Patent Grant
9269237
The technical field of the invention concerns the detection of a foreign object mounted in the near range of an input means used for authentication, in particular the detection of a foreign objected inserted into or mounted to a service machine for skimming identification and authorization information or for tampering with the service machine or devices interacting with the service machine, such as magnetic stripe cards.
Such an attack for skimming or tampering with a service machine or a device interacting with the service machine for the purpose of unlawfully obtaining authorization information is also referred to as a skimming attack.
For example, in a skimming attack targeting a service machine, such as an automatic teller machine, the machine may be rigged by a third party by mounting an unauthorized or foreign reading device in the region of the card insert port of the automatic teller machine, which is recognized hardly or not at all as such by users of the automatic teller machine. By means of the reading device, the data stored on the card or magnetic stripe card, in particular magnetic stripe data, are read out unnoticed during the regular use of the machine and are sent to a device that is coupled with the reading device or buffered in the reading device in order to read them out at a later point in time after removal of the reading device from the machine. Furthermore, the personal identification number (PIN) of the card may be skimmed. For this, a camera is used to capture the keyboard entry of the PIN. The attacker may then use the skimmed information to manufacture and use a copy of the card and thus gain unauthorized access to accounts or to secured areas.
A skimming device may be located for example in the front part of the automatic teller machine, in an additional magnetic card reader, in the card insert port or in the card reading device. Examples for such foreign objects or skimming devices are magnetic heads, coils or microphones. Furthermore, keyboards for PIN entry may be covered by keyboard dummies, that are not recognizable as such and detect or record entry of a user's PIN unnoticed and unlawfully.
The publication EP 0 015 920 B1 describes a method for discerning the presence or absence of a microwave-reflecting component of an object, by which microwaves of a predetermined frequency are generated. For this, an output location of the microwaves is defined. Moreover, a distance range of this output location is given, which exceeds the wavelength of a standing wave of the microwave energy of the predetermined frequency and in which the microwave-reflecting component is introduced during the discerning process. Microwaves reflected by the component are received and their amplitude is determined. The standing wave of this microwave energy is deformed from its usual cyclic sinusoid curve of a characteristic from the output location into a curve that has a maximum value at the output location and a first minimum value that lies at the outer end, with respect to the output location, within the distance range, the first minimum value being a threshold, so that within said range this minimum value cannot lead to reflected values that are larger than the minimum value itself, and outside of said range, there are no values that exceed the threshold.
The publication U.S. Pat. No. 5,459,405 A discloses a method and an apparatus for detecting the presence of an object using near field effects.
The publication EP 0 561 124 B1 describes a device and a method for determining attempted frauds by connecting an electric wire to a terminal point of a chip card in an apparatus for reading and writing from/to a memory of a chip card.
The device includes a measurement device and a resonance unit having a resonator that is coupled to the terminal point, the electric characteristics of the resonator being variable by the unauthorized wire that is installed, those electric characteristics being detectable by the measurement device.
An example for the evaluation of sensor signal in a self-service terminal is described in the publication EP 1 844 454 A1.
The publication U.S. Pat. No. 7,479,921 B2 describes a distance measuring device. The distance measuring device includes a sending source having a VCO, a transmission unit, a detection unit and a signal processing unit.
Here, the distance measuring device is provided with a bidirectional coupler between the transmission unit and the sending source or the detection device. The output signal of the VCO is supplied to the transmission unit as well as to the detection device. Furthermore, the bidirectional coupler detects a reflected wave R, which has been received by means of the antenna of the transmission unit, and provides the detected reflected wave R to a multiplier and the detection device.
Moreover, a phase detection is carried out by multiplying the reflected wave R with a signal that is synchronized with the transmission signal.
U.S. Pat. No. 6,367,695 B1 describes a self-service terminal with an emitter/detector systern, wherein the emitter and the detector are arranged such that an illegitimately introduced object disturbs the emissions between emitter and detector, and thus the illegitimately introduced object can be detected. For this, microwaves are used, for example.
The publication US 2004/026507 A1 discloses an automatic teller machine with a detector for detecting illegitimately introduced foreign objects. Such an illegitimately introduced foreign object may be a magnetic head, for example. For example a microwave sensor is used as a detector.
