NL2002677C2 - Magnetic card reader with anti-skimming measures. - Google Patents

Description

MAGNETIC CARD READER WITH ANTI-SKIMMING MEASURES FIELD OF THE INVENTION

5 The invention relates to an apparatus with a card reader for reading data stored in a magnetic strip of a card. The invention further relates to a receiving section for such an apparatus and designed for receiving the card from the user.

BACKGROUND ART

10 The use of magnetic data storage cards has become ubiquitous throughout the world.

Examples of such cards include credit cards, debit cards, bank cards, ATM (automatic teller machine) cards, security cards, identity cards, driver licenses, etc. Such a card has standardized shape and dimensions, and stores the data in parallel tracks within a magnetic strip. The location and orientation of the strip on the card are also standardized. In operational use, the 15 data stored in the magnetic strip of the card is read by swiping or otherwise transporting the card past a reading head of a card reader in the user interface of a secure system. The user interface typically has a card slot that is dimensioned in order to have the card inserted in such an orientation that the magnetic strip is transported past the reading head by the user’s inserting the card. The system processes the data thus read together with a personal identification 20 number (PIN) or other password, entered by the card's owner into the system via a keyboard or touch screen in the system’s user interface.

A card reader can be implemented as a manual card reader or a motorized card reader. Examples of a manual card reader include a dip card reader and a swipe reader. A dip card reader is a reader that does not have any transport mechanism for automatically transporting a 25 card (unlike a motorized card reader). A dip reader receives and supports an inserted card. To use a dip card reader, a user must manually insert his/her card, short edge first, and then manually remove the card. A swipe reader has a receiving section with, e.g., a slot, past which the user has to swipe his/her card lengthwise in order for the card reader to read the stored data. A motorized card reader includes a motorized transport mechanism, which moves the card 30 across the internal reading head so that all of the portions of the magnetic strip can be read.

With these motorized card readers, the user partially inserts his/her card into a slot in the card reader. A sensor in the card reader detects the card’s presence and triggers the transport to begin moving the card further into the card reader and past the magnetic reading head.

2

The term “skimming” refers to the theft of secure information stored in the magnetic strip of a credit card, a debit card, a bank card, ATM card, a security card, an identity card, etc., while the card is being used in an otherwise legitimate transaction. In a practical scenario, a thief places a small electronic device, referred to as a “skimmer”, at or over the card slot. For 5 example, a skimmer is accommodated in a false front overlying the card slot of a dip card reader or of a motorized reader. As another example, a skimmer is positioned within or at one or at both extremities of the channel of a swipe card reader, e.g., by means of using a false front cover accommodating the skimmer’s reading head. The channel is wider at the extremity than at the position of the reading head so as to facilitate the channel’s catching of the card being swiped.

10 The skimmer reads the magnetic strip as the user unknowingly passes his/her card through it. These skimming devices are often used in conjunction with a pinhole camera to read the user’s PIN at the same time. The skimming device stores the data read or instantly transmits the data via a wireless connection to the thief. The information thus stolen can then be used by the thief to assume the card owner’s identity for, e g., obtaining goods without paying, withdrawing 15 money from the card owner’s bank account, obtaining access to gated premises, etc.

Various approaches to protection against skimming are known.

US patent application publication 2008/0191860 relates to a security system useful for monitoring an automated teller machine (ATM). The system includes a camera that provides images of at least selected portions of the ATM. A controller automatically determines whether a 20 difference between a reference image of the ATM and a subsequently acquired image from the camera indicates an alteration to the ATM. One example provides the ability to detect whether a skimming reader has been placed adjacent a card receiving slot. An embodiment includes acquiring a plurality of reference images corresponding to different lighting conditions and using an appropriate one of the reference images based upon a lighting condition or time of day 25 associated with a subsequently acquired image.

US patent application publication 2007/0228178 relates to a card reader housing that has an exterior surface configuration that includes a plurality of distinct surface portions aligned at oblique angles relative to each other. The exterior surface configuration prevents the placement of a skimming reader over the top of the card reader housing. In an example, a finger-receiving 30 notch is directly aligned with a reader and has a depth and a dimension sized for receiving at least a portion of a finger holding a card inserted into a slot in the housing. Any alteration of the notch dimensions prevents proper operation of the card reader.

WO 2007/032964 relates to an anti-skimming reader for an automated banking machine. In order to prevent a magnetic sensor of an unauthorized skimming device from reading the 3 magnetic information from the card, the card reader moves the card with motions which interfere with the ability of an unauthorized magnetic sensor to accurately read information from the card.

WO 2005/001598 relates to an automated banking machine. Sensing devices adjacent a card reader slot on the machine enables a controller to detect the presence of a fraud device or 5 unauthorized card reading devices. Sensing devices adjacent a keypad enable the controller to detect the presence of an unauthorized manual input intercepting device.

SUMMARY OF THE INVENTION

The invention addresses the problem of how to protect against skimming and provides an 10 elegant solution based on the following insight. In order to read all data stored in the magnetic strip of the card, the entire strip needs to move lengthwise relative to the reading head. This applies to both a legitimate card reader and a skimming device.

