JP2017117057A - Transaction terminal device and tamper detection device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a transaction terminal device and tamper detection device, which prevent a user from being caught up in troubles of not being able to use the transaction terminal device due to false detection of so-called tamper, or attack on the transaction terminal device.SOLUTION: A transaction terminal device includes tamper detection patterns 61, each comprising a conductive wire arranged in a wave-like manner, and a tamper detection unit 68 configured to detect anomaly in the tamper detection patterns 61 as a tamper. The tamper detection unit 68 is configured to feed a signal for anomaly detection to the tamper detection patterns 61 to detect anomaly in the tamper detection pattern 61, feed a signal for anomaly predictor detection to the tamper detection patterns 61 to detect an anomaly predictor in the tamper detection pattern 61, and output information on a result of anomaly predictor detection by the tamper detection unit to outside.SELECTED DRAWING: Figure 7

Description

  The present invention relates to a transaction terminal device and a tamper detection device that detect tampering due to abnormality of a tamper detection conductor.

  In transaction terminal devices used for cashless payments such as credit cards and debit cards, so-called mobile payment terminals, a PIN is input using an input key, and for communication with a payment center or IC card. The encryption key to be used is held in the memory. Therefore, it is necessary to detect an attack act against the transaction terminal device, so-called tampering, to prevent the confidential information such as a personal identification number and an encryption key from being stolen and illegally used.

  In order to prevent confidential information from being stolen by such tampering, that is, as a technology for ensuring tamper resistance, a conductive area is conventionally placed around a security area where electronic components such as a memory for holding confidential information are arranged. A tamper detection pattern in which lines are arranged in a wave shape is provided, and tamper detection is detected by disconnection or short-circuiting of the tamper detection pattern generated by the tamper. When a tamper is detected, the confidential information stored in the memory is stored. A technique for erasing is known (see Patent Documents 1 and 2).

JP2013-3979A JP 2008-33593 A

  Now, when detecting tampering with a tamper detection pattern as in the prior art, even when in a normal state where no disconnection has occurred at the time of shipment, a disconnection has occurred in the tamper detection pattern while the user is using it. It is assumed that tampering detection will occur. If such tampering detection occurs, the device cannot be used thereafter, and tampering detection must be avoided.

  In particular, using a security sheet in which a tamper detection pattern is formed on a flexible sheet material and can be bent into a required shape improves the degree of freedom of arrangement of the tamper detection pattern. If the security sheet is made relatively weak for reliable detection, the tamper detection pattern may be on the verge of disconnection due to deformation of the sheet during assembly.In this case, the tamper detection pattern may be disconnected after shipment. And tampering detection is likely to occur.

  The present invention has been devised to solve such problems of the prior art, and the main purpose of the present invention is to avoid the problem that the apparatus cannot be used due to tampering detection. An object of the present invention is to provide a transaction terminal device and a tamper detection device configured as described above.

  The transaction terminal device of the present invention is a transaction terminal device that detects a tamper by an abnormality in a tamper detection conductor, and the tamper detection that detects a tamper by the tamper detection conductor and an abnormality in the tamper detection conductor. The tamper detection unit outputs an abnormality detection signal to the tamper detection conductor to detect an abnormality in the tamper detection conductor and to detect an abnormality in the tamper detection conductor. It is configured to output a sign detection signal, detect a sign of abnormality in the tamper detection conductor, and output information related to the detection result of the sign of abnormality in the tamper detection unit to the outside.

  The tamper detection device of the present invention is a tamper detection device that detects a tamper due to an abnormality in the tamper detection conductor, and outputs an abnormality detection signal to the tamper detection conductor to detect the tamper detection. An abnormality in the conductor is detected, and an abnormality sign detection signal is output to the tamper detection conductor to detect an abnormality sign in the tamper detection conductor.

  According to the present invention, since the tamper detection conductor is detected as a sign of abnormality and the information regarding the detection result is output to the outside, the tamper detection conductor is on the verge of abnormality. Before tampering with tampering due to the change from the current state, it is possible to take necessary measures such as replacement or repair of the device, avoiding the inconvenience that the transaction terminal device suddenly becomes unusable it can.

The perspective view of transaction terminal device 1 concerning this embodiment Rear view of transaction terminal device 1 Longitudinal sectional view of transaction terminal device 1 Vertical section of security module 38 The principal part perspective view of the security module 38 Explanatory drawing explaining the tamper detection pattern 61 and the tamper detection switch 62 provided in the security module 38 The circuit diagram which shows the structure for detecting the abnormality of the tamper detection pattern 61 and its precursor Explanatory drawing which shows the state of the input-output port of the tamper detection part 68 at the time of abnormality detection Explanatory drawing which shows the state of the input-output port of the tamper detection part 68 at the time of abnormality sign detection Functional block diagram showing a schematic configuration of transaction terminal apparatus 1 The circuit diagram which shows the modification of the structure for detecting the abnormality of the tamper detection pattern 61 and its precursor The circuit diagram which shows the modification of the structure for detecting the abnormality of the tamper detection pattern 61 and its precursor The circuit diagram which shows the structure for detecting the abnormality of the tamper detection pattern 61 which concerns on 2nd Embodiment, and its precursor

