JP2017117058A - Transaction terminal device and security module - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a transaction terminal device configured to secure tamper resistance of a magnetic card reader and reduce manufacturing cost and overall size of the device by minimizing an increase in the number of security parts.SOLUTION: A transaction terminal device includes a first security area 51 provided with a memory having confidential information stored therein and protected by tamper detection patterns, and a second security area 52 located abutting the first security area, provided with a magnetic card reader for reading magnetic cards disposed therein, and protected by tamper detection patterns. The first security area has an entire surrounding area protected by the tamper detection patterns, while the second security area has a surrounding area partially protected by the tamper detection patterns disposed in a portion of the area outside a portion abutting the first security area.SELECTED DRAWING: Figure 5

Description

  The present invention relates to a transaction terminal device and a security module including a memory for holding confidential information and a magnetic card reader for reading a magnetic card.

  In transaction terminal devices used for cashless payments such as credit cards and debit cards, so-called mobile payment terminals, a PIN is input using an input key, and for communication with a payment center or IC card. The encryption key to be used is held in the memory. Therefore, it is necessary to detect an attack act against the transaction terminal device, so-called tampering, to prevent the confidential information such as a personal identification number and an encryption key from being stolen and illegally used.

  In order to prevent confidential information from being stolen by such tampering, that is, as a technology for ensuring tamper resistance, a conductive area is conventionally placed around a security area where electronic components such as a memory for holding confidential information are arranged. A tamper detection pattern in which lines are arranged in a wave shape is provided, and tamper detection is detected by disconnection or short-circuiting of the tamper detection pattern generated by the tamper. When a tamper is detected, the confidential information stored in the memory is stored. A technique for erasing is known (see Patent Documents 1 and 2).

JP2013-3979A JP 2008-33593 A

  Now, the transaction terminal device is provided with a magnetic card reader that reads a magnetic card such as a credit card or a debit card. The probe is brought into contact with the wiring or terminal of the magnetic card reader to read information from the magnetic card reader. Attacks that steal are assumed. Therefore, a configuration in which a magnetic card reader is arranged in a security area in which a memory for holding confidential information is arranged as in the prior art can be considered. However, in such a configuration, since the size of the magnetic card reader is large, there is a problem that the size of the security area is also large and the manufacturing cost is increased.

  On the other hand, a configuration in which the magnetic card reader is protected separately from the security area is also conceivable. However, in such a configuration, it is not necessary to secure a high security level as in a security area in which a memory for holding confidential information is arranged, but since a security component dedicated to a magnetic card reader is required, the entire device The increase in the number of security parts cannot sufficiently suppress an increase in manufacturing cost, and the security device dedicated to the magnetic card reader has a problem that the entire apparatus is increased in size.

  The present invention has been devised to solve such problems of the prior art, and its main purpose is to ensure tamper resistance with respect to the magnetic card reader and to suppress an increase in security components, An object of the present invention is to provide a transaction terminal device and a security module configured to reduce the manufacturing cost and reduce the size of the entire device.

  The transaction terminal device of the present invention is a transaction terminal device comprising a memory for holding confidential information and a magnetic card reader for reading a magnetic card, and at least the memory is arranged and protected by a tamper detection pattern A first security area; and a second security area adjacent to the first security area, at least the magnetic card reader being disposed, and protected by a tamper detection pattern. Is entirely protected by the tamper detection pattern, and the second security area is partially surrounded by the tamper detection pattern provided in a portion excluding the portion facing the first security area. It is set as the structure which was protected.

  The security module of the present invention is a security module comprising a memory for holding confidential information and a magnetic card reader for reading a magnetic card, and at least the memory is arranged and protected by a tamper detection pattern. A first security area, a second security area adjacent to the first security area, at least the magnetic card reader being disposed and protected by a tamper detection pattern, the first security area and the first security area A module case that accommodates two security areas, wherein the first security area is entirely protected by the tamper detection pattern, and the second security area is the first security area. It is provided in the part excluding the part facing By the tamper detection pattern, the structure in which to be protected around partially.

  According to the present invention, in the second security area where the magnetic card reader is arranged, the portion facing the first security area is protected by the tamper detection pattern that protects the first security area. There is no need to place security components. As a result, it is possible to secure tamper resistance regarding the magnetic card reader, suppress an increase in security parts, reduce the manufacturing cost, and reduce the size of the entire apparatus.

