NL2003014C2

NL2003014C2 - Method for configuring a data entry device for entering a personal identification number.

Info

Publication number: NL2003014C2
Application number: NL2003014A
Authority: NL
Inventors: Willem Theodoor Jong
Original assignee: Willem Theodoor Jong
Priority date: 2009-06-12
Filing date: 2009-06-12
Publication date: 2010-12-27

Description

No. NLP185456A

Method for configuring a data entry device for entering a Personal Identification Number

BACKGROUND

The invention relates to an alternative method for entering a Personal Identification Number (PIN) on a data 5 entry device having at least ten buttons. When entering a PIN number using conventional methods a user of an automated teller machine or electronic transaction is at risk of unintentionally disclosing his PIN code to unauthorized persons .

10 It is an object of the present invention to provide a method for configuring a data entry device for entering a Personal Identification Number (PIN) to make it more difficult for unauthorized persons to obtain the PIN code. Additionally the present method aims to provide an 15 easy method for entering a PIN code for visually impaired persons .

SUMMARY OF THE INVENTION

According to a first aspect the present invention provides a method for entering a Personal Identification Number on a data entry device, said data 20 2 entry device comprising a keypad with a set of at least ten buttons, said method comprising: i) a keypad button designation step comprising the step of designating a button of the set of keypad buttons as 5 a first input button to be associated with a first set comprising two or more different numbers, ii) a keypad button disabling step in which all buttons of the keypad other than buttons designated in step i) are disabled, 10 iii) a number selection step comprising the steps of: - increasing a first counter by one each time the first input button is pressed, and - selecting one number of the first set as the 15 entered number in dependence of the value of the first counter. Because the button used no longer correspond directly to the entered number, deducing the entered number from the position of the fingers of a user becomes more difficult. Additionally as only one button is used for 20 entering a number it is no longer necessary for a user to view movements of his fingers relative to the keypad. As a result covering means may be used to guard against unauthorized viewing of the keypad.

In an embodiment the method further comprises in 25 step i) a step of designating a further undesignated button of the set of keypad buttons as a confirmation button for confirming the entry of a number, and the step of selecting is performed after the confirmation button has been operated. In this embodiment only two buttons are used for 30 entering a PIN code, while indicating the end of an number entry is simplified.

In an embodiment the method further comprises in step i): a step of designating a further undesignated button of the set of keypad buttons as a second input button to be 35 associated with a second set comprising two or more different numbers, in step iii): increasing a second counter by one each time the second input button is pressed and 3 selecting one number of the second set as the entered number in dependence on the value of the second counter. Preferably the first and second input buttons are arranged in neighboring positions on the keypad. Using two input buttons 5 instead of one may speed up the input of a number by a user. As each input button is associated with a set of more two or more numbers, knowing which buttons were pressed it is still not possible to easily determine the entered PIN by tracking the placement of fingers on the keypad.

10 In an embodiment the method further comprises in step i) : the step of designating a further undesignated button of the set of keypad buttons as a correction or decline button for correcting the input of a Personal Identification Number, and in step iii): the step of setting 15 the counter to zero each time the correction or decline button is pressed. In this embodiment corrections may be made during input of a PIN number.

In an embodiment the method further comprises in step iii) a step of setting the first and/or second counter 2 0 to zero each time the step of selecting is performed. Thus after input of a single digit or number the counters are reset.

In an embodiment the method further comprises in step ii): a step of generating a warning signal for the user 25 each time one of the disabled buttons is pressed. The user may thus be notified of pressing a wrong button instead of an intended button. Additionally, for the visually impaired this method may aid in finding the buttons that are designated in step i).

30 In an embodiment of the method step iii) is repeated more than once for entering a multi-digit PIN code.

In an embodiment the entire PIN number entered so far is erased when the correction button is been pressed.

According to a second aspect the invention 35 provides computer program comprising computer program code means adapted to perform all the steps of the method of the invention when said program is run on a processor or 4 computer for controlling a data entry device. As data entry devices for entering a PIN code are typically controlled by a processor, a change in program code of such a processor would allow the method of the invention to be used on 5 virtually all data entry devices without making significant alteration, if any at all, to the hardware. Such computer program code thus provides a cost effective way to offer the present input method to users of a data entry device. In an embodiment said computer program is embodied on a computer 10 readable medium.