  1st invention made | formed in order to solve the said subject is a transaction terminal device which detects a tamper by the abnormality of the tamper detection conductor, The abnormality in the said tamper detection conductor and this tamper detection conductor A tamper detection unit that detects tampering by the tamper detection unit, outputting a signal for abnormality detection to the tamper detection conductor, detecting an abnormality in the tamper detection conductor, and A signal for detecting an abnormality sign is output to the tamper detection conductor, an abnormality sign in the tamper detection conductor is detected, and information related to the detection result of the abnormality sign in the tamper detection unit is output to the outside. The configuration.

  According to this, in order to detect that the tamper detection conductor is in a state immediately before an abnormality as a sign of abnormality and to output information on the detection result to the outside, the tamper detection conductor is in a state just before the abnormality. Therefore, before the tampering occurs and the tampering detection occurs, it is possible to take necessary measures such as replacement or repair of the device, and avoid the inconvenience that the transaction terminal device cannot be used suddenly.

  Further, the second invention further includes a voltage dividing resistor connected to the tamper detection conductor, and the tamper detection unit applies a voltage corresponding to a resistance value of the tamper detection conductor by resistance voltage division. Measurement is performed, and a sign of abnormality in the tamper detection conductor is detected based on the measured value of the voltage.

  According to this, it is possible to accurately detect a sign of abnormality in the tamper detection conductor, for example, that the tamper detection conductor is in a state immediately before disconnection.

  According to a third aspect of the present invention, the tamper detection conductor is provided in a plurality of systems, and the tamper detection unit detects the abnormality in the tamper detection conductor of each system. The system includes two input / output ports for outputting and inputting the abnormality detection signal for each system, and the voltage dividing resistor connects the tamper detection conductor and the tamper detection unit of each system to 2 A bridge line that is provided on at least one of the two input / output lines and connects the input / output lines of the tamper detection conductors of different systems to each other; the input / output port of the system to be detected; and the bridge A high-voltage signal and a low-voltage signal are transmitted from the tamper detection unit to the tamper detection lead as the abnormality sign detection signal by using the input / output port of another system connected via a winding line. And outputs to the body, a signal output from the tamper detection conductor and configured to be input to the tamper detection section accordingly.

  According to this, since the input / output port of the tamper detection pattern that is different from the tamper detection pattern to be detected is used, it is not necessary to secure an input / output port dedicated to the detection of abnormal signs, and the configuration can be simplified. it can.

  According to a fourth aspect of the present invention, the tamper detection conductor is a tamper detection pattern in which conductive wires are arranged in a wave shape.

  According to this, it can be detected as a sign of abnormality that the tamper detection pattern is just before the disconnection.

  According to a fifth aspect of the present invention, the tamper detection conductor includes a pair of electrodes and a conductive portion that conducts the pair of electrodes, and the conductive portion is sandwiched between two members. In the assembled state, the conductive deformed portion is held in a conductive state in contact with the electrode by an urging force generated by the elastic deformation of the elastic deformation portion.

  According to this, it can be detected as a sign of abnormality that the urging force of the elastically deforming part is short and the state just before the conduction state is released. In this case, tampering is detected by removing the conductive state of the electrode by removing one of the two members by an attacking action.

  According to a sixth aspect of the present invention, there is provided a tamper detection device for detecting a tamper due to an abnormality in a tamper detection conductor, wherein the tamper detection conductor is configured to output an abnormality detection signal to the tamper detection conductor. And detecting a sign of abnormality in the tamper detection conductor by outputting an abnormality sign detection signal to the tamper detection conductor.

  According to this, it is possible to detect a sign of abnormality in the tamper detection conductor.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

(First embodiment)
FIG. 1 is a perspective view of a transaction terminal device 1 according to the present embodiment. FIG. 2 is a rear view of transaction terminal device 1 shown in FIG. FIG. 3 is a longitudinal sectional view of transaction terminal device 1 shown in FIG.

  As shown in FIG. 1, this transaction terminal device 1 is cashless using a magnetic card C1, a contact IC card C2, a contactless IC card (not shown), etc. as a credit card or a debit card. This is a mobile payment terminal that performs payment, and a display input panel 4 and a keypad unit 5 are arranged on the front surface 3 of the housing 2.

  The housing 2 is composed of an upper case 2a and a lower case 2b. The display input panel 4 is a so-called touch panel display in which a liquid crystal display panel and a touch panel are combined. The display input panel 4 is provided so that the peripheral edge thereof is covered with the frame panel 7. On the keypad unit 5, a plurality of operation keys, specifically, a power key and input keys such as a numeric keypad and a function key are arranged. A cover 6 is provided on the side surface of the housing 2 to cover the power plug and the memory card slot.