The perspective view of transaction terminal device 1 concerning this embodiment Rear view of transaction terminal device 1 Longitudinal sectional view of transaction terminal device 1 Front view of security module 38 Sectional drawing of the security module 38 cut | disconnected by the AA line shown in FIG. The principal part perspective view of the security module 38 Explanatory drawing explaining the tamper detection pattern 71 and the tamper detection switch 72 provided in the security module 38 Functional block diagram showing a schematic configuration of transaction terminal apparatus 1

  A first invention made to solve the above problems is a transaction terminal device comprising a memory for holding confidential information and a magnetic card reader for reading a magnetic card, wherein at least the memory is arranged, A first security area protected by a tamper detection pattern; and a second security area adjacent to the first security area, at least the magnetic card reader being disposed and protected by the tamper detection pattern. The first security area is entirely protected by the tamper detection pattern, and the second security area is provided in a portion excluding a portion facing the first security area. The surroundings are partially protected by the detection pattern.

  According to this, in the second security area where the magnetic card reader is arranged, the portion facing the first security area is protected by the tamper detection pattern that protects the first security area. Need not be placed. As a result, it is possible to secure tamper resistance regarding the magnetic card reader, suppress an increase in security parts, reduce the manufacturing cost, and reduce the size of the entire apparatus.

  Further, in the second invention, the tamper detection pattern for protecting the second security area is covered with a detachable member and faces the area that is invisible in use. It is set as the provided structure.

  According to this, in the second security area, in the part facing the area that is covered with a detachable member and becomes invisible in use, the user cannot easily see the trace of the attacking action. There is a high possibility that an action is performed, and tamper resistance can be improved by arranging a tamper detection pattern here.

  According to a third aspect of the present invention, the tamper detection pattern for protecting the second security area is provided in a portion facing a battery housing portion that houses a battery and is closed by a battery cover.

  According to this, since the battery housing part becomes invisible in use by being closed with the battery cover, the tamper resistance can be improved by arranging the tamper detection pattern on the part facing the battery housing part. it can.

  Further, the fourth invention further includes a contact IC card reader for reading a contact IC card, and the contact IC card reader is arranged in the first security area.

  According to this, since the contact type IC card reader is small, even if it is arranged in the first security area, the size of the first security area is not so large, and an increase in manufacturing cost can be suppressed to a small level.

  The fifth invention further includes a key member on which a plurality of input keys for inputting confidential information are arranged, and a sensor that is disposed on the back side of the key member and detects an operation of the input key. The key member is disposed adjacent to the first security area on the side opposite to the magnetic card reader, and the sensor is disposed in the first security area.

  According to this, since the input information by the input key output from the sensor is held in the first security area, it is possible to ensure tamper resistance against the input key.

  According to a sixth aspect of the invention, the first security area is set to have a high security level, and the second security area is set to have a low security level.

  According to this, since the size of the magnetic card reader is large, the size of the second security area is also large, but the second security area has a higher security level than the non-security area, and the security level is higher than the first security area. Therefore, an increase in manufacturing cost due to security parts can be suppressed to a small level, and necessary and sufficient tamper resistance can be ensured.

  According to a seventh aspect of the present invention, the first security area is provided with the tamper detection pattern, and is provided with two substrates disposed opposite to each other at a predetermined interval, and the tamper detection pattern. And a security sheet arranged so as to go around the outer periphery of the space defined by the two substrates.

  According to this, a high security level can be ensured in the first security area.

  According to an eighth aspect of the invention, the first security area and the second security area are housed in the same module case to constitute a security module.

  According to this, by integrating the first security area and the second security area as a security module, it can be shared with other models, for example, between a stationary transaction terminal device and a portable transaction terminal device. It becomes easy.

  The ninth invention is a security module comprising a memory for holding confidential information and a magnetic card reader for reading a magnetic card, wherein at least the memory is arranged and protected by a tamper detection pattern. A first security area, a second security area adjacent to the first security area, at least the magnetic card reader being disposed, and protected by a tamper detection pattern, the first security area, and the second security area A module case that accommodates the security area, wherein the first security area is entirely protected by the tamper detection pattern, and the second security area is the first security area. The tamper detection pattern provided in a portion excluding the facing portion The emissions, a configuration which is adapted to protect the surroundings partially.