In the invention, it is now proposed to shape the user interface of a magnetic card reader in such a manner that the user, before moving the card, or having the card moved, in a 15 lengthwise direction past the legitimate card reader, first has to position the card in another direction, e.g., widthwise, into a secure receiving section at the user interface. That is, the card is inserted into the receiving section in a direction that differs from the lengthwise direction needed for reading the data stored in the magnetic strip. The receiving section is configured so as to bring the card’s magnetic strip into a secure environment prior to having the legitimate card 20 reader reading the data. After the card has thus been inserted, a skimming device does not have access anymore to the data of the magnetic strip, unless the receiving section is tampered with. The receiving section is preferably secured against tampering, or means are provided to detect tampering.

More specifically, the invention relates to an apparatus with a reading head for reading 25 data stored in a magnetic strip of a card. The apparatus includes, for example, a terminal of an automated teller machine (ATM), a terminal for executing credit card payments, a terminal for access to secure premises under control of a security card or access card, etc. The terminal may be part of a larger geographically distributed data processing system or may be a standalone data processing system. The reading head is mounted in a secure environment of the 30 apparatus. The expression “secure environment”, as used herein, refers to that portion of the apparatus that is physically and electronically protected against access by an unauthorized person. The protection may be passive, e.g., based on the physical properties of the materials being used, and active, e.g., based on disabling the apparatus upon detecting an intrusion. The apparatus has a user interface with a receiving section configured for receiving the card from a 4 user and for moving the magnetic strip of the card towards a location of the reading head. The receiving section is configured for receiving the card into the secure environment and only in a predetermined orientation wherein the magnetic strip is held substantially perpendicular to a direction of the receiving. Skimming the card is made rather difficult, if it is being inserted into the 5 receiving section in the manner specified

In an embodiment, the receiving section has a slot for accepting the card, and the magnetic strip is held substantially parallel to the slot during the accepting. The strip runs perpendicularly to the direction of the path traversed by the card’s being inserted into the slot. That is, the card is presented to the apparatus with the card’s wider edge held towards the 10 apparatus.

In another embodiment, the receiving section has a slot for accepting the card, and an arm mounted near the slot. The arm has a channel that extends to the slot. The channel is configured for receiving the card in the predetermined orientation and for moving the card in the predetermined orientation to the slot. The channel forms part of the secure environment, i 5 An advantage of this embodiment is that it can be implemented with an after-market add on to an existing apparatus. Millions of such apparatus have been installed worldwide. Such apparatus lets the user insert the card into the apparatus in a direction that coincides with that of the card’s magnetic strip. A simple false front with a skimming device can be mounted over the card slot of the apparatus in order to steal the data from the card. According to the invention, it is 20 now proposed to modify the receiving section of such existing apparatus. The receiving section is modified so as to first bring the magnetic strip within the secure environment of the receiving section’s arm, and then to slide the card into the existing card slot while the magnetic strip remains secure within the channel. The user first inserts the card into the channel, the card’s longer edge first, and then slides the card along the channel into the apparatus. The channel 25 protects the strip once the card has been inserted. The arm may be equipped with first means for determining the integrity of the arm. The apparatus then has second means for raising an alarm under control of the first means.

The receiving section may have a protrusion near the slot and located opposite the arm. The protrusion has a first profile and the arm has an entrance to the channel with a second 30 profile. The first profile of the protrusion and the second profile of the arm’s entrance are configured for rotating the card around an axis parallel to the magnetic strip while guiding the card to the channel. As the card rotates while moving towards or away from the channel, a clearance is maintained between the card’s magnetic strip and the arm. Accordingly, it is difficult for a fraud, if practically possible at all, to mount an array of parallel reading heads at the arm’s 5 entrance to capture data from the magnetic strip. A reading head should physically contact the magnetic strip in order to be able to capture data. However, the reading head should not provide a too large resistance to moving the card. Having the card controllably rotate while sliding it into or out of the arm in the predetermined orientation makes it very difficult, if not impossible, to 5 mount a skimming device that successfully captures the data.

In yet another embodiment of the apparatus of the invention, the apparatus comprises a portion with a channel. The reading head is mounted in the portion and faces the channel. A swipe card reader has such configuration. In the invention, the receiving section has a sled configured for moving along a path parallel to the channel, e.g., while being accommodated 10 within or above the channel. The sled is configured for receiving and containing the card in the predetermined orientation within the channel during the sliding. The sled is configured to expose the card’s magnetic strip to the reading head. Accordingly, the user inserts the card, longer end first, into the sled. Then, the user slides the sled along the channel. The moving sled leaves the magnetic strip exposed to the reading head in the channel. The reading head is thus enabled to 15 capture the data. At the end of the channel, the user removes the card from the sled.

Again, the strip is brought into the secure environment while the strip is held substantially perpendicular to the card’s motion. The path follows, e.g., a straight line. This facilitates the manufacturing of the receiving section and of the guiding of the sled. Alternatively, the path follows a curve, not a straight line, in plane parallel to the channel so as to facilitate the swiping. 20 For example, the sled is mounted to move over and parallel to the channel, but the distance between the sled and the channel varies in dependence on the sled’s location relative to the channel. The curved path takes ergonomics into account. Optionally, the sled is elastically mounted to the portion so as to resume a predetermined position within the channel after being released from another position within the channel. For example, the sled is attached via a spring 25 to the receiving section or to another fixed component of the apparatus. Upon having inserted the card into the sled positioned at a first end of the channel, the user swipes the card, contained in the sled, to the other end of the channel. Upon removing the card from the sled, the spring automatically returns the sled to the first end.