  As shown in FIG. 2, a camera 8, a speaker 9, and a connection terminal 10 are provided on the back side of the housing 2. The camera 8 captures a barcode or the like. The speaker 9 outputs sound such as an alarm sound. The connection terminal 10 is connected to a connection terminal of a cradle (not shown) and supplies power for charging.

  As shown in FIG. 3, the transaction terminal device 1 includes a thermal printer 12, a magnetic card reader 13, and a contact type IC card reader 14. In the printer 12, printing is performed on the recording paper drawn from the roll paper RP obtained by winding the recording paper in a roll shape, and the recording paper is discharged from the paper discharge port 16. The magnetic card reader 13 reads the magnetic card C1 inserted in the card slot 17 provided in the housing 2 (see FIG. 1). The contact type IC card reader 14 reads the contact type IC card C2 inserted in the card slot 18 provided in the housing 2 (see FIG. 1).

  In addition, an NFC antenna 21, a communication module 22, and a battery 23 are provided inside the housing 2. The NFC antenna 21 communicates with a non-contact IC card or the like having an electronic money function by NFC (Near Field Communication). The communication module 22 performs wireless communication with a settlement processing system server or the like.

  The battery 23 supplies power to each part of the transaction terminal device 1. A battery cover 25 that closes an opening for inserting and removing the battery 23 is provided in the battery housing portion 24 in which the battery 23 is housed.

  As described above, the transaction terminal device 1 makes a cashless payment using a magnetic card, a contact IC card, a non-contact IC card, and the like, and can print a voucher in which the details of the payment are recorded. In addition, the transaction terminal device 1 may be provided with a user authentication using an ID card, for example, a function for authenticating a user of the transaction terminal device 1.

  A main board 31 and a sub board 32 are provided on the back side of the display input panel 4 inside the housing 2. Various electronic components for controlling each part of the transaction terminal device 1 are mounted on the main board 31 and the sub board 32. For example, a liquid crystal display panel and a touch panel constituting the display input panel 4 are connected to the main substrate 31 and electronic components for controlling them are mounted.

  Further, a touch sensor substrate 34 and a security area main substrate 35 are arranged on the back side of the keypad portion 5 inside the housing 2. These substrates 34, 35, these substrates 34, The frame member 36 for holding the gap 35 is housed in the module case 37 together with the magnetic card reader 13 and the contact IC card reader 14 to constitute a security module 38.

  Next, the security module 38 shown in FIG. 3 will be described. FIG. 4 is a longitudinal sectional view of the security module 38. FIG. 5 is a perspective view of a main part of the security module 38.

  As shown in FIG. 4, in the security module 38, the touch sensor substrate 34 is disposed so as to close the opening on the front surface of the module case 37, and a plurality of confidential information is input on the front surface of the touch sensor substrate 34. A key sheet 43 on which the input keys 41 are arranged is arranged. Note that a metal dome sheet (not shown) is disposed between the key sheet 43 and the touch sensor substrate 34, and a keypad portion is formed by the metal dome sheet, the key sheet 43, and the touch sensor substrate 34. 5 is configured.

  On the touch sensor substrate 34, a capacitive touch sensor that detects an operation of the input key 41 is provided on the surface. A control circuit for processing the output signal of the touch sensor is mounted on the back side of the touch sensor substrate 34.

  On the security area main board 35, electronic components such as a flash memory for storing confidential information such as a password and an encryption key are mounted. The security area main board 35 is mounted with a processor as a tamper detection unit that is electrically connected to a tamper detection pattern described below and detects a tamper.

  The touch sensor substrate 34 and the security area main substrate 35 are provided with tamper detection patterns in which conductive lines are arranged in a waveform.

  The frame member 36 supports the touch sensor substrate 34 and the security area main substrate 35 in a state of being opposed to each other with a predetermined interval. A security sheet 55 provided with a tamper detection pattern is attached to the frame member 36 so as to go around the outer periphery of the space defined by the touch sensor substrate 34 and the security area main substrate 35 (see FIG. 5).

  The security sheet 55 can be obtained by forming a tamper detection pattern by printing on a flexible sheet material made of a synthetic resin material such as PET using a conductive material such as silver paste.

  Thereby, the security area partitioned by the touch sensor substrate 34 and the security area main substrate 35 is covered with the touch sensor substrate 34, the security area main substrate 35, and the security sheet 55 having the tamper detection pattern. The tamper detection pattern provided on these members protects the electronic components mounted on the touch sensor substrate 34 and the security area main substrate 35 and the contact IC card reader 14 and stores confidential information. Tamper resistance can be ensured against an attacking action for stealing information stored in the flash memory, input information by the input key 41, and read information by the contact IC card reader 14.

  Further, in the module case 37, a part that becomes a weak point from the viewpoint of securing tamper resistance regarding the security module 38, specifically, an inner surface of a part facing the battery housing portion 24 (see FIG. 3) in the module case 37, A security sheet 58 is pasted. Thereby, the magnetic card reader 13 is protected, and tamper resistance can be ensured against an attacking action for stealing information read by the magnetic card reader 13.