  According to this, similarly to the first invention, it is possible to secure tamper resistance with respect to the magnetic card reader, suppress an increase in security parts, reduce the manufacturing cost, and reduce the size of the entire apparatus.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

  FIG. 1 is a perspective view of a transaction terminal device 1 according to the present embodiment. FIG. 2 is a rear view of transaction terminal device 1 shown in FIG. FIG. 3 is a longitudinal sectional view of transaction terminal device 1 shown in FIG.

  As shown in FIG. 1, this transaction terminal device 1 is cashless using a magnetic card C1, a contact IC card C2, a contactless IC card (not shown), etc. as a credit card or a debit card. This is a mobile payment terminal that performs payment, and a display input panel 4 and a keypad unit 5 are arranged on the front surface 3 of the housing 2.

  The housing 2 is composed of an upper case 2a and a lower case 2b. The display input panel 4 is a so-called touch panel display in which a liquid crystal display panel and a touch panel are combined. The display input panel 4 is provided so that the peripheral edge thereof is covered with the frame panel 7. On the keypad unit 5, a plurality of operation keys, specifically, a power key and input keys such as a numeric keypad and a function key are arranged. A cover 6 is provided on the side surface of the housing 2 to cover the power plug and the memory card slot.

  As shown in FIG. 2, a camera 8, a speaker 9, and a connection terminal 10 are provided on the back side of the housing 2. The camera 8 captures a barcode or the like. The speaker 9 outputs sound such as an alarm sound. The connection terminal 10 is connected to a connection terminal of a cradle (not shown) and supplies power for charging.

  As shown in FIG. 3, the transaction terminal device 1 includes a printer 12. The printer 12 is a so-called thermal printer that prints on a recording sheet by a thermal method. In the printer 12, printing is performed on the recording sheet drawn out from the roll sheet RP in which the recording sheet is wound in a roll shape, and a paper discharge port. 13 is discharged.

  Further, a magnetic card reader 21 and a contact type IC card reader 22 are provided inside the housing 2.

  The magnetic card reader 21 reads a magnetic card C1 inserted into a card slot 23 provided at the end of the housing 2. The magnetic card C1 is a so-called magnetic stripe card in which a magnetic stripe (magnetic tape) is provided on both sides or one side of the card body. When the magnetic card C1 is inserted into the card slot 23, the read head comes into contact with the magnetic stripe. The information recorded on the magnetic stripe can be read by a swipe operation of sliding in the left-right direction (see FIG. 1). Thus, the card slot 23 for a magnetic card is opened in three directions for sliding the magnetic card.

  The contact type IC card reader 22 reads the contact type IC card C <b> 2 inserted into a card slot 24 provided at the end of the housing 2. The contact type IC card C2 has an IC module provided with electrodes on one side of the card body. When the contact type IC card C2 is inserted into the card slot 24, the electrodes of the contact type IC card C2 are in contact with each other. The information recorded on the IC module can be read by contacting the terminal of the IC card reader 22 (see FIG. 1). As described above, the card slot 24 for a contact type IC card only has to be inserted into the contact type IC card, so that it opens in one direction, and a shutter 25 is provided at the opening.

  In addition, an NFC antenna 27, a communication module 28, and a battery 29 are provided inside the housing 2.

  The NFC antenna 27 performs communication with a non-contact type IC card or the like having an electronic money function by NFC (Near Field Communication). The communication module 28 performs wireless communication with a server of the payment processing system. The battery 29 supplies power to each part of the transaction terminal device 1. A battery cover 31 for closing the opening for taking in and out the battery 29 is provided in the battery housing portion 30 in which the battery 29 is housed.

  As described above, the transaction terminal device 1 makes a cashless payment using a magnetic card, a contact IC card, a non-contact IC card, and the like, and can print a voucher in which the details of the payment are recorded. In addition, the transaction terminal device 1 may be provided with a user authentication using an ID card, for example, a function for authenticating a user of the transaction terminal device 1.

  A main board 32 and a sub board 33 are provided on the back side of the display input panel 4 inside the housing 2. Various electronic components for controlling each part of the transaction terminal device 1 are mounted on the main board 32 and the sub board 33. For example, a liquid crystal display panel and a touch panel that constitute the display input panel 4 are connected to the main board 32, and electronic components that control these are mounted.