According to a third aspect the present invention provides an automated teller machine or electronic transaction device comprising a data entry device with a keypad having at least ten buttons, wherein the automated 15 teller machine or electronic transaction device further comprises a processor arranged for performing all steps of the method according to the invention. In an embodiment the data entry device comprises memory means comprising the computer program as mentioned above.

2 0 In an embodiment the automated teller machine or electronic transaction device further comprises selection means adapted to switch the data entry device between a first mode in which the PIN may be entered according to the method of the present invention, or a second mode in which 25 all buttons of the keyboard are enabled, each button associated with only one number, and the PIN may entered using those buttons.

In an embodiment the automated teller machine or electronic transaction device further comprises movable 30 covering means, which may be placed in a first position in which the keypad is substantially covered, and a second position in which the keypad is substantially uncovered, wherein the covering means do not obstruct access to the buttons in either position, and wherein the selection means 35 switch the data entry device between the first and second modes dependent on the position of the covering means. For example, when the covering means are in the first position 5 covering the keypad, the selection means may be operated to switch to the first mode in which a PIN may be entered according to the method of the present invention. When the covering means are in the second position, in which the 5 keypad is substantially not covered by thereby, the selection means may be operated to switch to the second mode of entering a PIN number, i.e. in the conventional manner.

According to a fourth aspect the present invention provides a data entry assembly comprising a data entry 10 device with a keypad having at least ten buttons, and a processor arranged for performing the steps according to the method of the invention. The processor may be located remote from the data entry device or may be integrated in a single device. Besides being used for configuring a keypad of an 15 automated teller machines or electronic transfer device, the processor of such a data entry assembly may also be adapted to operate an electronic lock. In the latter case the present invention may be used in access control systems for instance for controlling access to buildings, storage rooms, 20 safety deposit boxes and the like.

In an embodiment the data entry assembly further comprises selection means adapted to switch the data entry device between a first mode in which the keypad is configured according to the method of the present invention, 25 and a second mode in which all buttons of the keypad are enabled, each button associated with only one number, and in which the PIN may entered using those buttons.

In an embodiment the a data entry assembly further comprises movable covering means which may be placed in a 30 first position in which the keypad is substantially covered, and a second position in which the keypad is substantially uncovered, wherein the covering means do not obstruct access to the buttons in either position, and wherein the selection means are adapted to switch the data entry device between 35 the first and second modes dependent on the position of the covering means .

In an embodiment the data entry assembly further 6 comprises reading means adapted for reading a code related to the PIN code from the card, and wherein the processing means are adapted for comparing the code read by the reading means with a PIN code entered by a user. The reading means 5 may be suitable for reading information stored on for instance a magnetic strip, a contact chip, a RFID circuit or other well-known information carriers. In an embodiment the code stored on the card may comprise a card identification code, a representation of which may be sent 10 to a remote validation facility for verification together with the PIN code that was entered by the user. Alternatively the PIN code may be directly derived from the code stored on the card, for instance when the PIN code itself or functions descriptive thereof such as hash-codes 15 or encrypted versions of the PIN code are stored on the card. In this case, further communication with a remote validation facility is no longer required to decide whether the user has entered the correct PIN code.

In an embodiment the reading means are adapted for 2 0 reading a code related to a preferred data entry mode from the card, and the selection means are adapted to switch the data entry device between the first and second modes dependent on that code. The data entry mode may thus be selected based on the preferences of individual users.

25 The various aspects and features described and shown in the specification can be applied, individually, wherever possible. These individual aspects, in particular the aspects and features described in the attached dependent claims, can be made subject of divisional patent 30 applications.

BRIEF DESCRIPTION OF THE DRAWINGS

35 The invention will be elucidated on the basis of an exemplary embodiment shown in the attached drawings, in which: 7

Figure 1 shows a top view of a keypad of a data entry device for use with the method according to the invention, figure 2 shows a flowchart comprising steps of an 5 embodiment according to the invention, figure 3 shows a flowchart comprising steps of an alternative embodiment of the invention, figure 4 shows a perspective view of an alternative data entry device in which covering means are in 10 a first position, figure 5 shows the same data entry device of in which the covering means are in a second position, figures 6A and 6B show data entry device with alternative covering means in a first and second position 15 respectively, figure 7 shows a flowchart according to another embodiment of the invention, figure 8 shows an embodiment of the present invention as part of an access control system.