  Next, the tamper detection pattern 61 and the tamper detection switch 62 provided in the security module 38 shown in FIG. 4 will be described. FIG. 6 is an explanatory diagram for explaining the tamper detection pattern 61 and the tamper detection switch 62 provided in the security module 38.

  In the present embodiment, tamper detection patterns 61 are provided on the touch sensor substrate 34, the security area main substrate 35, the security sheet 55 attached to the frame member 36, and the security sheet 58 attached to the module case 37 of the security module 38, respectively. A total of four tamper detection patterns 61 are provided. In these tamper detection patterns 61, conductive wires (tamper detection lines) are arranged in a wave shape.

  A tamper detection switch 62 is connected in series to each tamper detection pattern 61 of the touch sensor substrate 34 and the security area main substrate 35. The tamper detection switch 62 includes a pair of electrodes 63 provided on the touch sensor substrate 34 and the security area main substrate 35, and a switch member 64.

  The switch member 64 is provided so as to be sandwiched between the touch sensor substrate 34 and the security area main substrate 35, a conductive portion 65 that conducts a pair of electrodes 63, the touch sensor substrate 34, the security area main substrate 35, and the like. And an elastic deformation portion 66 that holds the conductive portion 65 in contact with the electrode 63 by an urging force caused by elastic deformation in the assembled state sandwiched between the two.

  Therefore, when an attacking action to remove the touch sensor substrate 34 or the security area main substrate 35 is performed, the tamper detection switch 62 is turned off, that is, the conductive state of the electrode 63 is released, so that the tamper can be detected. .

  Each tamper detection pattern 61 is connected to a tamper detection unit 68. The tamper detection unit 68 includes a processor and is provided with a plurality of input / output ports. At the time of tamper detection, a high / low signal is output from the output port to the tamper detection pattern 61, and a signal corresponding to this is output. The detection pattern 61 is input to the input port, and the disconnection of the tamper detection pattern 61 and the off state of the tamper detection switch 62 are detected based on the output signal and the input signal.

  Accordingly, a hole is made in the touch sensor substrate 34 and the security area main substrate 35, the security sheet 55 attached to the frame member 36 is broken, or a hole is made in the security sheet 58 attached to the module case 37. When a disconnection occurs in the tamper detection pattern 61 due to an attack act such as, a tamper detection unit 68 detects the tamper. Further, when the touch sensor substrate 34 and the security area main substrate 35 are removed and the first security area is opened, the tamper detection switch 62 is turned off, and the tamper detection pattern 61 is tampered in the same manner as when the tamper detection pattern 61 is disconnected. A tamper is detected at the unit 68.

  Here, in the security sheets 55 and 58, in order to detect the tamper with certainty, the flexible sheet material on which the tamper detection pattern 61 is formed is more fragile and relatively small than that used for a normal flexible substrate. It is formed so as to be broken by an external force. For this reason, a sheet | seat tends to deform | transform at the time of an assembly, and the tamper detection pattern 61 may be in the state just before a disconnection by the deformation | transformation of this sheet | seat. In this case, at the time of shipment, even if the tamper detection pattern 61 is in a normal state where no disconnection has occurred, it is assumed that the disconnection will occur while the user is using and a tampering detection will occur.

  In the tamper detection switch 62, the conductive portion 65 is held in a conductive state in contact with the electrode 63 by the urging force generated by the elastic deformation of the elastic deformation portion 66, and the dimension of the elastic deformation portion 66 is less than the normal value. If it is formed small, the urging force of the elastic deformation portion 66 is insufficient. Therefore, at the time of shipment, even when the conductive portion 65 is kept in a conductive state in contact with the electrode 63, the user can use it. It is assumed that the conductive state is released only by a slight deterioration of the elastic deformation portion 66, and tampering detection occurs.

  Therefore, in the present embodiment, the tamper detection pattern 61 is detected as a sign of an abnormality in the tamper detection pattern 61 when the tamper detection pattern 61 is in a state immediately before disconnection. Further, it is detected as a sign of abnormality of the tamper detection switch 62 that the tamper detection switch 62 is in a state just before the conduction state is released.

  Next, a configuration for detecting the abnormality of the tamper detection pattern 61 shown in FIG. FIG. 7 is a circuit diagram showing a configuration for detecting an abnormality of the tamper detection pattern 61 and its precursor.

  The tamper detection unit 68 includes a processor and includes a plurality of input / output ports. This input / output port is a so-called general purpose input / output (GPIO) port, and can be switched between output, input, analog input, and open.

  As described above, the tamper detection pattern 61 is provided with a plurality of systems (here, four systems), and the tamper detection unit 68 detects tampering in the tamper detection pattern 61 of each system as a tamper. Two input / output ports for outputting and inputting an abnormality detection signal to the detection pattern 61 are provided for each system. That is, the two input / output lines 72 of the tamper detection pattern 61 of each system are respectively connected to the input / output ports of the tamper detection unit 68.