A further conventional self-service terminal is disclosed in U.S. Pat. No. 6,390,367 A. A further automatic teller machine with the possibility of preventing fraud is disclosed in the publication U.S. Pat. No. 7,240,827 B2.
An object of the present invention is to provide a solution for the detection of a foreign object that is illegitimately mounted in the near range of an input means used for identification and/or authentication.
In particular, it is an object of the present invention to provide a solution for the detection of foreign objects or skimming devices, which are illegitimately mounted in a service machine and which are located in the near range of the input means for inputting identification and/or authorization information.
Accordingly, an apparatus for detecting a foreign object mounted in the near range of an input means used for identification and/or authentication is proposed, the apparatus including at least a coupler. The coupler is arranged to supply an oscillating signal to two input terminals of an antenna for generating a standing wave, to supply the oscillating signal phase-shifted and with a predetermined level to a detection device, and to couple out, for the detection device, a reflection signal that was received by the antenna. Furthermore, the coupler is arranged to detect a phase difference between the supplied oscillating signal with the predetermined level and the reflection signal that is coupled out in order to detect the foreign object.
The antenna is configured as a circularly polarized patch antenna with emission characteristics that are, within a tolerance, in particular substantially, constant or homogenous within a monitoring range of the apparatus. In order to attain the constant emission characteristics, the aperture angle of the antenna may be arranged such that it covers the entire detection region of the apparatus.
By configuring the antenna as a circularly polarized antenna, a high, directionindependent sensitivity is attained within the entire detection region of the apparatus. Furthermore, the antenna is preferably configured to be transparent for the entire usable frequency region of the ISM band.
The apparatus may also be referred to as an anti-skimming apparatus, as a standing wave sensor apparatus or as a standing wave sensor.
The apparatus is suitable for input means that are arranged to identify and authenticate users. However, the apparatus is also suitable for input means that are arranged to identify or authenticate users.
The apparatus is particularly suitable to monitor input means of authentication systems and/or identification systems with regard to tampering. The input means may be arranged such that a user can input an entry for identifying or authentieating the user. Examples for input means are keyboards, in particular PIN keyboards, iris scanners, finger scanners or the like. Moreover, such an identification system may be part of a service machine.
Furthermore, input means are proposed, which include at least one structurally integrated apparatus for detecting a foreign object mounted in the near range of an input means of an identification system or authentication system as described above.
Moreover, a service machine is proposed, which includes at least one apparatus for detecting a foreign object mounted in the near range of an input means of the service machine as described above.
Furthermore, a method for detecting a foreign object mounted in the near range of an input means used for identification and/or authentication is proposed, having the following steps:
Furthermore, a computer program product is proposed, which causes on a program-controlled device the execution of at least a part of the above-described method for detecting a foreign object mounted in the near range of an input means used for identification and/or authentication. The at least one part, which is embodied as a computer program product, includes in particular the step of detecting the phase difference between the supplied oscillating signal with the predetermined level and the reflection signal that is coupled out.
A computer program product, such as a computer program means, may be provided or furnished as a storage medium, such as a memory card, a USB stick, a floppy disk, a CD-ROM, a DVD, but also in form of a downloadable file from a server in a network. This may occur for example in a wireless communication network by transferring a corresponding file with the computer program product or the computer program means.
The apparatus may be arranged to generate an electromagnetic field by means of a standing wave in the near range of the apparatus, and to detect a change of the generated electromagnetic field due to a reflection at an electromagnetically reactive material of a foreign object that is illegitimately mounted in or at a part of the service machine, in particular of a skimming device.
Thus, additionally mounted reader or scanner devices can be recognized. These reader or scanner devices do not necessarily have to be introduced into the machine, but may also be mounted or arranged outside.
By employing a standing wave, the apparatus is able to detect foreign or other objects in the near range of the antenna of the apparatus. The apparatus may operate, in particular, in the microwave region. Operating frequencies of for example 5.8 GHz within the ISM band (ISM band: industrial, scientific and medical band) may be used.
By introducing or removing electromagnetically reactive materials into the near field of the antenna of the apparatus, the antenna is put out of tune and its impedance at the set transmission frequency is changed. This changes the reflected portion of the signal, in particular its amplitude or level, at the corresponding output of the coupler. In particular, foreign objects that are mounted additionally with fraudulent intent, such as tampering devices or skimming devices, can thus be sensed.