The approach sketched above is applicable to both manual card readers and motorized 30 card readers. The receiving section can be provided as an anti-skimming upgrade to an existing apparatus or can be designed as an integral part of a new apparatus. Accordingly, an embodiment of the invention also relates to a receiving section for use with an apparatus as specified above.

6

For completeness, reference is made to an ATM machine provided by WRG Services Inc., under the name Apollo. The Apollo ATM machine has a swipe card reader. The user interface of the Apollo ATM machine has a vertically oriented, long narrow channel, through which the user has to swipe his/her magnetic card. The user interface has recesses at both ends 5 of the channel. The recesses are wider than the channel. The recesses facilitate the inserting of the card into the channel and removing of the card from the channel. In theory, a magnetic card could be inserted directly into the narrow channel, under a variety of angles of the approaching path relative to the channel, and with a variety of orientations of the card relative to the channel. The card could also be inserted, for example, with its longer edge first, so that the magnetic strip 10 is held parallel to the channel while the card is being inserted into the channel. However, the invention has the receiving section configured in such a way that a card can be inserted in a controlled manner and only in the predetermined orientation, for the reasons as specified in this document.

15 BRIEF DESCRIPTION OF THE DRAWING

The invention is explained in further detail, by way of example and with reference to the accompanying drawing, wherein:

Fig. 1 is a block diagram of a system in the invention;

Figs. 2, 3 and 4 are block diagrams of a first embodiment of the invention; 20 Figs. 5, 6, 7, 8, 9 and 10 are diagrams of a second embodiment of the invention; and

Figs. 11,12,13,14, 15, 16,17 and 18 are diagrams of a third embodiment of the invention.

Throughout the Figures, similar or corresponding features are indicated by same reference numerals.

25

DETAILED EMBODIMENTS

In the invention, the user interface of a magnetic card reader is shaped in such a manner that the user, before moving the card, or having the card moved, in a lengthwise direction past the legitimate card reader, first has to position the card in another direction, e.g., widthwise, into 30 a secure receiving section at the user interface. That is, the card is inserted into the secure receiving section in a direction that differs from the lengthwise direction needed for reading the data stored in the magnetic strip.

Fig.1 is a block diagram of a system 100 in the invention. System 100 comprises an apparatus 102 with a user interface (Ul) 104 that enables a user to interact with apparatus 102.

7 U1104 has a receiving section 108 for receiving card 106 from the user. Receiving section 108 is configured for moving card 106 in its entirety, or at least that portion of card 106 that accommodates magnetic strip 110, into a secure environment 90. Card 106 has a magnetic strip 110 storing data. Secure environment 90 of apparatus 102 has a card reader 112 with a reading 5 head 114. Card reader 112 is implemented as a manual card reader or as a motorized card reader, as discussed above. In order for reader 112 to capture the data stored in strip 110 of card 106, reading head 114 and strip 110 are to be moved relative one another in a direction 116 or 118 parallel to the main dimension of strip 110. The data thus read is supplied to a data processing system 120 that processes the data. Data processing system 120 is accommodated 10 within secure environment 90. Data processing system 120 may be implemented so as to give apparatus 102 a stand-alone functionality or may be implemented for data communication to another data processing system (not shown) such as a server, via a data network (not shown). The components and functionalities indicated so far for system 100 are known in the art and need not be discussed in further detail here. For more background, see, e.g., the patent i 5 documents referred to above.

The invention provides an anti-skimming measure by means of having receiving section 108 configured for receiving card 106 from the user while card 106 is being held in a particular orientation relative to receiving section 108. Card 106 is held in such a way that the direction of inserting card 106 into receiving section 108 substantially differs from directions 116 and 118 20 that are used for reading the data stored in strip 110.