  One of the two input / output ports of each system serves as an output port for outputting an abnormality detection signal to the tamper detection pattern 61, and the other inputs a signal from the tamper detection pattern 61 according to the abnormality detection signal. An abnormality in the tamper detection pattern 61, that is, disconnection of the tamper detection pattern 61 is detected based on a signal input to the input port. The operation at the time of detecting the abnormality will be described in detail later with reference to FIG.

  Further, the tamper detection unit 68 measures the voltage corresponding to the resistance value of the tamper detection pattern 61 by resistance voltage division, and based on the measured value of this voltage, the tamper detection pattern 61 is in a state just before the disconnection. The tamper detection pattern 61 and the tamper detection unit are configured to detect as a sign of abnormality in the tamper detection pattern, and a resistance voltage dividing unit 71 for measuring a voltage corresponding to the resistance value of the tamper detection pattern 61 by resistance voltage division. 68.

  In the resistance voltage dividing unit 71, a voltage dividing resistor 73 is provided on one of two input / output lines 72 connecting the tamper detection pattern 61 and the tamper detection unit 68 of each system. In addition, a bridging line 74 that connects the input / output lines 72 of the tamper detection patterns 61 of different systems is provided.

  When detecting an abnormality sign in the tamper detection pattern 61, an abnormality sign detection is performed using an input / output port of a system to be detected and an input / output port of another system connected via a bridge line 74. A high voltage signal and a low voltage signal are output from the tamper detection unit 68 to the tamper detection pattern 61 as signals for use, and a signal output from the tamper detection pattern 61 is input to the tamper detection unit 68 accordingly.

  That is, one of the two input / output ports of the system to be detected is an output port that outputs a high voltage signal to the tamper detection pattern 61, and the other is from the tamper detection pattern 61 according to the high voltage signal. It becomes an analog input port to which a signal is input, and one of the two input / output ports of another system connected through the bridge line 74 is connected to the input / output line 72 provided with the voltage dividing resistor 73. The output port is an output port that outputs a low voltage signal to the tamper detection pattern 61.

  Based on the signal input to the analog input port, a voltage corresponding to the resistance value of the tamper detection pattern 61 is measured, and based on the measured value of this voltage, a sign of abnormality in the tamper detection pattern 61, that is, tamper detection. It is detected that the pattern 61 is in a state just before disconnection. The operation at the time of detecting the abnormality sign will be described in detail later with reference to FIG.

  The operation for detecting an abnormality in the tamper detection pattern 61 is always executed after shipment. On the other hand, the operation of detecting a sign of abnormality in the tamper detection pattern 61 is executed at the time of shipping inspection.

  Next, an operation for detecting an abnormality in the tamper detection pattern 61 shown in FIG. 7 will be described. FIG. 8 is an explanatory diagram showing the state of the input / output ports of the tamper detection unit 68 at the time of abnormality detection. In FIGS. 8A to 8D, four tamper detection patterns 61 are set as detection targets. Each case is shown.

  When detecting an abnormality in the tamper detection pattern 61, one of the two input / output ports of the system to be detected among the plurality of input / output ports of the tamper detection unit 68 is set as an output port (OUT), and the other is input. Port (IN). Then, an abnormality detection signal (high / low signal) is output from the output port, and a signal output from the tamper detection pattern 61 is input to the input port in response to this signal.

  At this time, the input / output port of another system connected to the system to be detected via the bridge line 74 is open, that is, has a high impedance, and does not affect the signal of the system to be detected.

  8A to 8D show a case where each of the four systems of tamper detection patterns 61 is set as a detection target, but another system of tamper detection that is not connected by the bridging line 74. For the pattern 61, abnormality detection can be performed simultaneously. Further, the output port and the input port can be set in the opposite manner to the illustrated example.

  Next, an operation for detecting a sign of abnormality in the tamper detection pattern 61 shown in FIG. 7 will be described. FIG. 9 is an explanatory diagram showing the state of the input / output port of the tamper detection unit 68 when an abnormality sign is detected. In FIGS. 9A to 9D, four tamper detection patterns 61 are detected. Each case is shown.

  When detecting a sign of abnormality in the tamper detection pattern 61, one of the two input / output ports of the system to be detected among the plurality of input / output ports of the tamper detection unit 68 is set as a high-side output port (OUT). The other is an analog input port (AD). Of the two input / output ports connected to the system to be detected through a bridge line, one input / output port connected to the voltage dividing resistor 73 is connected to the low-side output port (OUT). And the other input / output port is open, that is, has a high impedance. Then, a signal of a predetermined voltage (for example, 3V) is output from the high-side output port, and a ground voltage (0V) signal is output from the low-side output port as an abnormality sign detection signal, to the analog input port Measure the voltage of the input signal.