  Further, a touch sensor substrate 34 and a security area main substrate 35 are arranged on the back side of the keypad portion 5 inside the housing 2. These substrates 34, 35, these substrates 34, A frame member 36 for holding the gap 35 is housed in the module case 37 together with the magnetic card reader 21 and the contact IC card reader 22 to constitute a security module 38.

  Next, the security module 38 shown in FIG. 3 will be described. FIG. 4 is a front view of the security module 38. FIG. 5 is a cross-sectional view of the security module 38 taken along line AA shown in FIG. FIG. 6 is a perspective view of a main part of the security module 38.

  As shown in FIG. 4, the keypad unit 5 includes a key sheet 43 in which a plurality of input keys 41 and a power key 42 are arranged. In the example shown in FIG. 4, a numeric keypad, a function key, a correction key, and a confirmation key are provided as the input keys 41. By operating these input keys 41, confidential information such as a personal identification number can be input / corrected, and the entered confidential information can be confirmed to make a transaction or settlement. You can also enter English letters with the numeric keypad.

  A touch sensor substrate 34 is disposed on the back side of the key sheet 43. The touch sensor substrate 34 is provided with a capacitive touch sensor for detecting the operation of the input key 41 on the surface.

  As shown in FIG. 5, in the security module 38, the touch sensor substrate 34 is disposed so as to close the opening on the front side of the module case 37.

  In the security module 38, the inside of the module case 37 is partitioned into a first security area 51 and a second security area 52. In the first security area 51, a touch sensor substrate 34, a security area main substrate 35, a frame member 36, and a contact type IC card reader 22 are arranged. In the second security area 52, the magnetic card reader 21 is arranged.

  On the touch sensor substrate 34, a capacitive touch sensor that detects an operation of the input key 41, a control circuit that processes an output signal of the touch sensor, and the like are mounted. On the security area main board 35, electronic components such as a memory for storing confidential information such as a password and an encryption key are mounted. The security area main board 35 is mounted with a processor which is electrically connected to a tamper detection pattern described below and serves as a tamper detection unit for detecting a tamper.

  The first security area 51 is partitioned by a touch sensor substrate 34 and a security area main substrate 35 that are arranged to face each other, and a contact type IC card reader is provided between the touch sensor substrate 34 and the security area main substrate 35. 22 is arranged. The frame member 36 supports the security area main board 35 and the touch sensor board 34 so as to face each other at a predetermined interval.

  The touch sensor substrate 34 and the security area main substrate 35 are provided with tamper detection patterns in which conductive wires are arranged in a wave shape. A security sheet 55 provided with a tamper detection pattern is attached to the frame member 36 so as to go around the outer periphery of the space defined by the security area main board 35 and the touch sensor board 34 (FIG. 6). reference).

  As a result, the first security area 51 is covered with the touch sensor substrate 34 having the tamper detection pattern, the security area main substrate 35, and the security sheet 55, and is provided on these members. The tamper detection pattern protects the electronic components mounted on the touch sensor substrate 34 and the security area main substrate 35 and the contact IC card reader 22, and the memory information stored in the memory for storing confidential information or the contact IC card reader The tamper resistance can be ensured against the attacking action of stealing the read information by 22.

  Further, the key sheet 43 is disposed adjacent to the first security area 51 on the side opposite to the magnetic card reader 21 and processes the output signal of the touch sensor that detects the operation of the input key 41 of the key sheet 43. Since the control circuit is arranged on the back surface side of the touch sensor substrate 34 and is located in the first security area 51, tamper resistance is ensured against an attack act of stealing input information by the input key 41. Can do.

  Thus, since the memory etc. which hold | maintain confidential information are arrange | positioned in the 1st security area 51, and high tamper resistance is requested | required, this 1st security area 51 is set high in the security level. Since the entire periphery is protected by the tamper detection pattern, high tamper resistance can be ensured.

  In the second security area 52, the magnetic card reader 21 is provided. The magnetic card reader 21 includes a magnetic head 57 that reads magnetic data of a magnetic stripe, and a signal processing circuit that processes a read signal output from the magnetic head 57. Two magnetic heads 57 are provided opposite to each other so that the magnetic stripes provided on both sides of the magnetic card can be read, and also for reading magnetic cards such as credit cards and debit cards. Multiple tracks can be read. Thereby, the dimension of the magnetic card reader 21 is increased, and it is necessary to secure a large accommodation space.