Figs.2, 3 and 4 are block diagrams illustrating a first embodiment of the invention with respect to orientation and insertion direction. Reference numeral 204 indicates a direction wherein card 106 is being moved by the user to insert card 106 into receiving section 108. In this first embodiment, receiving section 108 has a slot having a width W that is large enough for card 25 106 to pass through, longer end first. That is, the dimension of the slot allows inserting card 106 with strip 110 remaining parallel to the slot. In the invention, direction 204 differs substantially from the direction 116 of strip 110. In Figs 2, 3 and 4, direction 204 is chosen as substantially perpendicular to direction 116. Receiving section 108 may be provided with a profiled entrance for properly guiding card 106 during insertion and/or removal. In Fig.2, the user moves card 106 30 towards receiving section 108 in direction 204. In Fig.3 card 106 has been moved to such a position that strip 110 is obscured by receiving section 108. Note that there is not a single location, stationary with respect to receiving section 108, where a reading head of a skimming device could be mounted for intercepting strip 110 so as to capture data before strip 110 disappears via the slot into secure environment 90, as shown in Fig.4. Even if a false front with a 8 skimming device were mounted over receiving section 108, strip 110 traverses such a false front in a direction that is perpendicular to the desired reading direction. The skimming device could be provided with a moving reading head that is powered somehow to sweep the reading head in the transversal direction 116. The reading head of the skimming device would also have to move 5 relatively fast compared to the speed of card 106 being inserted or removed. All this, however, would require additional hardware and a power supply, adding to the dimensions of the false front and make it look suspicious. Alternatively, an array of multiple reading heads could be mounted in a false front. The array is then positioned perpendicular to direction 204. However, this approach is considered highly impractical. One of the reasons is that it requires a large 10 number of reading heads and additional data processing in order to stitch together the data items, individually captured per individual one of the reading heads, so as to extract meaningful information. Also note that receiving section 108 has a profiled front. In this case, the front has a recess 206 to accommodate the user’s thumb and index finger when card 106 is being inserted. The profiled front makes it rather difficult to design an inconspicuously looking false front and 15 position it over the receiving section 108. Once card 106 has reached the position as shown in Fig.4, or has fully moved inside receiving section 108, i.e., inside secure environment 90, reading head 114 can read the data stored in strip 110. In an embodiment, reading head 114 is motorized and is activated when card 110 has reached a predetermined position relative to receiving section 108. This predetermined position is reached after the user cannot push card 20 106 deeper into receiving section 108, or after a known motorized mechanism (not shown) has accepted card 106 for further transport in direction 204. Reading head 114 then traverses a path running in parallel to direction 116. Alternatively, reading head 114 is stationary, and apparatus 102 has a mechanism, known in the art, (not shown) for automatically transporting card 106 in a direction parallel to direction 116 for enabling to capture the data. In another embodiment, 25 reading head 114 is stationary, and the user is to manually move card 110, partially inserted, in a direction parallel to direction 116. For example, when card 106 has been manually inserted to the proper position into receiving section 108, card 106 interacts with a mechanical release mechanism (not shown) that then enables manually moving card 106 in a direction parallel to direction 116. In this case, the width W of the slot is larger than the width of card 106 by a factor 30 of at least two. In yet another embodiment, receiving section has a transport mechanism (not shown) within secure environment 90 for rotating card 106 so as to align it with a conventional card reader that is oriented for receiving card 106, its shorter edge first.

9

After completion of the reading operation, motorized card reader 112 pushes back card 106 in the direction anti-parallel to direction 204, or the user may pull out card 106 in the direction anti-parallel to direction 204.

In the examples discussed above with reference to Figs. 2, 3 and 4, receiving section 5 108 is configured for card 106 moving into apparatus 102 while card 106 is oriented in such a way that direction 116, wherein magnetic strip 110 runs across card 106, substantially differs from direction 204, wherein the card is being moved into receiving section 108. Direction 204 is chosen as substantially perpendicular to direction 116 in the example shown. An advantage of this configuration is an ergonomic aspect: an oblique insertion direction (i.e., neither parallel nor 10 perpendicular to strip 110) may not be understood immediately by the user. Another advantage is a manufacturing aspect: construction is often simpler when directions align with square angles. It is to be noted here that oblique directions relative to receiving section 108 for inserting card 106, i.e., other than directions 116 and 204, are in principle feasible within the context of the invention, so long as the direction has a component perpendicular to direction 116. The 15 component then has a magnitude large enough to prevent, or at least seriously hamper, skimming while card 106 is being inserted into, or removed from, receiving section 108.

In a second embodiment of the invention, the installed base is considered of known apparatus that are being used to interact with a magnetic card of the type of card 106. Worldwide, many millions of such known apparatus have been in operational use, and represent 20 a serious investment by their operators. Such apparatus requires the user to insert and remove card 106 in a direction parallel to direction 116. That is, insertion and removal of card 106 is in a direction parallel to that of magnetic strip 110. A single skimming device in a lean false front mounted over receiving section 108 can then be used to unlawfully capture the data stored in strip 110.

25 The invention provides an after-market add-on for these known apparatus. The add-on provides the anti-skimming functionality already addressed above.

Figs.5 and 6 are block diagrams illustrating an example of this second embodiment. In this example, secure environment 90 is extended by means of using an add-on component, or a replacement part, for a conventional user interface of an existing apparatus 102, equipped with a 30 dip card reader 112, ora motorized card reader 112. Receiving section 108 in this example comprises an arm 502 mounted on, and extending from, user interface 104. Arm 502 has a channel along at least part of its length (for details see Figs. 7, 8, 9 and 10 and their description below). Card 106 can be inserted into this channel in the direction indicated by arrow 504. Note that the direction of arrow 504 is substantially perpendicular to the direction of magnetic strip 10 110. The depth of the channel is chosen so as to have arm 502 obscure strip 110 when card 106 has been inserted. After card 106 has thus been inserted into the channel, the user moves card 106 in the direction of an arrow 602 in order to insert card 106 into the slot of known apparatus 102. As a result, the path traversed by strip 110 when moved in direction 602 lies 5 entirely within secure environment 90. In order to remove card 106, card 106 is slid back in a direction opposite to direction 602, and taken out of arm 502 in a direction opposite to direction 504.