  Thus, when the voltage corresponding to the resistance value of the tamper detection pattern 61 is measured by the resistance voltage division, the measured value of the voltage is compared with a predetermined threshold value to determine the presence / absence of an abnormality sign. If the tamper detection pattern 61 has a sign of abnormality, the resistance value of the tamper detection pattern 61 increases, and the voltage measurement value decreases accordingly. If the voltage measurement value falls below the threshold value, a sign of abnormality is detected. Judge that there is.

  For example, the voltage of the high-side output port is 3 V, the voltage of the low-side output port is 0 V, the resistance value R of the voltage dividing resistor 73 is 1.2 kΩ, and the resistance value Rx of the tamper detection pattern is 600Ω. The measured value of the voltage is 2V. On the other hand, if the tamper detection pattern 61 has a sign of abnormality, that is, the tamper detection pattern 61 is about to be disconnected, for example, when the resistance value Rx of the tamper detection pattern 61 becomes 2 kΩ, the measured voltage value decreases to nearly 1V. To do. Here, for example, when it is determined that there is a sign of abnormality when Rx> 100Ω, the voltage threshold value is 2.8 V, and when the measured voltage value is lower than 2.8 V, Judge that there is a sign.

  9A to 9D show a case where each of the four systems of tamper detection patterns 61 is set as a detection target. However, another system of tamper detection that is not connected by the bridging line 74 is shown. For the pattern 61, abnormality sign detection can be performed simultaneously.

  Also, the high-side output port and the low-side output port can be set opposite to the example shown in the figure. Also, the analog input port and the low-side output port can be set opposite to the example shown in the figure. Further, the low-side output port is not necessarily set to the ground voltage (0 V), and signals having different voltages may be output between the high-side output port and the low-side output port.

  Next, a schematic configuration of the transaction terminal device 1 shown in FIG. 1 will be described. FIG. 10 is a functional block diagram illustrating a schematic configuration of the transaction terminal device 1.

  The transaction terminal device 1 is provided with a main control unit 81, a display control unit 82, and a power supply control unit 83. These control parts 81-83 are comprised with a processor, and are mounted in the main board | substrate 31 and the sub board | substrate 32 (refer FIG. 3). The main control unit 81 controls the liquid crystal display panel 84 of the display input panel 4 via the display control unit 82 and controls the touch panel 85 of the display input panel 4. Further, the main control unit 81 controls the communication module 22, the camera 8, and the speaker 9. Further, the main control unit 81 controls a power supply control unit 83 that controls power supply by the battery 23.

  In the keypad unit 5, the operation of the input key 41 such as a numeric keypad is detected by a touch sensor 93 provided on the touch sensor substrate 34 (see FIG. 3), and the operation of the power key 42 is detected by a power key switch 94. Is done. When the operation of the power key 42 is detected by the power key switch 94, power supply to the touch sensor 93 is started in the power control unit 83 in accordance with an instruction from the main control unit 81, and input by the input key 41 becomes possible. Become.

  The security module 38 includes a security area control unit 91, a flash memory 92, and a tamper detection unit 68. The security area control unit 91 and the tamper detection unit 68 are configured by a processor and are mounted on the security area main board 35 (see FIG. 3). The flash memory 92 stores confidential information such as a password and an encryption key, and is mounted on the security area main board 35.

  The security area control unit 91 controls the magnetic card reader 13, the contact type IC card reader 14, and the touch sensor 93. The security area control unit 91 is connected to the main control unit 81, and information acquired by the magnetic card reader 13, the contact type IC card reader 14, and the touch sensor 93 is transmitted from the security area control unit 91 to the main control unit 81. The information is transmitted from the communication module 22 to the server of the payment processing system in response to an instruction from the main control unit 81.

  The tamper detection unit 68 detects an abnormality in the tamper detection pattern, that is, disconnection or short circuit of the tamper detection pattern, based on the output signal and the input signal for the tamper detection pattern 61. When the tamper detection unit 68 detects an abnormality in the tamper detection pattern, the security area control unit 91 deletes confidential information such as an encryption key held in the flash memory 92 and confirms that tampering has been detected. The represented history information is stored in the flash memory 92.

  Further, the tamper detection unit 68 measures a voltage corresponding to the resistance value of the tamper detection pattern 61 by resistance voltage division, and based on the measured value of this voltage, a sign of abnormality in the tamper detection pattern 61, that is, a tamper detection pattern. It is detected that 61 is in a state just before the disconnection. When the tamper detection unit 68 detects a sign of abnormality in the tamper detection pattern 61, the security area control unit 91 notifies the main control unit 81 that the sign of abnormality has been detected. Is sent to the main control unit 81 and the display control unit 82 to cause the display input panel 4 to display that there is a sign of abnormality or prompt the device to be replaced or repaired.

  7 to 10, the tamper detection switch 62 shown in FIG. 6 is omitted. However, at the same time as detecting an abnormality sign in the tamper detection pattern 61 according to the above procedure, an abnormality sign in the tamper detection switch 62 is also detected. Can be detected. That is, if the size of the elastic deformation portion 66 of the tamper detection switch 62 is smaller than the normal value, the urging force by the elastic deformation portion 66 is insufficient, and the contact between the conductive portion 65 and the electrode 63 becomes insufficient. The resistance value when the conductive portion 65 is in contact with the electrode 63 is increased. Therefore, as described above, by measuring the voltage corresponding to the resistance value by the resistance voltage division, it is possible to detect a sign of abnormality in the tamper detection switch 62.