  In such a magnetic card reader 21, an attacking action of stealing information read by the magnetic card reader 21 by bringing a probe into contact with wiring drawn from the magnetic head 57 or a terminal of a signal processing circuit is assumed. Therefore, in order to prevent such an attacking action, it is necessary to ensure tamper resistance of the second security area 52 in which the magnetic card reader 21 is accommodated.

  Here, a portion of the second security area 52 facing the first security area 51 is protected by a tamper detection pattern provided in the first security area 51. In particular, the magnetic card reader 21 is arranged so as to be hidden by the first security area 51 defined by the security area main board 35 and the touch sensor board 34 in a front view. For this reason, the attack to the magnetic card reader 21 from the direction of the 1st security area 51, ie, the front side of the housing | casing 2, can be prevented reliably.

  In the second security area 52 adjacent to the outer wall portion of the housing 2, traces of the attacking action remain on the outer surface of the housing 2, and the user can easily see the attacking action. Is less likely to be Therefore, tamper resistance can be ensured in the second security area 52 adjacent to the outer wall of the housing 2 without providing any security components.

  On the other hand, in the portion of the second security area 52 that is not adjacent to the outer wall portion of the housing 2, no trace of the attacking action is left on the outer surface of the housing 2. In the part facing the area that is covered with a simple exterior member and invisible in use, the trace of the attacking action remains only in the part covered with the exterior member, and the user cannot easily see the attacking action. Is likely to be done. Therefore, in such a part, a security sheet is provided to ensure tamper resistance.

  In the present embodiment, a security sheet 58 is affixed to the inner surface of the module case 37 facing the battery housing 30 (see FIG. 3). In the battery housing portion 30, the battery 29 is housed and closed by the battery cover 31. Therefore, when an attacking action is performed on the magnetic card reader 21 from the battery housing portion 30, the module case 37 facing the battery housing portion 30 is Since the trace remains only in the portion and the user cannot easily see it, the detection of the attacking action is delayed, and the attacking action is likely to be performed. For this reason, the security sheet 58 is provided in the part of the module case 37 facing the battery housing 30.

  A portion of the module case 37 facing the battery housing portion 30 includes a first wall portion 61 extending in the thickness direction of the housing 2 and a second wall portion 62 extending in a direction along the front surface of the housing 2. The two wall portions 61 and 62 are formed in a state of being substantially orthogonal to each other and have an L-shaped cross section. The security sheet 58 is attached to the inner surface of the L-shaped cross section of the module case 37. In particular, the first wall portion 61 is covered with the security sheet 58 over the entire surface. On the other hand, the second wall portion 62 is partially covered with a security sheet 58 only in a portion close to the magnetic card reader 21.

  As described above, the second security area 52 is adjacent to the first security area 51 and houses the magnetic card reader 21, and the tamper detection pattern provided in the first security area 51 and the module case 37. It is protected by the tamper detection pattern of the security sheet 58 provided. The second security area 52 is partially protected by a tamper detection pattern provided in a portion excluding the portion facing the first security area 51, and has a security level compared to the first security area. Is set low, but the security level is higher than the areas other than the first and second security areas, that is, the non-security area, and it is necessary while suppressing the cost and man-hours of members necessary for ensuring tamper resistance. Sufficient tamper resistance can be ensured, and the magnetic card reader 21 can be reliably protected against an attack act of stealing read information.

  Next, the tamper detection pattern 71 and the tamper detection switch 72 provided in the security module 38 shown in FIG. 5 will be described. FIG. 7 is an explanatory diagram for explaining the tamper detection pattern 71 and the tamper detection switch 72 provided in the security module 38.

  In the present embodiment, tamper detection patterns 71 are provided on the touch sensor substrate 34, the security area main substrate 35, the security sheet 55 attached to the frame member 36, and the security sheet 58 attached to the module case 37 of the security module 38, respectively. A total of four tamper detection patterns 71 are provided. In these tamper detection patterns 71, conductive lines (tamper detection lines) are arranged in a wave shape.

  Further, tamper detection switches 72 are connected in series to the tamper detection patterns 71 of the touch sensor substrate 34 and the security area main substrate 35. The tamper detection switch 72 includes a pair of electrodes 73 provided on the touch sensor substrate 34 and the security area main substrate 35, and a switch member 74.

