet, as typically the security system of the ATM is configured to detect attacks on the casing of the ATM, the safe or the cash cassettes contained within the safe.

To deter attacks on the shutter 34 of the ATM 10, the shutter 34 is provided with a sensor which is connected to the security system of the ATM 10, and is configured to trigger the spoiling system 24 of the safe 20 and/or cash cassettes 22 in the event of an attack on the shutter 34. In this way, the spoiling system is activated before the safe 20 is breached by the explosion caused by the explosives, such that even if the bank notes contained in the safe 10 can be recovered by the thieves, they have already been spoiled by the spoiling agent of the spoiling system 24, and are thus unusable and worthless.

Figure 4 isa schematic illustration of a sensor which can be mounted to the inner surface of the shutter 34 to detect attacks on the shutter 34. The sensor is shown generally at 40, and comprises a stiff substrate 42 on which, in this example, first and second electrically conductive tracks 44, 46 are etched, printed or otherwise provided. In other examples, more than two electrically conductive tracks may be provided on the surface of the substrate 42. The substrate 42 may be of FR4 glass reinforced epoxy laminate, commonly used for printed circuit boards (PCBs), for example, and may have a thickness of bctween 0.4 and 0.8 mi-ri. Such a thickness allows the substrate 42 to bcnd or flex slightly to conform to any curvature of the inner surface of the shutter 34 when installed.

The first and second electrically conductive tracks 44, 46 are provided over a major portion of the surface of the substrate 42, such that if the substrate 42 is broken, holed or otherwise damaged one or both of the electrically conductive tracks 44, 46 will be broken. Ends of thc first electricafly conductive track 44 is conncctcd to terminals 48, 50 by means of which the first electrically conductive track can be connected to the security system of the ATM 10. Similarly, ends of the second electrically conductive track 46 are connected to terminals 52, 54 by means of which the second electrically conductive track can be connected to the security system of the ATM 10. The sensor 40 may be provided with interface electronics 56 to interface to the security system of the ATM 10 and/or to filter any noise that may be introduced by cables 60 connecting the sensor 40 to the security system of the ATM 10.

The security system of the ATM 10 is configured to pass an electric current through the an input end of each of the first and second electrically conductive tracks 44, 46, and to detect the current an output end of each of the first and second electrically conductive tracks 44, 46. If no current is detected at the output end of either or both of the first and second electrically conductive tracks 44, 46, the electrically conductive track for which no current is received may be broken, indicating an attack on the shutter 34 of the ATM 10. Thus, if no current is detected at the output end of one or both of the first and second electrically conductive tracks 44, 46, the security system of the ATM 10 may trigger the spoiling system 24, to spoil the contents of the safe 20 and!or cash cassettes 22.

To increase the likelihood of a mechanical attack on the shutter 34 breaking the first and second electrically conductive tracks 44, 46, the substrate 42 of the sensor 44 may be provided with zones of weakness 58. For example, the substrate 42 may be have lines scored into its surface, to reduce the thickness of the surface at the zones of weakness 58.

Alternatively, lines of holes may be drilled through the substrate 42 to form the zones of weakness 58.

It will be appreciated that false detection of attacks on the shutter 34 is highly undesirable. Thus, to prevent false activation in the event that one of the first and second electrically conductive tracks 44, 46 is broken or fails for a reason other than an attack on the shutter 34, the security system of the ATM 10 may be configured to trigger the spoiling system 24 of the ATM only if no current is detected at the output end of both the fir st electrically conductive track 44 and the second electrically conductive track 46.

Similarly, where there are more than two electrically conductive tracks, the security system of the ATM 10 may be configured to trigger the spoiling system 24 of the ATM if no current is detected at the output end of any one of the plurality of electrically conductive tracks. Alternatively, to reduce the risk of false activation of the spoiling system, the security system of the ATM 10 may be configured to trigger the spoiling system 24 of the ATM only if no current is detected at the output end of all of the plurality of electrically conductive tracks To reduce the risk of false detection of an attack on the shutter 34 resulting from disconnection of the sensor 40 from the security system of the ATM W due to the movement of the sensor 40 with the shutter causing the cables 60 connecting the sensor to the security system to work loose or disconnect from the sensor 40, the sensor 40 may be provided with strain relieving means 60 such as silicone sealant, cable ties or the like, to accommodate movement of the cables 60 due to normal opening and closing of the shutter 34. This reduces the risk of the connecting cables becoming detached from the sensor as a result of such normal movement of the shutter 34, thereby reducing the risk of false or accidental triggering of the spoiling system.