  Next, a modified example of the configuration for detecting an abnormality of the tamper detection pattern 61 and a sign thereof will be described. 11 and 12 are circuit diagrams showing modifications of the configuration for detecting an abnormality of the tamper detection pattern 61 and its sign.

  In this modification, tamper detection lines (conductive wires) are provided in a double manner in one system of tamper detection pattern 61v, that is, two tamper detection lines 101va and 101vb are provided to run side by side. In this case, since there are four tamper detection patterns 61v, 61w,... In this embodiment, the tamper detection lines are eight in total.

  The bridging lines 74v and 74w are connected from the input / output lines 72va and 72vb of the tamper detection pattern 61v to the input / output lines 72wa and 72wb of the tamper detection pattern 61w of another system, respectively.

  As shown in FIG. 11, when detecting an abnormality in the tamper detection pattern 61v, two input / output ports connected to the tamper detection line 101va to be detected among the plurality of input / output ports of the tamper detection unit 68. One of these is an output port (OUT) and the other is an input port (IN). Two input / output ports connected to another tamper detection line 101vb of the same system are defined as input ports (IN).

  Here, when a short circuit occurs in the two tamper detection lines 101va and 101vb that run side by side due to an attack such as opening a hole, the same occurs when the output port connected to the tamper detection line 101va to be detected is high. The input port connected to the other tamper detection line 101vb of the system goes high. Thereby, the tamper detection unit 68 can detect a short circuit between the tamper detection lines 101va and 101vb.

  As shown in FIG. 12, tamper detection lines 101va and 101vb are connected to tamper detection lines 101wa and 101wb of different systems by bridge lines 74v and 74w, respectively, and two tamper detection lines 101va and 101vb of the same system are connected to each other. Not connected by lines 74v and 74w. For this reason, when detecting an abnormality sign in the tamper detection pattern, it is possible to simultaneously detect abnormality signs on the two tamper detection lines 101va and 101vb of the system to be detected.

  The configuration and operation related to the abnormality sign detection described above are the same when tamper detection lines of a different system from the tamper detection lines 101va and 101vb are set as detection targets. For example, the abnormality sign detection of the two tamper detection lines 101wa and 101wb can be performed simultaneously as described above.

(Second Embodiment)
Next, a second embodiment will be described. FIG. 13 is a circuit diagram showing a configuration for detecting an abnormality in the tamper detection pattern 61 and a sign thereof according to the second embodiment.

  In the first embodiment, as shown in FIG. 7, tamper detection to be detected using an input / output port connected to a tamper detection pattern 61 of a different system different from the tamper detection pattern 61 to be detected. Although the voltage corresponding to the resistance value of the pattern 61 is measured, in the second embodiment, the tamper detection unit 68 is provided with an input / output port dedicated to detecting an abnormal sign.

  That is, as shown in FIG. 13, a switching element (FET) 112 for turning on / off the ground of the other end of the voltage dividing resistor 111 having one end connected to the input / output line 72 of the tamper detection pattern 61 is provided. The element 112 is connected to an input / output port dedicated to detecting an abnormal sign of the tamper detection unit 68 so that the switching element 112 is switched on / off.

  When an abnormality is detected, the two input / output ports connected to the tamper detection pattern 61 to be detected are set as an output port and an input port, and the switching element 112 is turned off. Then, an abnormality detection signal (high / low signal) is output from the output port, and a signal output from the tamper detection pattern 61 is input to the input port in response to this signal. Thereby, an abnormality of the tamper detection pattern 61 can be detected, and the voltage dividing resistor 111 does not affect the signal of the tamper detection pattern 61 to be detected.

  On the other hand, when an abnormality sign is detected, one of the two input / output ports connected to the tamper detection pattern 61 to be detected is an output port (OUT), the other is an analog input port (AD), and the switching element 112 is turned on. To do. Then, a signal having a predetermined voltage is output from the output port, and the voltage of the signal input to the analog input port is measured. As a result, the voltage corresponding to the resistance value of the tamper detection pattern 61 to be detected can be measured by resistance voltage division, and a sign of abnormality is detected by comparing the measured voltage value with a predetermined threshold value. can do.

  In such a configuration, the switching element 112 is provided in addition to the voltage dividing resistor for each system of the tamper detection pattern, and an input / output port dedicated to detecting an abnormal sign is secured to drive the switching element 112.

  On the other hand, in the first embodiment, as shown in FIG. 7, it is only necessary to provide a bridging line 74 in addition to the voltage dividing resistor 73, and tamper detection of a system different from the tamper detection pattern 61 to be detected. Since the input / output port of the pattern 61 is used, it is not necessary to secure an input / output port dedicated to detecting an abnormality sign, and the configuration can be simplified.