  The switch member 74 is provided so as to be sandwiched between the touch sensor substrate 34 and the security area main substrate 35, a conductive portion 75 that conducts a pair of electrodes 73, the touch sensor substrate 34, the security area main substrate 35, and the like. And an elastic deformation portion 76 that holds the conductive portion 75 in contact with the electrode 73 by an urging force caused by elastic deformation in a state of being sandwiched between the two.

  Therefore, when an attack action is performed in which the touch sensor substrate 34 or the security area main substrate 35 is removed and the first security area 51 is opened, the tamper detection switch 72 is turned off, that is, the conductive state of the electrode 73 is released. Thus, tampering can be detected.

  Each tamper detection pattern 71 is connected to a tamper detection unit 78. The tamper detection unit 78 includes a processor and is provided with a plurality of input / output ports. At the time of tamper detection, a high / low signal is output from the output port to the tamper detection pattern 71, and a signal corresponding to the high / low signal is output. The detection pattern 71 is input to the input port, and the tamper detection pattern 71 is disconnected or the tamper detection switch 72 is turned off based on the output signal and the input signal.

  Accordingly, a hole is made in the touch sensor substrate 34 and the security area main substrate 35, the security sheet 55 attached to the frame member 36 is broken, or a hole is made in the security sheet 58 attached to the module case 37. When a disconnection occurs in the tamper detection pattern 71 due to such an attacking action, the tamper detection unit 78 detects the tamper. Further, when the touch sensor substrate 34 and the security area main substrate 35 are removed and the first security area is opened, the tamper detection switch 72 is turned off and the tamper detection pattern 71 is tampered in the same manner as when the tamper detection pattern 71 is disconnected. The tamper is detected at the unit 78.

  It should be noted that tamper detection lines (conductive wires) can be provided twice in one system of tamper detection pattern 71, that is, two tamper detection lines can be provided so as to run side by side. In this case, there are eight tamper detection lines in total. In this case, if a short circuit occurs in two tamper detection lines running side by side due to an attacking action, an abnormality that the input port does not go high occurs when the output port goes high. Can be detected.

  Next, a schematic configuration of the transaction terminal device 1 shown in FIG. 1 will be described. FIG. 8 is a functional block diagram illustrating a schematic configuration of the transaction terminal device 1.

  The transaction terminal device 1 is provided with a main control unit 81, a display control unit 82, and a power supply control unit 83. These control parts 81-83 are comprised with a processor and are mounted in the main board | substrate 32 and the sub board | substrate 33 (refer FIG. 3). The main control unit 81 controls the liquid crystal display panel 84 of the display input panel 4 via the display control unit 82 and controls the touch panel 85 of the display input panel 4. The main control unit 81 controls the communication module 28, the camera 8, and the speaker 9. In addition, the main control unit 81 controls a power supply control unit 83 that controls power supply by the battery 29.

  In the keypad unit 5, the operation of the input key 41 such as a numeric keypad is detected by a touch sensor 93 provided on the touch sensor substrate 34 (see FIG. 3), and the operation of the power key 42 is detected by a power key switch 94. Is done. When the operation of the power key 42 is detected by the power key switch 94, power supply to the touch sensor 93 is started in the power control unit 83 in accordance with an instruction from the main control unit 81, and input by the input key 41 becomes possible. Become.

  In the first security area 51, a security area control unit 91, a flash memory 92, and a tamper detection unit 78 are provided. The security area control unit 91 and the tamper detection unit 78 are configured by a processor, and are mounted on the security area main board 35 (see FIG. 3). The flash memory 92 stores confidential information such as a password and an encryption key, and is mounted on the security area main board 35.

  The security area control unit 91 controls the magnetic card reader 21, the contact type IC card reader 22, and the touch sensor 93. The security area control unit 91 is connected to the main control unit 81, and information acquired by the magnetic card reader 21, the contact type IC card reader 22 and the touch sensor 93 is transmitted from the security area control unit 91 to the main control unit 81. The information is transmitted from the communication module 28 to the server of the payment processing system in response to an instruction from the main control unit 81.

  The tamper detection unit 78 detects an abnormality of the tamper detection pattern, that is, disconnection or short of the tamper detection pattern, based on the output signal and the input signal for the tamper detection pattern 71. When the tamper detection unit 78 detects an abnormality in the tamper detection pattern, the security area control unit 91 deletes confidential information such as an encryption key held in the flash memory 92 and confirms that a tamper has been detected. The represented history information is stored in the flash memory 92.