20

DETAILED DESCRIPTION OF THE INVENTION

Figure 1 shows a keypad 20 of a prior art data 25 entry device for entering a PIN code. Such a data entry device is typically part of an automated teller machine or an electronic transaction device and comprises at least 10 buttons 1,2,3,...,10, and may also comprise a confirmation button 11 and a correction button 12. The data entry device 30 typically comprises a display 30 as well, either remote from the keypad or arranged close to or on it, for showing progress in entering the PIN code. The keypad is shielded from unauthorized viewing on three sides by shielding means 21. It is however still possible for an unauthorized person 35 to find out which buttons are pressed by viewing or filming movement of the fingers. Additionally an unauthorized person may find out which buttons have been pressed simply by 8 cleaning the buttons beforehand and, after the PIN code has been entered, checking which buttons are no longer completely clean. For example, if a PIN code consists of four different digits in the range 0..9, then an 5 unauthorized person knowing which digits were used has a chance of 1 in 8 of putting them in the correct order during the first three tries.

A flowchart showing an embodiment of the method according to the invention is shown in figure 2. The method 10 comprises a keypad button designation step 210 in which a button of the set of keypad buttons is designated as a first input button associated with a first set of numbers in step 211. In a preferred embodiment this set of numbers comprises all number 0 through 9. For example, on the keypad of figure 15 1, buttons 1 might be designated as the first input button.

Following the keypad button designation step 210 is a keypad button disabling step 220, in which all other buttons are disabled for entering a number. This prevents a person from accidentally entering the wrong number and also reduces the 20 number of buttons that are used for entering the PIN code to one. During number selection step 230 a first counter is increased each time the first input button is pressed as shown in step 231. After for example a predetermined period of time, e.g. 5 seconds, the number that is entered is 25 selected in dependence of the value of the counter as shown in step 232. The method finishes at step 260. For example, if the first button has been pressed 5 times in 5 seconds, then the number 5 is selected as the entered number. Alternatively the last input using the first input button 30 may be indicated by the user holding the first input button down for a predetermined period of time which is significantly longer that the time needed to press and release a button. In this manner a PIN number may be entered using only one button of the keypad. Knowing which buttons 35 have been pressed during input of the PIN code no longer helps in determining the code itself.

An embodiment of the method is shown in figure 3.

9

The embodiment comprises, after the start of the method 300, determining in step 301 whether or not the PIN code should be entered using the conventional method in which any button of the keypad may be used for entering a PIN code. This may 5 be decided for instance based on a code on a users PIN card, or the option may be manually selected by the user using the keypad or some other kind of switch. If the conventional method of input is decided on, the present method continues with step 302 which essentially comprises steps for input of 10 a PIN code as known from the prior art.

If the conventional method of input is not selected, keypad button designation step 310 follows. This step comprises substep 311, in which a first input button is designated and associated with a first set of two or more 15 different numbers. The keypad designation step also comprises substep 312, in which a second input button is designated which is associated with a second set of two or more different numbers, and substep 313, in which a confirmation button is designated. The confirmation button 2 0 may be operated to indicate the end of a number entry instead of using timers as in the previous embodiment. For example of the keypad shown in figure 1, button 1 may be designated as the first input button associated with a first set of numbers comprising the numbers 1,2,3,4 and 5. Button 25 2 may then be designated as the second input button associated with a second set comprising the numbers 6,7,8,9 and 0, and button 3 may be designated as the confirmation button. When step 310 has been completed all other buttons are disabled for entering a number in step 320. Preferably, 30 though the other buttons may no longer be used for entering the PIN code, each time one of the disabled buttons is pressed an warning signal is generated to alert the user a disabled button is pressed. Next, in number selection step 330, the number of times each input button is pressed is 35 counted in substeps 331 and 332. In step 340, after the user has operated the confirmation button, a number of the first or second set is selected as the entered number in 10 dependence of the values of the first and/or second counters. In step 350 a check is made whether the entire PIN code has been entered. If so, the method is completed and ends in step 360. If further input is required to complete 5 the PIN code, the first and/or second counters are set to zero in step 351, and steps from 330 onwards may be repeated. For example, when a user having a PIN code 2048 wants to use his PIN card to pay a bill or withdraw cash from a cash dispenser, he might first insert his card in the 10 card reader. Based on information stored on the card the data entry device is configured for executing steps 310 and further. To enter the PIN code 2048 the user would press button 1 two times, followed by pressing button 3 for confirmation, then press button 2 five times, followed by 15 pressing button 3 for confirmation, then press button 1 four times, confirm, and the press button 2 three times followed by pressing the confirmation button one last time. Many variations are conceivable, for instance the first and second input buttons might be associated with different sets 20 of numbers, such as {1,3,5,7,9} for the first input button and {2,4,6,8,0} for the second input button. Additionally, each time button 1 is pressed the counter for button 2 might be set to zero and vice versa. Alternatively both counters might function completely separate and selection of the 25 entered number might be dependent on which of the input buttons was the last one pressed.