  As mentioned above, although this invention was demonstrated based on specific embodiment, these embodiment is an illustration to the last, Comprising: This invention is not limited by these embodiment. In addition, all the components of the transaction terminal device and the tamper detection device according to the present invention shown in the above embodiment are not necessarily essential, and can be appropriately selected as long as they do not depart from the scope of the present invention. is there.

  For example, in the above-described embodiment, a mobile payment terminal that performs a cashless payment using a magnetic card, a contact IC card, or the like has been described as an example of a transaction terminal device. It is not limited to the use of simple settlement. Moreover, the transaction terminal device in the present invention is not limited to such a portable type, and may be a stationary type.

  Further, in the above-described embodiment, when the tamper detection unit detects an abnormality sign of the tamper detection pattern, the display input panel displays an indication that there is an abnormality sign or prompts replacement or repair of the device. However, the user may be notified as an alarm or the like using a speaker or other output means. In addition, the transaction terminal device may notify the support center or the like, and in any case, the device can be replaced or repaired before the device becomes unusable due to tampering detection. Just notify the right person.

  In the above embodiment, a voltage corresponding to the resistance value of the tamper detection conductor (such as a tamper detection pattern) is measured, and based on the measured value of this voltage, a sign of abnormality in the tamper detection conductor is obtained. However, the present invention is not limited to this. For example, the tamper detection conductor is measured and the tamper detection conductor is measured based on the measured capacitance value. A sign of abnormality may be detected.

  In the above embodiment, the voltage dividing resistor is provided on one of the two input / output lines connecting the tamper detection conductors (tamper detection patterns, etc.) and the tamper detection unit of each system. It is also possible to provide a voltage dividing resistor on both of the two.

  INDUSTRIAL APPLICABILITY The transaction terminal device and the tamper detection device according to the present invention have an effect of avoiding a problem that the device cannot be used due to erroneous tamper detection, and detect tamper by abnormality of the tamper detection conductor. It is useful as a transaction terminal device and a tamper detection device.

DESCRIPTION OF SYMBOLS 1 Transaction terminal device 61 Tamper detection pattern 62 Tamper detection switch 63 Electrode 64 Switch member 65 Conductive part 66 Elastic deformation part 68 Tamper detection part (tamper detection apparatus)
71 Resistance Voltage Divider 72 Input / Output Line 73 Voltage Dividing Resistor 74 Bridge Line 101 Tamper Detection Line 111 Voltage Dividing Resistor 112 Switching Element

Claims (6)

A transaction terminal device for detecting tampering due to abnormality of a tamper detection conductor,
The tamper detection conductor;
A tamper detection unit that detects tampering due to an abnormality in the tamper detection conductor,
With
The tamper detection unit outputs an abnormality detection signal to the tamper detection conductor to detect an abnormality in the tamper detection conductor, and outputs an abnormality sign detection signal to the tamper detection conductor. Output, detect a sign of abnormality in the tamper detection conductor,
A transaction terminal device that outputs information related to a detection result of a sign of abnormality in the tamper detection unit to the outside. And a voltage dividing resistor connected to the tamper detection conductor.
The tamper detection unit measures a voltage corresponding to a resistance value of the tamper detection conductor by resistance partial pressure, and detects a sign of abnormality in the tamper detection conductor based on the measured value of the voltage. The transaction terminal device according to claim 1. The tamper detection conductor is provided in a plurality of systems,
The tamper detection unit includes two input / output ports for outputting and inputting the abnormality detection signal to the tamper detection conductor in order to detect abnormality in the tamper detection conductor of each system. Prepare for each system,
The voltage dividing resistor is provided on at least one of two input / output lines connecting the tamper detection conductor and the tamper detection unit of each system,
A bridging line that connects the input / output lines of the tamper detection conductors of different systems to each other is provided,
Using the input / output port of the system to be detected and the input / output port of another system connected via the bridge line, a high-voltage signal and a low-voltage signal are used as the abnormality sign detection signal. The signal output from the tamper detection conductor is input to the tamper detection unit according to the output of the signal from the tamper detection unit to the tamper detection conductor. The transaction terminal device described.   4. The transaction terminal device according to claim 1, wherein the tamper detection conductor is a tamper detection pattern in which conductive wires are arranged in a wave shape. The tamper detection conductor is composed of a pair of electrodes and a conductive portion that conducts the pair of electrodes.
The conductive portion is held in a conductive state in contact with the electrode by an urging force due to elastic deformation of the elastic deformation portion in an assembled state sandwiched between two members. 4. The transaction terminal device according to any one of 4. A tamper detection device that detects a tamper due to an abnormality in a tamper detection conductor,
An abnormality detection signal is output to the tamper detection conductor to detect an abnormality in the tamper detection conductor, and an abnormality sign detection signal is output to the tamper detection conductor. A tamper detection device for detecting a sign of abnormality in a conductor for detection.

Images