JP4134102B2 - Fraud equipment attachment detection device - Google Patents

Description

  The present invention relates to a fraudulent equipment attachment detection device, and more particularly to a fraudulent equipment attachment detection device that detects unauthorized modification that causes leakage of security information based on a change in the weight of a component.

  Conventionally, in settlement using a debit card, a credit card or the like, there are often accidents in which a credit number magnetically recorded on the card is illegally read and misused. In many cases, illegal reading of a credit card is performed by opening a main body case of a payment terminal and secretly installing a recording device for storing data read by a magnetic head in the device. In order to prevent this, a sensor such as a micro switch that detects that the main unit case has been opened is provided, and when the micro switch is activated, confidential information stored in the memory is deleted or an alarm is issued to the outside. It is. Also, a tamper resistant device that detects fraud when it is disassembled in a different order from a predetermined disassembly order to distinguish it from normal maintenance is disclosed (see Patent Document 1). Here, the tamper resistant device is a device having tamper resistance, and the tamper resistant is an internal structure of software or hardware and difficulty in analyzing stored data.

Recently, however, there have been cases in which unauthorized operation is performed from a hole in the main body case without opening the main body case. In order to prevent this, an electronic trading device has been disclosed in which wiring is stretched around the inner surface of the case, and when a hole is drilled in the main body case with a drill or the like, this wiring is disconnected to detect unauthorized work (patent) Further, a payment terminal device having an unauthorized modification detection function that extends a wiring only around the magnetic card reader is disclosed (see Patent Document 3).
Japanese Patent Laid-Open No. 2003-186752 JP-A-11-353237 JP 2004-86325 A

  As described above, the method of detecting that the main body case is opened cannot cope with a case where a hole is made in the main body case, and the wiring as disclosed in Patent Documents 2 and 3 is stretched around. There is a problem that the internal inspection is not easy in the method of detecting the intrusion, and a tamper-resistant detection unit itself function is stopped by making a hole near the tamper-resistant detection unit, and then unauthorized modification is made to the payment terminal. I can not cope with the case. In a mechanical part such as a switch, it is possible to easily disable the function of the tamper resistant detection unit by hardening the periphery of the switch with an adhesive or the like.

  An object of the present invention is to provide a fraudulent equipment attachment detection device that detects a change in weight by a weight sensor provided in a component device subject to fraud and detects that a fraudulent equipment such as a skimming device is attached. There is to do.

The unauthorized equipment attachment detection device of the present invention is
An unauthorized device attachment detection device that detects attachment of unauthorized equipment for unauthorized reading in an apparatus for preventing unauthorized reading of information so as to receive a weight of a component device in which unauthorized equipment is predicted to be installed in the apparatus for preventing unauthorized reading of information The weight sensor disposed in the vehicle, the regular weight storage unit that stores a predetermined weight of the component device, the weight of the component device detected by the weight sensor, and the weight stored in the regular weight storage unit are compared. And when the difference exceeds a predetermined value, it has the control part which outputs the abnormality alarm which shows that.

  The control unit is input from the input unit that receives the output of the weight sensor, the input control unit that receives the output from the measurement timing output unit that transmits the timing signal at a predetermined timing, and outputs the input value of the input unit, and the input from the input control unit The comparison unit for comparing the input value of the input unit and the predetermined weight of the component device stored in the normal weight storage unit in advance, and the weight difference of the comparison result in the comparison unit exceeds a predetermined value In this case, an abnormality detection unit that outputs an abnormality alarm may be provided. Further, the output from the measurement timing output unit may be output when the information illegal read prevention target device is activated, or may be output at a predetermined time interval.

  The component device is composed of a plurality of components, and the weight sensor may be provided on a common board on which the plurality of components are mounted, and the weight sensor is provided on each of the plurality of components, and each measured weight is measured. May be compared with a predetermined weight of each component stored in the regular weight storage unit, a plurality of component devices are provided, and a weight sensor is provided in each of the plurality of component devices. Each measured weight may be compared with a predetermined weight of each component device stored in the regular weight storage.

  The component device may include a magnetic card reader, or may include an open / close detection sensor for a main body case provided for detecting unauthorized reading.

  For example, a change in the weight of a component device is detected by a weight sensor disposed so as to receive the weight of the component device that is expected to be attached to unauthorized equipment such as a magnetic card reader or a body case open / close detection sensor. Since the attachment of the illegal equipment or the like is detected, the presence of an adhesive or the like added to the open / close detection sensor for stopping the operation of the attached skimming device or the switch can be easily detected.

  The present invention relates to a change in the weight of a component by a weight sensor arranged to receive the total weight of the component that is expected to be attached to an unauthorized device such as a magnetic card reader or an opening / closing detection sensor of a main body case. Is detected to detect the attachment of an unauthorized device or the like, and for example, it is possible to easily detect the presence of an adhesive or the like added to the open / close detection sensor to stop the operation of the attached skimming device or switch. . It is also possible to confirm that the function of the weight sensor itself is valid by performing detection timing at the time of activation of the device for preventing unauthorized reading of information or at predetermined time intervals.

