KR200290675Y1 - Multi-protecting device of pin-pad module - Google Patents

Abstract

The present invention detects when the pin pad module is dismantled to change the pin pad module installed in the automated device for financial transactions, and detects this to prevent the password from being hacked by losing the password or key data. It relates to a double protection device of the pad module.

The present invention for realizing this pin pad card is equipped with a variety of electronic components mounted on a printed circuit board so that the password can be encrypted, the upper and lower cases for accommodating the pin pad card, and the pin pad with a number button and a menu button A pin pad module having a button portion installed to be exposed to the outside of the case in contact with the switch pattern of the card, it is mounted on the back of the pin pad card and connected to the encryption central processing unit, the encryption central processing unit when switching changes Is installed on the first sensing unit for generating a detection signal, the front surface of the pin pad card and the button portion so as to damage the encryption key stored in the SRAM, the encryption central processing unit when the pin pad card and the button unit are separated Designed to include a second detection unit to block the driving power supply of the SRAM.

Description

Multi-protecting device of pin-pad module

The present invention relates to a hardware module for processing encryption of a user's password in an automated device for financial transactions, and a protection device for a pin-pad module that is in charge of key processing. The present invention relates to a dual protection device of a pin pad module that detects this when dismantling the pin pad module and prevents the password from being hacked by losing the password or the key data.

In general, devices that prevent others from accessing and using illegally, such as financial terminals, are assigned passwords for each user so that only authorized users can operate the device normally. After entering the password, it confirms whether it matches the password registered in advance and the next step can be processed only if it matches.

As described above, an encryption device for encrypting input data is coupled to a keypad for inputting a password in a financial terminal requiring extremely security. As such an encryption device, an encryption pin pad module adopting the DES (Data Encryption Standard) algorithm is widely used.

The DES pin pad module is a module for processing encryption or key processing for a user's password, and includes a numeric button for inputting a password, a plurality of menu buttons for performing various functions, and an SRAM storing an encryption key. The SRAM is installed inside the apparatus so that arbitrary operation is not possible from the outside, but the upper surfaces such as the numeric buttons and the menu buttons are exposed to be easily accessible to the user. On the other hand, the DES pin pad module includes a bus type mounted in an input / output slot of a system, a serial type connected to a communication port of a system, and an EPP type integrated in a pin pad for password input.

However, bus type DES pin pad module can be hacked when inputting various keys to perform hardware DES function, and serial type DES pin pad module can be hacked by connecting data scope equipment to serial port. EPP type can be hacked when checking and synchronizing scan line and column line for processing of pin pad key. In other words, if the DES pin pad module mounted on the terminal is arbitrarily disassembled and a separate hacking device is connected to the key input unit, there is a problem that hacking is possible as described above and thus may be used illegally.

The present invention was devised to improve the above problems, and anyone who disassembles the pin pad module in the state in which the automated device that can protect the internal data using the pin pad module such as a financial terminal is assembled into a finished product. It is possible to prevent password hacking by double protection function to delete the internal data of SRAM where encryption key, etc. is stored and to protect the internal data of SRAM by cutting off the driving power supplied to SRAM. It is an object of the present invention to provide a double protection device of a pin pad module.

1 is a control circuit diagram of the present invention,

Figure 2a is an assembled perspective view of the pin pad module according to the present invention,

Figure 2b is a bottom perspective view of the pin pad card according to the present invention.

* Description of the symbols for the main parts of the drawings *

10-Cryptographic Central, 12-KeyMatrix,

14-SRAM, 16-mains

18-first sensing unit, 20-backup power unit,

22 (22a and 22b)-second sensing unit, 24-pin pad card,

26-button, 28-upper case,

30-lower case.

The present invention for realizing the above object is provided with a pin pad card made of various electronic components mounted on a printed circuit board so as to encrypt the password, a case for accommodating the pin pad card, and a number button and a menu button. A pin pad module having a button portion installed to be exposed to the outside of the case in contact with the switch pattern of the pin pad card, the pin pad module mounted on the rear of the pin pad card and connected to an encryption central processing unit, The first sensing unit for generating a detection signal, the front surface of the pin pad card and the button portion to contact the processing unit to damage the encryption key stored in the SRAM is installed in the center of encryption when the pin pad card and the button unit is separated A structure including a second sensing unit for the processing device to cut off the driving power supply of the SRAM It is.

Hereinafter, the configuration and operation of the preferred embodiment of the present invention will be described in detail with reference to the accompanying drawings.

1 shows a control circuit diagram of the present invention.

A key matrix 12 for inputting or canceling a password is connected to an input terminal of an encryption central processing unit 10 that controls encryption of input data, while a data storing unit stores an encryption key and data. SRAM 14, which is means, is connected via an address bus and a data bus.