A preferred embodiment of a data entry device for use with the method is shown in figure 4. The shielding means 421 effectively shields the keypad 420 from viewing on 30 three sides. A movable cover 422 is pivotably connected to the shielding means 421 and is shown in a first position in which the inner side 423 of the cover 422 is clearly visible and in which the inner side 423 may easily be checked for the presence of hidden devices such as miniature cameras. 35 Preferably the movable cover 422 is associated with selection means (not shown) capable of detecting whether the cover means are in a closed position or not. The decision 11 whether to use the conventional input method or the present input method may be based on whether the position of the cover detected by the selection means is open or closed. Alternatively the selection means way may switch between the 5 two input methods based on a feature on the PIN card, or on a user input.

In figure 5 the data entry device is shown with its cover closed, i.e. the cover 522 is in its second position in which the method according to the invention may 10 be particularly advantageous; as fewer buttons are used in this method, covering the keypad will not significantly hinder the user as it is no longer necessary for him to view the keypad when entering his PIN code. Furthermore, only those buttons that are used for entering a number need to be 15 covered. To prevent unauthorized persons from counting or timing each entered number, the display is preferably configured not to show progress in entering the PIN code using the present method. This may also be accomplished by making the covering means cover the display as well. Though 2 0 the cover as shown in figures 4 and 5 has the advantage of being easily applied to existing data entry devices, other embodiments of the cover are conceivable as well. For instance the cover means may be slidably attached to the shielding means instead of pivotably, and/or may be attached 25 on another side of the shielding to prevent obscuring the display when the covering means are in the open, first position. Alternatively, as shown in figures 6A and 6B, the covering means may simply comprise a hood 622 obstructing the view of both the keypad 620 and display means 630. Such 30 a hood may conveniently be placed over most existing keypads without requiring significant modifications.

Figure 7 shows a flowchart of an embodiment of the method in which an additional button of the keypad has been designated for use as a correct/decline button. Steps 35 700,701,702,710,711,712,713,720,730,731,732,740,750,751 and 760 correspond to steps 300, 301,302,310,311,312,313,320,330,331,332,340,350,351 and 360 12 respectively of the flowchart shown in figure 3. Additionally in step 710 a substep 714 is present in which another button is designated as a correct/decline button. The keypad button disabling step 720 remains the same, 5 however the selection step 730 now comprises the additional step 733 of resetting both counters when the correct/decline button is pressed. Preferably, though not shown, when the correct/decline button is pressed two times consecutively the entire PIN code entered so far is reset as well and a 10 warning signal is given to alert the user thereof.

Figure 8 shows an embodiment of the present invention as part of an access control system. A data entry assembly comprising a keypad 820 and moveable covering means 822 are arranged at a conveniently reachable height, in this 15 case on a column 870. The data entry device may be used to provide access to a room through a door 880, said door provided with an door knob 881 and an electronic lock 882. The door may be supported by doorframe 8 90. The assembly further comprises reading means 823 for reading information 2 0 stored on a card. When someone wants to open the door 880, he may position his card to be read by the reading means and enter his PIN code using the method of the invention. On entry of the correct PIN code the electronic lock 882 is operated to unlock the door which may then be opened by 25 pulling or pushing the door knob 881. Many variations of PIN code verification are conceivable. For instance the PIN code might be stored on the card and be compared with the entered PIN code, or verification of the PIN code may be remote from the data entry assembly. Alternatively no card is used at 30 all and passage through the doorframe is allowed based solely on the PIN code entered. The method of the invention can thus be used in combination with access control systems as known to a person skilled in the art.

It is to be understood that the above description 35 is included to illustrate the operation of the preferred embodiments and is not meant to limit the scope of the invention. From the above discussion, many variations will 13 be apparent to one skilled in the art that would yet be encompassed by the spirit and scope of the present invention.