  In the illegal equipment attachment detection device of the present invention, the weight of the component device that is the target of the illegal act in the target device is read at a predetermined timing, and the difference exceeding the predetermined value is compared with the normal weight stored in advance. When it occurs, it is judged that there is an abnormality and the outside is contacted.

  Next, an embodiment of the unauthorized equipment attachment detection apparatus to which the present invention is applied will be described with reference to the drawings. FIG. 1 is a schematic configuration diagram of a fraudulent equipment attachment detection device according to an embodiment of the present invention, and FIG. It is a schematic diagram which shows the state installed in. The unauthorized equipment attachment detection device 10 includes a weight sensor 20, a control unit 30, and a regular weight storage unit 38. The weight sensor 20 can detect the weight of the component device 41 that is the subject of fraud between the component device 41 that is the subject of the fraudulent act of the device 40 to prevent unauthorized reading of information and the structure 50 that holds the component device 41. It is provided as follows. The regular weight storage unit 38 stores in advance the regular weight of the component device 41 that is the subject of fraud. The control unit 30 includes an input unit 31 that receives the output of the weight sensor 20, an input control unit 32 that receives an output from the measurement timing output unit 42 of the information illegal read prevention target device 40, and outputs an input value of the input unit 31. The comparison unit 33 that compares the input value of the input unit 31 and the normal weight of the component device 41 that is the target of fraud stored in the normal weight storage unit 38 in advance, and the compared weight difference is a predetermined value The abnormality detection unit 34 that recognizes that an abnormality has occurred in the component device 41 that is the target of fraudulent activity and outputs an abnormality alarm to the display unit 43 and the abnormality communication unit 44 of the information unauthorized read prevention target device 40. Have. The abnormality communication unit 44 to which the abnormality alarm is input outputs an abnormality alarm to a preset contact address. Here, the measurement timing output unit 42 is provided in the information unauthorized read prevention target device 40, but may be provided in the unauthorized device attachment detection device 10. The abnormality alarm is output to the information illegal read prevention target device 40, but may be output directly to a predetermined output destination.

  The component device 41 subject to fraud is, for example, a magnetic card reader of a payment terminal device that is likely to be fitted with a skimming device or the like, or an open / close detection sensor of a main body case provided for detecting fraud. . In the case of an open / close detection sensor, when an obstacle is added so as not to operate the switch or when the switch is adhered with an adhesive, the weight increases, so that the change is detected.

  The proper weight of the component device 41 subject to fraud is measured by the weight sensor 20 at the time of shipment of the apparatus or at the time of adjustment after installation, and is stored in the normal weight storage unit 38.

  The measurement timing output from the measurement timing output unit 42 is usually performed when the device 40 is inactive, so that it may normally be at the time of starting the information unauthorized read prevention target device 40. However, if the frequency of fraud is high, If you think, you may measure at any time interval. Since reading is performed at a predetermined interval in this way, erroneous detection that may occur due to vibration of the device in use or the like can be suppressed.

  Next, the operation of the unauthorized equipment attachment detection device 10 will be described. The control unit 30 and the normal weight storage unit 38 of the unauthorized device attachment detection device 10 are installed in the device 40 for preventing unauthorized reading of information, and the weight sensor 20 is a structure that supports the component device 41 and the weight of the unauthorized device. Install between 50. In this case, depending on the size of the component device 41 and the like, two or more weight sensors 20 may be combined to form a set of weight sensors 20. FIG. 2 is a schematic partial cross-sectional side view showing an example in which the weight sensor 20 is attached to a magnetic card reader subject to fraud, and a magnetic having a magnetic card reader head 46 that is a component device 41 subject to fraud. In order to receive the weight of the card reader 45, a pair of weight sensors 20 is disposed between the structure 50 and the output thereof is input to the input unit 31 of the unauthorized equipment attachment detection device 10. The structure 50 is fixed to the frame of the information unauthorized read prevention target device 40 with screws 51.

  The weight of the component device 41 subject to fraud is measured by the weight sensor 20 at the time of shipment of the apparatus or at the time of adjustment after installation, and stored in the regular weight storage unit 38 in advance.

  The input control unit 32 receives a timing signal from the measurement timing output unit 42 at a predetermined time after the start of the use of the information illegal read prevention target device 40, for example, when the device is started, and the output from the gravity sensor 20 is input to the input unit 31. To the comparison unit 33. The comparison unit 33 compares the regular weight of the component device 41 that is the target of the illegal act read from the regular weight storage unit 38 with the input weight. If the compared weight difference does not exceed the predetermined value, the next measurement timing is awaited on the assumption that there has been no illegal operation. The predetermined value is set in consideration of the measurement error width of the weight sensor and the influence of vibration in the environment. When the compared weight difference exceeds a predetermined value, an excess signal is output to the abnormality detection unit 34, and the abnormality detection unit 34 determines that an abnormality has occurred in the component device 41 that is the subject of the fraudulent action and issues an abnormality alarm. Is output to the display unit 43 and the abnormality communication unit 44 of the device for preventing unauthorized reading of information 40. The abnormality communication unit 44 to which the abnormality alarm is input outputs an abnormality alarm to a preset contact, and the information illegal read prevention target device 40 disallows the use of the terminal of the component device 41 subject to the illegal act. . If necessary, information to be protected is erased from the record.