Preferably, arm 502 is made of a suitable, hard material in order to resist tampering, and the channel in arm 502 is made just wide enough to manually slide card 106 into and out of the 10 channel. Mounting a skimming device becomes practically impossible or at least difficult. Arm 502, or the part thereof forming the channel, may have its surface treated to facilitate the sliding of card 106 within the channel and/or to provide protection against the weather, dust and dirt, etc. For example, the surface of the relevant part has a special surface coating or has been polished. A fraud, who seeks to install a skimming device, has to either modify arm 502 or have 15 it replaced by something of his/her own design. The material of arm 502 is preferably such that it does not easily allow to be worked, e.g., for integrating a skimming device within the channel, without leaving clear traces. A false front accommodating a skimming device, positioned over arm 502 for intercepting the data, is not effective for the same reasons as explained above with reference to the embodiment of Figs.2-4. That is, the direction of inserting card 106 into, or 20 removing card 106 from, arm 502 is substantially perpendicular to the direction wherein strip 110 runs.

Arm 502 is preferably provided with first means that determines the integrity of arm 502, and apparatus 102 is equipped with second means to trigger an alarm under control of the first means when arm 502 is being cut, e.g., with a grinder, or is subjected to operations that remove 25 material from arm 502. For example, the first means comprises electric wires or electrically conductive strips, embedded within arm 502 or running just underneath its surface. The strips or wires are electrically isolated from the material forming arm 502 and run along the length of arm 502. The wires or strips are kept at a particular (low) voltage. When someone tampers with the arm, trying to cut it or remove material from it, one or more such wires or strips are grounded, 30 thus causing a current flow that can be detected. Alternatively, pairs of such wires or strips are connected at a remote end 506 of arm 502, i.e., the end farthest remote from receiving section 108, thus forming a loop. Apparatus 102 has circuitry (not shown) that checks if a signal regularly or periodically sent into one end of the loop, returns via the other end. If there is no return signal, the alarm can be raised as the loop is interrupted. Similarly, the Ohmic resistance 11 of such loop can be determined periodically, and a sudden change therein can be interpreted as an event that should trigger the alarm. For example, the alarm instantly disables apparatus 102, thus rendering moot all card interactions with apparatus 102. If apparatus 102 has a motorized card reader 112, the alarm is used to, e.g., turn off the power supply to the motorized card 5 reader. Accordingly, in the embodiment of Figs 5 and 6, receiving section 108 is configured so as to form part of secure environment 90.

Fig.7 is another diagram of an embodiment 700 of the add-on component or modified receiving section 108 with arm 502. Embodiment 700 comprises a base plate 702, e.g., a metal plate, that is to be mounted as a replacement part for user interface 104 of an existing apparatus 10 102. Dimensions and shape of base plate 702 depends on the actual type of apparatus 102, and is therefore a customized part. Base plate 702 is located in front of card reader 112. For example, card reader 112 is mounted against the rear side of base plate 702 that faces the innards of apparatus 102. Embodiment 700 further comprises a smaller part 703 of, e.g., metal, with a card slot 706. Base plate 702 has an opening (not shown) aligned with slot 706. Part 703 15 is a generic part and is securely mounted to the front side of base plate 702. An arm 502 is securely attached to part 703 near slot 706. Arm 502 has a channel 704, whose width is just a bit larger than the thickness of card 106.

Slot 706 is dimensioned for moving card 106, smaller end first, into apparatus 102 and towards card reader 112, or out of apparatus 102. The user first inserts card 106 into channel 20 704, the longer edge of card 106 parallel with the main dimension of arm 502. Arm 502 preferably has a profiled transverse cross-section so as to facilitate the inserting of card 106. See, e.g., the example of Fig.8, discussed below. The user then slides card 106 towards slot 706. Note that channel 704 forms a secure environment for magnetic strip 110, and that channel 704 serves to guide card 106 towards slot 706. Preferably, part 703 has a protrusion 708, 25 shaped and positioned in such a manner relative to arm 502, that card 106 can only be inserted into channel 704 if card 106 is held in the pre-determined orientation of the longer end of card 106 held parallel to arm 502. The combination of protrusion 708 and remote end 506 thus prevent the user from inserting card 106 into channel 704 under an oblique angle. Assume that card 106 could be inserted into arm 502 under an oblique angle. A skimming device could be 30 mounted that has a reading head in its own channel, thus forcing strip 110 to travel past the skimming reading head. A further function of protrusion 708 is discussed below with reference to Fig.8.

Remote end 506 prevents that card 106 can be slid into channel 704 in the direction of strip 110. In an embodiment, remote end 506 also accommodates the interconnections between 12 pairs of wires or strips to form the loops that are used in the triggering of an alarm, explained above.

Arm 502 or its channeled portion, can be made in an extrusion process. Alternatively, arm 502 is an assembly, made from a stack of sandwiched, oblong components that interlock 5 using, e.g., dovetail joints.