  As mentioned above, although this invention was demonstrated based on specific embodiment, these embodiment is an illustration to the last, Comprising: This invention is not limited by these embodiment. Moreover, all the components of the transaction terminal device and the security module according to the present invention shown in the above embodiment are not necessarily essential, and can be appropriately selected at least as long as they do not depart from the scope of the present invention. .

  For example, in the above-described embodiment, a mobile payment terminal that performs a cashless payment using a magnetic card, a contact IC card, or the like has been described as an example of a transaction terminal device. It is not limited to the use of simple settlement. Moreover, the transaction terminal device in the present invention is not limited to such a portable type, and may be a stationary type.

  The transaction terminal device and the security module according to the present invention have the effects of ensuring tamper resistance with respect to the magnetic card reader and suppressing an increase in security components, thereby reducing the manufacturing cost and reducing the size of the entire device. In addition, the present invention is useful as a transaction terminal device, a security module, and the like that include a memory that holds confidential information and a magnetic card reader that reads a magnetic card.

DESCRIPTION OF SYMBOLS 1 Transaction terminal device 2 Case, 2a Upper case, 2b Lower case 3 Front surface 4 Display input panel 5 Keypad part 21 Magnetic card reader 22 Contact type IC card reader 34 Touch sensor substrate 35 Security area main substrate 36 Frame member 37 Module case 38 Security Module 41 Input Key 42 Power Key 43 Key Sheet (Key Member)
51 First security area 52 Second security area 55 Security sheet 57 Magnetic head 58 Security sheet 61, 62 Wall portion 71 Tamper detection pattern 72 Tamper detection switch 73 Electrode 74 Switch member 75 Conductive portion 76 Elastic deformation portion 78 Tamper detection portion 83 Power control unit 91 Security area control unit 92 Flash memory 93 Touch sensor

Claims (9)

A transaction terminal device comprising a memory for holding confidential information and a magnetic card reader for reading a magnetic card,
A first security area in which at least the memory is arranged and protected by a tamper detection pattern;
Adjacent to the first security area, at least the magnetic card reader is disposed, and a second security area protected by a tamper detection pattern;
With
The first security area is entirely protected around by the tamper detection pattern,
The transaction terminal apparatus, wherein the second security area is partially protected by the tamper detection pattern provided in a portion excluding a portion facing the first security area. .   The tamper detection pattern for protecting the second security area is provided in a portion of the second security area facing an area that is covered with a detachable member and becomes invisible in use. The transaction terminal device according to claim 1.   3. The transaction terminal according to claim 2, wherein the tamper detection pattern for protecting the second security area is provided at a portion facing a battery housing portion in which a battery is housed and closed by a battery cover. apparatus. Furthermore, a contact type IC card reader for reading the contact type IC card is provided,
4. The transaction terminal device according to claim 1, wherein the contact type IC card reader is arranged in the first security area. Furthermore, a key member in which a plurality of input keys for inputting confidential information is arranged,
A sensor disposed on the back side of the key member for detecting an operation of the input key;
With
The key member is disposed adjacent to the first security area on the side opposite to the magnetic card reader,
The transaction terminal device according to any one of claims 1 to 4, wherein the sensor is arranged in the first security area. The first security area is set to a high security level,
The transaction terminal device according to any one of claims 1 to 5, wherein the second security area has a low security level. The first security area is:
Two substrates provided with the tamper detection pattern and arranged to face each other at a predetermined interval;
A security sheet provided with the tamper detection pattern and arranged to circulate around an outer periphery of a space defined by the two substrates;
The transaction terminal device according to claim 6, which is covered with   8. The transaction terminal device according to claim 1, wherein the first security area and the second security area are accommodated in the same module case to constitute a security module. . A security module comprising a memory for holding confidential information and a magnetic card reader for reading a magnetic card,
A first security area in which at least the memory is arranged and protected by a tamper detection pattern;
Adjacent to the first security area, at least the magnetic card reader is disposed, and a second security area protected by a tamper detection pattern;
A module case for accommodating the first security area and the second security area;
With
The first security area is entirely protected around by the tamper detection pattern,
The security module, wherein the second security area is partially protected by the tamper detection pattern provided in a portion excluding a portion facing the first security area.

Images