  Here, although the description has been made assuming that the component device 41 subject to the fraudulent act is one, the component device 41 subject to the fraudulent act is composed of a plurality of components, and each component is a target of the fraudulent equipment attachment. A pair of weight sensors 20 may be provided for the entire terminal so as to measure the weight of the entire terminal on which a plurality of components that are subject to fraud are arranged. Also, a weight sensor 20 is provided for each component subject to fraud, the components are identified in time series by the input unit 31, and each component of the component device 41 that is the subject of the fraud is compared by the comparison unit 33. An abnormality may be detected in comparison with the normal weight corresponding to. As a result, it is possible to specify the component of the component device 41 that is the target of the fraudulent act to which the fraudulent equipment is attached.

  When there are a plurality of component devices 41 subject to fraudulent activity, the weight sensor 20 is provided for each component device 41 subject to fraudulent activity, and the component devices 41 are identified in time series by the input unit 31 and compared. The unit 33 may detect an abnormality in comparison with the normal weight corresponding to the component device 41 that is the subject of the fraud.

  Up to now, the explanation has been mainly made on the magnetic card reader, but the present invention is not limited to this, and the present invention is not limited to this. Can be widely applied to certain components.

It is a typical lineblock diagram of a fraudulent equipment attachment detection device of an embodiment of the invention. It is a schematic diagram which shows the state which installed the weight sensor of the fraudulent equipment attachment detection apparatus of embodiment of this invention in the component apparatus used as the object of fraud.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 Fraud equipment attachment detection apparatus 20 Weight sensor 30 Control part 31 Input part 32 Input control part 33 Comparison part 34 Abnormality detection part 38 Regular weight memory | storage part 40 Information illegal read prevention target apparatus 41 Component apparatus 42 which becomes object of fraudulent act 42 Measurement timing Output unit 43 Display unit 44 Abnormal communication unit 45 Magnetic card reader 46 Magnetic card reader head 50 Structure 51 Screw

Claims (9)

An unauthorized equipment attachment detection device for detecting the attachment of unauthorized equipment for unauthorized reading in an information unauthorized readout prevention target device,
A weight sensor arranged to receive a weight of a component device on which the unauthorized equipment is predicted to be attached in the information illegal read prevention target device;
A regular weight storage unit for storing a predetermined weight of the component device;
The weight of the component device detected by the weight sensor is compared with the weight stored in the normal weight storage unit, and if the difference exceeds a predetermined value, an abnormality alarm indicating that fact is output. A fraudulent equipment attachment detection device comprising: a control unit; The controller is
An input unit for inputting the output of the weight sensor;
An input control unit that receives an output from a measurement timing output unit that transmits a timing signal at a predetermined timing and outputs an input value of the input unit;
A comparison unit that compares an input value of the input unit input from the input control unit with a predetermined weight of the component device stored in the regular weight storage unit in advance;
2. The unauthorized equipment attachment detection device according to claim 1, further comprising an abnormality detection unit that outputs the abnormality alarm when a weight difference as a result of comparison by the comparison unit exceeds a predetermined value.   The unauthorized equipment attachment detection device according to claim 2, wherein the output from the measurement timing output unit is output when the information unauthorized read prevention target device is activated.   The unauthorized equipment attachment detection apparatus according to claim 2, wherein the output from the measurement timing output unit is output at predetermined time intervals.   The unauthorized equipment attachment detection apparatus according to any one of claims 1 to 4, wherein the component device includes a plurality of components, and the weight sensor is provided on a common board on which the plurality of components are mounted. .   The component device includes a plurality of components, and the weight sensor is provided in each of the plurality of components, and each measured weight is stored in advance in each of the components stored in the regular weight storage unit. The unauthorized equipment attachment detection device according to any one of claims 1 to 4, which is compared with a determined weight.   A plurality of the component devices are provided, and the weight sensor is provided in each of the plurality of component devices, and each measured weight is stored in the regular weight storage unit. The unauthorized equipment attachment detection device according to any one of claims 1 to 4, which is compared with a predetermined weight of a component device.   The unauthorized equipment attachment detection device according to any one of claims 1 to 7, wherein the component device includes a magnetic card reader.   The unauthorized equipment attachment detection device according to any one of claims 1 to 7, wherein the component device includes an opening / closing detection sensor of a main body case provided for detecting unauthorized reading.

Images