Fig. 8 is a diagram schematically illustrating a transverse cross-section 800 of arm 502 in the configuration of embodiment 700 of Fig.7. Cross-section 800 is taken in a plane perpendicular to the length of arm 502 and intersecting channel 704. A portion 802 forms part of a lower wall of channel 704. Portion 802 is slightly curved inwards so as provide a clearance for 10 card 106 in order to reduce wear on strip 110 when card 106 is fully inserted into channel 704. That is, when card 106 has assumed the position as shown in Fig.6 and as indicated in Fig.8 with reference numeral 806, the clearance facilitates sliding card 106 into or out of slot 706.

Also, curved portion 802 provides clearance for card 106 when being inserted or removed from channel 704 by the user. Portion 808 forms part of an upper wall of channel 704, and is curved 15 outwards. The curvature of portion 808 guides card 106 into channel 704 under control of protrusion 708 when card 106 is brought into a position indicated by reference numeral 810. Upper and lower walls of channel 704 are not strictly parallel in cross-section 800, but form an acute angle 812. As a result of the dimensions and material of a standardized magnetic card 106, the curvature of portion 804 has a radius of, e.g., 6 mm, and angle 806 is, e.g., 5 degrees. 20 Region 814 is shown magnified to illustrate above features qualitatively in further detail. In the example shown, arm 502 is made from two parts attached to one another using a dovetail joint 816.

Fig.8 also clarifies a further function of protrusion 708. The presence of protrusion 708 namely also hampers the skimming if an array of multiple reading heads were used in a false 25 front overlying the entrance to channel 704. The array could then be positioned in parallel to the direction of arm 502. The data captured from magnetic strip 110 by different skimming reading heads could be stitched together in order to extract relevant information. Protrusion 708 and the entrance to channel 704 in arm 502 are profiled in a particular manner, which is explained as follows. Assume that card 106 is being inserted or removed from arm 502, magnetic strip 110 30 being held in parallel to arm 502. The cooperating profiles then determine the path and orientation of card 106 in a plane perpendicular to arm 502. Note that positions 806 and 810 indicate that card 106 rotates around an axis parallel to magnetic strip 110 under control of the profiles of protrusion 708 and of arm 502. The controlled rotation sees to it that magnetic strip 110 does not touch the upper and/or lower surfaces of the entrance to channel 704. Accordingly, 13 as a magnetic reading head of a skimming device needs to physically contact strip 110, without causing too much resistance, mounting a skimming device with parallel reading heads has become extremely difficult.

Figs. 9 and 10 are diagrams illustrating another embodiment of arm 502. Fig.9 shows 5 arm 502 as seen from its top, and Fig. 10 shows arm 502 in a transverse cross-section A-A as indicated in Fig.9. Features 902, 904 and 906 and 1002 indicate threaded holes in arm 502 in order to securely attach arm 502 to plate 702. Arm 502 is made from a top strip 908 and a bottom strip 910. Strips 908 and 910 are jointed. Channel 704 is accommodated in bottom strip 910 and is shielded by top strip 908. Remote end 506 of arm 502 is formed as an integral part of 10 strips 908 and 910 when jointed. Remote end 506 is shaped so as to prevent card 106 from being inserted into arm 502 in an orientation wherein strip 110 runs parallel to the direction of the card’s inserting. The rounded shape of remote end 506 has ergonomic advantages in that more or less sharp corners are absent. Also note the profile of top strip 908 that facilitates sliding card 106 into, and out of, arm 506.

15 If user interface 104 of apparatus 102 is exposed to the weather, a water drain may be provided in arm 502 so as to be able to draw off water that has entered arm 502 and has accumulated in channel 704. Water may enter arm 502 as a result of, e.g., rain or condensation. The water may then accumulate in channel 704. If the accumulated water freezes, apparatus 102 cannot be used anymore as ice is blocking channel 704. If needed, a heating element can 20 be used in arm 502, for example, in combination with a water drain, in order to prevent the forming of ice.

In an embodiment of apparatus 102, arm 502 is positioned somewhat inclined with respect to the horizontal level, so as to have remote end 506 lower than the end near slot 706. The water in arm 502 then accumulates at the lowest location in arm 502, near remote end 506. 25 A drain near remote end 506 draws off the water under the influence of gravity. The drain may comprise one or more straight passages in the lower part of arm 502 in order to connect channel 704 to the outside world. Such a straight passage can simply be made by drilling. Alternatively, the drain is formed as a path more intricate than a straight hole, e.g., a labyrinth, in order to make accessing channel 704, from the outside and via the drain, more difficult. Note that a drain 30 could in principle be used for guiding a reading head of a skimming device towards channel 704. Now, when arm 502 is positioned so as to have remote end 506 lower than the other end of arm 502 near slot 706, a skimming reading head positioned in the channel at the drain, if possible at all, could not be used to capture the data at strip 110 of a card 106. The reason for this is that only a portion of card 106 would be passing that specific location, if at all. If deemed necessary, 14 the drain is positioned strategically in arm 502 with respect to the electric wires or electrically conductive strips, mentioned above, that are used to monitor the physical integrity of arm 502. For example, the wires or strips are arranged close to the drain, so that they will be affected if someone tries to increase the interior diameter of the drain with a file or with a drill.