Claims

Method for configuring a data input device for entering a personal identification number (PIN), the data input device comprising a keyboard with a collection of at least ten keys, the method comprising determining whether a PIN should be used according to a conventional method entered or not, and if not i) a keyboard key assigning step comprising a step of assigning a key from the set of 10 keyboard keys as a first input key to be associated with a first set comprising two or more different numbers, a step of assigning of a further unassigned key from the set of keyboard keys 15 as a second input key to be associated with a second set comprising two or more different numbers, a step of assigning a further unassigned key from the set of keyboard keys 20 as a confirmation key for confirming the entry of the number, ii) a keyboard key disabling step in which all keys of the keyboard other than the keys designated in step i) are disabled for entering a number, iii) a number selection step which is more than is repeated once for entering a multi-digit PIN code and is executed after the confirmation key has been operated, comprising the steps of: 30. increasing a first counter by one each time the first input key is pressed, increasing a second counter with one each time the second input key is pressed, and selecting a number from the first and / or second set as the entered number depending on the value of the first and / or second counter, setting the first and zero to zero / or second counter each time the step of selecting has been performed.

2. Method as claimed in any of the foregoing claims, further comprising in step i): the step of assigning a further unassigned key from the set of keyboard keys as a correction or rejection key for correcting the input of a personal identification number, and in step iii): the step of setting the counter to zero every time the correction or rejection key is pressed.

3. Method as claimed in any of the foregoing claims, further comprising in step ii): the step of generating a warning signal for the user every time one of the switched-off keys is pressed.

The method of claim 2, wherein after the correction key is pressed, the entire PIN number entered so far is erased.

5. Method as claimed in any of the foregoing claims, wherein determining whether a PIN is to be entered according to the conventional method or not comprises choosing a user's input method for entering a PIN, using a key from the set of keyboard keys .

6. Computer program comprising computer program code means adapted to perform all steps of any of claims 1-5 when the program is executed on a processing unit or computer for controlling a data input device.

The computer program of claim 6 embodied on a computer readable medium.

8. Automated issuing device (ATM) or electronic transaction device comprising a data entry device with a keyboard with at least ten keys, the automated issuing device or electronic transaction device further comprising a processing unit which is adapted to perform the steps of one of the methods according to claims 1 to 10.

9. An automated issuing device or electronic transaction device according to claim 8, further comprising selection means adapted to switch the data input device between a first mode in which the PIN can be entered according to steps i) -iii) of the method according to a method according to claims 1-5, or a second mode in which all keys of the keyboard are switched on, wherein each key is associated with only one number, and in which the PIN can be entered using these keys.

10. The automated dispensing device or electronic transaction device according to claim 9, further comprising movable covering means which can be placed in a first position in which the keyboard is substantially covered, and in a second position in which the keyboard is substantially not covered, wherein the cover means in both positions do not impede access to the keys, and wherein the selection means switch the data input device between the first and second modes depending on the position of the cover means.

11. Data input assembly comprising a data input device with a keyboard with at least ten keys, and a processing unit arranged for performing the steps of one of the methods according to claims 1-5.

The data entry assembly of claim 11, wherein the data entry assembly is an automated issuing device or an electronic transaction device.

The data input assembly according to claim 12, further comprising selection means adapted to switch the data input device between a first mode in which the keyboard is configured according to steps i) -iii) of the method according to any one of claims 10 1-5, or a second mode in which all numeric keys of the keyboard are enabled for entering a PIN code, each key being associated with only one number, and wherein the PIN can be entered using these keys.

14. Data input assembly according to any of claims 11-13, further comprising movable covering means that can be placed in a first position in which the keyboard is substantially covered, and a second position in which the keyboard is substantially not covered, the covering means in both positions do not impede access to the keys, and wherein the selection means are arranged to switch the data input device between the first and second modes depending on the position of the covering means.

15. A data input assembly according to any one of claims 11-14, further comprising reading means which are adapted to read from the card a code related to the PIN code, and wherein the processing means are arranged for comparing the code that has been read. by the reading means with a PIN code entered by a user.

16. Data input assembly according to claim 15, wherein the readout means are adapted to read from the card a code related to a preferred data input mode, and the selection means are arranged to switch the data input device between the first and second modes depending on the input method selection code which has been read by the readout means.

An automated issuing device or electronic transaction device according to claim 9 or data input assembly according to claim 13, wherein the selection means comprise a key from the set of keyboard keys, or a switch. -o-o-o-o-o-o-o-