The sensor 40 may be attached to the inner surface of the shutter 34 in a variety of ways.

For example, an industrial double sided adhesive tape 70 may be used to attach the sensor ii to the inner surface of thc shutter 34, as illustrated in Figure 5. Alternatively, a conventional self-tapping screw 72 may be used to attach the sensor 40 to the inner surface of the shutter 34, as illustrated in Figure 6.

Figure 7 is a schematic illustration of an alternative form of sensor for detecting attacks on a shutter 34 of an ATM 10. The sensor is shown generally at 80 in Figure 7, and has many of the same features and elements as the sensor 40 illustrated in Figure 4. Thus the same reference numerals have been used in Figure 7 to denote the elements shown in Figure 4.

The sensor 80 has a flexible substrate 82, which is made of a flexible material such as polyester or polyamide. A flexible material such as polyamide, which has a low tear strength compared to a flexible material such as polyester, may be preferred in some applications, as such a material tears more easily, and therefore is more likely to tear in the event of an attack on a shutter to which the sensor 80 is attached.

As with the sensor 40 illustrated in Figure 4, the sensor 80 has first and second electrically conductive tracks 44, 46 through which a current is passed by the security system of the ATM 10. The security system detects the current at output ends of the first and second electrically conductive tracks 44, 46, and triggers the spoiling system 28 in the event that no current is detected in one or both of the electrically conductive tracks 44, 46, indicating that one or both of the electrically conductive tracks 44, 46 is broken, which in turn is indicative of a breach of the shutter 34 due to a mechanical attack on the shutter 34.

Where a more robust material than polyamidc is required, for example where a longer service life of the sensor 80 is required, the flexible substrate may be made of a material such as polyester. To ensure that the substrate 82 and the electrically conductive tracks 44, 46 break in the event of an attack on the shutter 34, zones of weakness 58 may be provided in the substrate 82, in the form of lines of holes drilled in the substrate 82 during manufacture of the substrate 82, in a similar manncr as described above for thc substrate 42. In this way, the substrate 82 may be provided with the required flexibility and durability, yet the electrically conductive tracks 44, 46 will still break in the event of an attack on the shutter 34.

For mechanical robustness the interface circuitry 56 and cables 60 may be mounted on a printed circuit board (PCB) 84 of FR4 or a similar material, with the flexible substrate 82 being soldered directly to the PCB 84. The flexible substrate 82 and the PCB 84 may be attached to the inner surface of the shutter 34 using industrial double sided adhesive tape, as illustrated in Figure 5. Altematively, if the design of the shutter 34 is such that there is not sufficient room for both the flexible substrate 82 and the PCB 84 to be mounted on the shutter 34, the PCB 84 may be mounted elsewhere, e.g. on a side frame of the ATM 10, whilst the flexible substrate is mounted on the inner surface of the shutter 34.

In an alternative embodiment, the first and second electrically conductive tracks 44, 46 may be printed or etched directly onto the inner surface of the shutter 34, with the interface circuitry 56 and cables 60 being attached to the first and second electrically conductive tracks 44, 46 by appropriate means, such as flexible cable, e.g. ribbon cable.

in this case, the inner surface of the shutter 34 may need to be coated or painted in an electrically insulating material prior to the printing or etching of the first and second electrically conductive tracks 44, 46 onto the inner surface of the shutter 34.