5 Figs.11, 12, 13 and 14 illustrate an example of a third embodiment 1100 of the invention, in a longitudinal cross-section, applicable to swipe card readers. As known, a conventional swipe card reader enables the user to swipe card 106 along an open channel past a reading head. Card 106 is entered into the channel at one open end, swept past the reading head mounted in the channel, and taken out of the channel at the other open end, all in one run. It is 10 fairly easy to put a skimming reading head at, or in, the channel near one or near both of the ends. The invention provides anti-skimming measures for swipe readers as follows, based on the general theme of the invention as discussed above.

Embodiment 1100 has a receiving section 108 with an elongated portion 1102 having a channel 1104. Reading head 114 is mounted in channel 1104. Receiving section 108 further 15 comprises a sled 1106 that is constrained so as to only run within channel 1104. Sled 1106 is constrained by means of, e.g., giving sled 1106 and channel 1104 matching cross-section profiles in a plane transverse to channel 1104. The matching profiles prevent sled 1106 from moving out of channel 1104. Sled 1106 is configured for containing card 106 so as to leave magnetic strip 110 exposed to reading head 114, when card 106 is fully inserted into sled 1106. 20 Figs. 15 and 16 give an example of such profiles and illustrate that card 106 is positioned in sled 1106 so as to leave strip 110 exposed to reading head 114. Operation is as follows.

In Fig. 11, card 106 is being inserted into sled 1106 in direction 504, maintaining strip 110 oriented in parallel to channel 1104. In Fig. 12, card 106 has been fully inserted into sled 1106. Note that strip 110 is not obscured by sled 1106. Next, the user moves card 106 and sled 1106 25 to the other end of channel 1104, in the direction of an arrow 1108, and past reading head 114 (not shown) mounted in a wall of channel 1104. As sled 1106 leaves strip 110 exposed, reading head 114 is enabled to capture the data stored in strip 110. In Fig. 13, the motion of sled 1106 is halted at the other end of channel 1104. In Fig. 14, the user removes card 106 from sled 1106 in a direction 1110 that runs perpendicular to the main dimension of strip 110. Aspring or another 30 mechanism (not shown) can be provided in receiving section 108 to automatically return sled 1106 to the position as shown in Fig. 11 when the user removes card 110 from sled 1106 or when the user releases the assembly of sled 1106 and card 106.

15

Embodiment 1100 could be made by mounting sled 1100 in a first profiled segment of channel 1104, and securely mounting a second slotted segment over the first portion accommodating sled 1106, so as to lock up sled 1106 between the first and second segments.

A fraud may want to position a skimming device over the top part of sled 1106 through 5 which card 106 is received. Note that sled 1106 has a profiled top part. In this case, the front has a recess to accommodate the user’s thumb and index finger. The profiled top part makes it rather difficult to design an inconspicuously looking false front and position it over the receiving section 108.

In a variation on the theme of Figs. 11-16 is illustrated in Fig. 17. Note that the path, along 10 which card 106 and sled 1106 is being swiped in the configuration of Figs. 11-16, is a straight line. In order to swipe card 106 along a straight path, the user typically has to use both wrist and elbow. For ergonomic reasons, therefore, it may be more comfortable to the user if the path, along which card 106 is to be swiped, is properly curved so as to be able to swipe card 106 with only a movement of the wrist. Fig. 17 illustrates that sled channel 1104 is profiled in the direction 15 of sliding, indicated by arrow 1108, so as to have sled 1106 change its orientation during the sliding. For example, channel 1104 has a run-in region 1702 with a specific profile and sled 1106 has a ridge 1704 with a matching profile so as to tilt sled 1106 with respect to direction 1108 when residing in this region. A further matching profile (not shown) in run-in region 1702 prevents sled 1106 from being tilted out of channel 1104. The tilted position facilitates the 20 inserting of card 106 into sled 1106. When the user then slides card 106, contained within sled 1106, in the direction of arrow 1108, sled 1106 assumes a horizontal position in the area of reading head 114 (not shown here). A similar profile may be provided at the other end of channel 1104 in order to tilt sled 1106.

An elastic buffer may be mounted between sled 1106 and channel 1104 so as to absorb 25 the shock of sled 1106 being slapped against channel 1104. Sled 1106 could be provided with an elastically mounted runner, for example. The elastic buffer reduces the shock to the user’s wrist, when inserting card 106 into sled 1106 and swiping sled 1106, containing card 106, somewhat enthusiastically along channel 1104.

In Figs. 11-17, sled 1106 is shown to move within channel 1104. In another embodiment 30 (not shown), sled 1106 moves over and parallel to channel 1104. Sled 1106 is then configured so as to maintain card 106 in such a manner that only the portion of card 106 accommodating magnetic strip 110, is moving within channel 1104. This particular implementation is relevant to the installed base of existing swipe readers. A dedicated front is then positioned over the channel of the existing swipe reader. The dedicated front includes guiding rails or grooves, 16 which constrain the movement of sled 1106 to a path parallel to channel 1104, while maintaining magnetic strip 110 of card 106 within the relevant segment of channel 1104.