In addition, the other input terminal of the encryption central processing unit 10, the main power supply unit 16 for supplying the operating power of the SRAM 14 including the encryption central processing unit 10, the rear of the pin pad card to be described later pin pad Detect the departure from the card case to damage the encryption key stored in the SRAM 14, the first detection unit 18 to prevent the decryption of the stored data, detecting the front of the pin pad card to be described later separated from the button unit In order to maintain the data of the SRAM 14, the second sensing unit 22 is connected to disconnect the minimum power supplied from the backup power supply unit 20 so that the data of the SRAM 14 is lost.

The self destruct input pin (SDI) signal output from the first sensing unit 18 may damage the encryption key used by the encryption central processing unit 10 to encrypt and store the data in the SRAM 14. The VLI (Lithium Voltage Input) signal output from the second sensing unit 22 causes the encryption central processing unit 10 to minimize the SRAM 14 required to hold data. It serves to cut off the supply power from the backup power supply unit 20 that is the supply power.

Figure 2a shows an assembled perspective view of the pin pad module according to the present invention, Figure 2b shows a bottom perspective view of the pin pad card according to the present invention.

The pin pad card 24 is formed by mounting various electronic components on a printed circuit board so that a password can be encrypted. A front side of the pin pad card 24 is attached to the bottom of each button of the button unit 26 as shown in FIG. 2A. A switch pattern 22a is formed to correspond to the contact 26a and forms a key matrix. The switch pattern 22b forms a second sensing unit 22 in pairs with the moving contact 22a of the button unit 26. On the other hand, as shown in FIG. 2C, the SRAM 14, the first sensing unit 18 including the push switch, the backup power supply unit 20, and the like, as shown in FIG. Electronic components constituting the connector 29 and the like for connecting to a main controller (not shown) are mounted.

Here, the switch pattern 24a and the switch pattern 22b are formed so that a metal pattern forms two electrodes, and the moving contact 22a and the moving contact 26a are made of a carbon resistor, and the button portion 26 is, for example. An elastic rubber material comprising a number button and a menu button, the switch pattern when the movable contact 22a or the movable contact 26a is in contact with or separated from each switch pattern 24a or switch pattern 22b. 24a or the switching pattern of the switch pattern 22b is changed. The movable contacts 22a and 26a and the switch patterns 24a and 22b constitute the key matrix 12 of FIG.

On the other hand, the pin pad card 24 is the upper case 28 and the lower case 30 in the state in which the button portion 26 is stacked so that the moving contact (26a) is in contact with the upper side of the switch pattern 24a Are combined and fixed respectively. The lower case 30 is formed with an opening 30a through which the main electronic components of the pin pad card 24 can be exposed, and the opening 30a is detachably fixed to the auxiliary cover 32 by a screw. . The electronic component exposed by the opening 30a corresponds to a component to be repaired in the event of a failure of the pin pad card 24 regardless of the password hacking.

Thus, the first sensing unit 18, that is, the push switch mounted on the rear surface of the pin pad card 24 is always pressed by the lower case 30 to maintain the switched-on state, and thus the pin pad card 24 The second sensing unit 22, which is composed of the switch pattern 22b on the front surface and the moving contact 22a attached to the bottom of the button portion 26, is also always in contact.

However, if the pin pad module is completely assembled and mounted as a password input means such as a financial terminal, if the pin pad module is disassembled to hack the password by changing the operation of the pin pad module, the first sensing unit 18 may be replaced. When the pressing action of the push switch is released, the switching state is changed, or the switch pattern 22b and the moving contact 22a of the second sensing unit 22 are also separated to change the switching state, or the first sensing unit ( 18) and the switching state of the second sensing unit 22 are all changed.

According to this switching change, as described above, an SDI signal is generated by the first sensing unit 18, input to the encryption central processing unit 10, and a VLI signal is generated by the second sensing unit 22. By being input to the encryption central processing unit 10, the encryption central processing unit 10 deletes the encryption key stored in the SDRAM 14 or loses the data including the encryption key to make decryption impossible.

As described above, the present invention is a pin pad card constituting the pin pad module when physically dismantling the pin pad module to install a separate device capable of hacking the password through the change operation of the pin pad module installed in the financial terminal, etc. The detection device installed on the upper side or the lower side of the operating device has an advantage that the security function is further enhanced through a double security device that deletes or loses data of the SRAM in which the encryption key of the pin pad module is stored.

Claims (1)

A pin pad card having various electronic components mounted on a printed circuit board to encrypt a password, an upper and lower case for accommodating the pin pad card, and a number button and a menu button are in contact with the switch pattern of the pin pad card. A pin pad module having a button unit installed to be exposed to the outside of the case, the pin pad module is mounted on the back of the pin pad card and connected to an encryption central processing unit, the encryption central processing unit is stored in the SRAM when switching changes The first sensing unit generating a detection signal to damage the key, the front surface of the pin pad card and the button unit are provided in contact with each other so that the encryption central processing unit supplies the driving power of the SRAM when the pin pad card and the button unit are separated. Double protection device of the pin pad module comprising a second detection unit to block.