Claims

<claim-text>CLAIMS1. An automated tefler machine (ATM) comprising: a safe for storing bank notes to be dispensed; a spoiling system for dispensing a spoiling agent onto the contents of the safe; an outlet through which the bank notes are dispensed; and a shuttcr that is moveable between a closed position in which it closes the outlet and an open position in which access to the outlet is permitted, the shutter being provided with a sensor for detecting tampering with the shutter, such that on detection by the sensor of tampering with the shutter the spoiling system of the ATM is activated to dispense the spoiling agent onto the bank notes stored in the safe.</claim-text> <claim-text>2. An ATM according to claim 1 wherein the sensor comprises an electrically conductive track which is configured to break in the event of an attack on the shutter of the ATM.</claim-text> <claim-text>3. An ATM according to claim 2 wherein the electrically conductive track is provided on a substrate that is attachable to the shutter of the ATM.</claim-text> <claim-text>4. An ATM according to claim 3 wherein the substrate has a thickness of between 0.4mm and 0.8mm 5. An ATM according to claim 3 wherein the substrate is flexible.6. An ATM according to claim 5 wherein the substrate is of polyamide or polyester.7. An ATM according to any one of claims 3 to 6 wherein the substrate is provided with one or more zones of weakness.8. An ATM according to claim 7 wherein the onc or more zones of weakness are formed by holes drilled through the substrate.9. An ATM according to any one of claims 2 to 8 wherein the spoiling system of the ATM is configured to be triggered if the electrically conductive track is broken.10. An ATM according to any one of claims 2 to 8 wherein the sensor comprises a plurality of different electrically conductive tracks which are configured to break in the event of an attack on the shutter of the ATM, the spoiling system of the ATM being configured to be triggered if one or more of the plurality of electrically conductive tracks is broken.11. An ATM according to claim 9 wherein the spoiling system of the ATM is configured to be triggered only if all of the phirality of different electrically conductive tracks are broken.11. An ATM according to any one of claims 2 to 8 wherein the spoiling system of the ATM is configured to be triggered if one of the plurality of different electrically conductive tracks are broken 12. An ATM according to any one of claims 2 to 11, wherein the sensor comprises strain relieving means for accommodating movement of connecting cables of the sensor.13. A sensor for attachment to a shutter of an ATM for detecting tampering with the shutter, the sensor comprising an electrically conductive track which is configured to break in the event of an attack on the shutter of the ATM.14. A sensor according to claim 13 thrther comprising the features of any one of claims2to 12.15. A shutter for an ATM, the shutter having a sensor for detecting tampering with the shutter, the sensor comprising an electrically conductive track which is configured to break in the event of an attack on the shufter.16. A shutter according to claim 15 wherein the sensor further comprises the features of any one of claims 2 to 12.Amendments to the claims have been filed as followsCLAIMS1. An automated tefler machine (ATM) comprising: a safe for storing bank notes to be dispensed; a spoiling system for dispensing a spoiling agent onto the contents of the safe; an outlet through which the bank notes are dispensed; and a shutter that is moveable between a closed position in which it closes the outlet and an open position in which access to the outlet is permitted, the shutter being provided with a sensor for detecting tampering with the shutter, such that on detection by the sensor of tampering with the shutter the spoiling system of the ATM is activated to dispense the spoiling agent onto the bank notes stored in the safe, wherein the sensor comprises an electrically conductive track provided on a substrate that is attachable to the shutter of the ATM, and wherein the electricafly conductive track is configured to break in thc event of an attack on thc shutter of the ATM. (4 r2. An ATM according to claim 1 wherein the substrate has a thickness of between 0.4mm and 0.8mmLU1____ 3. An ATM according to claim I wherein the substrate is flexible.4. An ATM according to claim 3 wherein the substrate is of polyamide or polyester.5. An ATM according to any one of claims ito 4 wherein the substrate is provided with one or more zones of weakness.6. An ATM according to claim 5 whercin the one or more zones of weakness are formed by holes drilled through the substrate.7. An ATM according to any one of claims Ito 6 wherein the spoiling system of the ATM is configured to be triggered if the electrically conductive track is broken.8. An ATM according to any one of claims 1 to 6 wherein the sensor comprises a plurality of different electrically conductive tracks which are configured to break in the event of an attack on the shutter of the ATM, the spoiling system of the ATM being configured to be triggered if one or more of the plurality of electrically conductive tracks is broken.9. An ATM according to claim 8 wherein the spoiling system of the ATM is configured to be triggered only if all of the plurality of different electrically conductive tracks are broken.10. An ATM according to any one of claims 8 wherein the spoiling system of the ATM is configured to be triggered if one of the plurality of different electrically conductive tracks are broken 11. An ATM according to any one of claims Ito 10, wherein the sensor comprises ___ strain relieving means for accommodating movement of connecting cables of the sensor.12. A shutter for an ATM according to any one of claims I to 11, the shutter having a sensor tbr detecting tampering with the shutter, the sensor comprising an electrically conductive track which is configured to break in the event of an attack on the shutter.</claim-text>