Fig. 18 is a diagram illustrating an option to have sled 1106 attached to a flexible sealing ribbon or cable 1802 that covers channel 1104. Sled 1106 may have a top part that overlaps 5 elongated portion 1102 so as to cover channel 1104 at the location of sled 1106. Ribbon or cable 1802 runs over guiding means, here wheels 1804,1806,1808 and 1810, so as to remain taut and aligned with channel 1104.

The feature indicated above by reference numeral 1106 is referred to as “sled". It is clear that, for example, a cart or another vehicle could be used instead. What is important here is that 10 sled or cart 1106 can be made to move within channel 1104 without too much effort on the part of the user. The term “sled” as used herein is to be interpreted as covering the concept of “cart" as well.

LIST OF EMBODIMENTS

15 Embodiment 1: An apparatus (102) with a reading head (114) for reading data stored in a magnetic strip (110) of a card (106), wherein: the reading head is mounted in a secure environment (90) of the apparatus; the apparatus has a user interface (104) with a receiving section (108; 700; 1100) configured for receiving the card from a user and for moving the magnetic strip of the card 20 towards a location of the reading head; and the receiving section is configured for receiving the card into the secure environment and only in a predetermined orientation, wherein the magnetic strip is held substantially perpendicular to a direction of the receiving.

25 Embodiment 2: The apparatus of embodiment 1, wherein: the receiving section has a slot for accepting the card; and the magnetic strip is held substantially parallel to the slot during the accepting.

Embodiment 3: The apparatus of embodiment 1, wherein: 30 the receiving section has a slot (706) for accepting the card; the receiving section has an arm (502) mounted near the slot; the arm has a channel (704) that extends to the slot; the channel is configured for receiving the card in the predetermined orientation and for moving the card in the predetermined orientation to the slot; and 17 the channel forms part of the secure environment.

Embodiment 4: The apparatus of embodiment 3, wherein: the receiving section has a protrusion (708) near the slot and opposite the arm; 5 the protrusion has a first profile and the arm has an entrance to the channel with a second profile; and the first and second profiles are configured for rotating the card around an axis parallel to the magnetic strip while guiding the card to the channel so as to maintain a clearance between the magnetic strip and the arm.

10

Embodiment 5: The apparatus of embodiment 3, wherein the arm comprises first means for determining an integrity of the arm, and second means for raising an alarm under control of the first means.

15 Embodiment 6: The apparatus of embodiment 1, wherein: the apparatus comprises a portion (1102) with a channel (1104); the reading head is mounted in the portion and faces the channel; the receiving section has a sled (1106) configured for moving along a path parallel to the channel; 20 the sled is configured for receiving the card in the predetermined orientation and exposing the magnetic strip to the reading head.

Embodiment 7: The apparatus of embodiment 6, wherein the path follows a straight line.

25 Embodiment 8: The apparatus of embodiment 6, wherein the path follows a curve in a plane parallel to the channel.

Embodiment 9: The apparatus of embodiment 6, wherein the sled is elastically mounted relative to the portion so as to resume a predetermined position relative to the channel after being 30 released from another position relative to the channel.

Embodiment 10: A receiving section configured for use with the apparatus of embodiment 1,2, 3, 4,5,6, 7, 8 or 9.

Claims (10)

An apparatus (102) with a read head (114) for reading data stored in a magnetic strip (110) of a card (106), wherein: the read head is arranged in a secure environment (90) of the apparatus ; the device has a user interface (104) with a receive section (108; 700; 1100) configured to receive the user's card and move the magnetic strip of the card to a location of the read head ; and the receiving section is configured to receive the card in the secure environment and only in a predetermined orientation, wherein the magnetic strip is held substantially perpendicular to a direction of receiving. The device of claim 1, wherein: the receiving section has a slot for accepting the card; and the magnetic strip is held substantially parallel to the slot during acceptance. The device of claim 1, wherein: the receiving section has a slot (706) for accepting the card; The receiving section has an arm (502) disposed near the slot; the arm has a channel (704) that extends to the slot; the channel is configured to receive the card in the predetermined orientation and to move the card in the predetermined orientation to the slot; and the channel is part of the secure environment. 25 The device of claim 3, wherein: the receiving section has a protrusion (708) adjacent the slot and opposite the arm; the protrusion has a first profile, and the arm has an entrance to the channel with a second profile; and the first and second profiles are configured to rotate the card about an axis parallel to the magnetic strip while guiding the card to the channel, so that a clearance is maintained between the magnetic strip and the arm. The apparatus of claim 3, wherein the arm has first means for determining an integrity of the arm, and second means for giving an alarm under control of the first means. The apparatus of claim 1, wherein: the receiving section has a portion (1102) with a channel (1104); the read head is arranged in the portion and faces the channel; the receiving section has a carriage (1106) configured to move in a path parallel to the channel; 10, the carriage is configured to receive the card in the predetermined orientation. The device of claim 6, wherein the path follows a straight line. The device of claim 6, wherein the path follows a curve in a plane parallel to the channel. 9. The apparatus of claim 6, wherein the carriage is elastically mounted with respect to the portion such that the carriage assumes a predetermined position relative to the channel after being released at a different position relative to the channel. A receiving section configured for use in the device of claim 1,2, 3, 4, 5, 6, 7, 8 or 9. 25