In accordance with the present invention, a part of the service machine to be monitored is any part of the service machine that is a potential target for an attack by fraudulent tampering in order to illegitimately skim security data, in particular authorization data. Such parts or machine parts are, in particular, the region of a card reader for guiding a magnetic card or a PIN pad for entering a PIN code.
Depending on the predetermined phase difference, a result signal for detecting a foreign object introduced into the service machine may be provided. This result signal may be digitized in particular with an AD-converter and supplied to an evaluation unit that is disposed downstream.
The evaluation unit may carry out, in particular, an evaluation and consistency check of the result signal or the result signals, a filtering and a correction in order to compensate changes that are not caused by tampering, in particular phase differences due to changes of varying environmental conditions, in particular temperature and humidity. Moreover, the evaluation unit filters out short-term signal changes during permissible actions and operations at the service machine, such as withdrawing cash or the like.
The evaluation unit may be configured as a self-contained module with its own processing unit, for example. But the evaluation unit may also be integrated as a software module into the machine control of the service machine.
Advantageous embodiments and modifications of the invention are apparent from the dependent claims as well as the description with reference to the drawings.
According to a preferable embodiment, the coupler is configured as a directional coupler.
According to a further preferable embodiment, the detection device is configured as a demodulator, in particular as an envelope demodulator. In that case, the detection device is provided with a sum signal and then detects an amplitude or amplitude change thereof. The influence of the phase difference already occurs in the coupler when generating the sum signal.
According to a further preferable embodiment, an oscillator for providing the oscillating signal is provided, the oscillator being coupled to the coupler.
For example, the oscillator may generate a non-modulated carrier signal as an oscillating signal, which has a constant level within the used frequency region. Preferably, this generated non-modulated carrier signal undergoes only small changes due to temperature variations. The oscillator is preferably frequencystabilized within the used frequency region.
Furthermore, the oscillator is preferably tunable and/or can be calibrated. Thus, it is possible to perform individual tuning for optimum sensitivity of the apparatus in order to compensate individual variations among the circuit boards or the used components.
Moreover, it is preferable to employ a transceiver device. Such a transceiver device can be frequency stabilized in particular by a quartz and an internal phaselocked loop (PLL) and delivers a constant output level of, for example, up to +21 dBm. The output level varies with frequency and temperature by maximally 3 dB. The output level may be adjustable. As noted above, the transceiver operates preferably in the 5.8 GHz ISM band (5.725 GHz to 5.875 GHz). Within this fre quency band, preferably several different frequencies can be set, in particular by means of internal registers.
The operating region of the apparatus depends in particular from the used frequency f and the distance of the objects.
The wavelength λ at a frequency of 5.8 GHz is 51.72 mm in air (see the following equation):
According to a further preferred embodiment, the coupler is adapted to shift a phase of the oscillating signal that is supplied to the first input terminal and/or the second input terminal of the antenna by a predetermined phase angle, in particular by a phase angle of 90°.
In particular, the oscillating signal may be divided evenly onto the two input terminals of the antenna with 0° and 90° phase shift in order to generate the standing wave. For example, the oscillator signal that is supplied to the input terminal of the directional coupler may be provided at the two output terminals for feeding the antenna, the two antenna feeding signals being phase shifted electrically by a phase angle of 90°.
The purpose of the electrically phase-shifted feeding and the geometrically rotated feeding is, in particular, the circular polarization of the antenna or the generated electromagnetic field, with which a higher detection sensitivity is attained regardless of the orientation of the foreign object.
According to a further preferable embodiment, the coupler is arranged to adjust the attenuation of the oscillating signal for the detection device in such a manner that the level of the oscillating signal supplied to the detection device corresponds within a tolerance, and in particular corresponds substantially, to the level of the reflection signal received by the antenna. An advantage of this embodiment lies in a maximization of the sensitivity.
With regard to a high sensitivity of the apparatus, it is particularly advantageous if the oscillating signal and the reflection signal, that is, the signal reflected at the foreign object, have substantially the same level or amplitude at the detection device, in particular across the entire frequency range of the used ISM band. This may be achieved in particular by a corresponding design of the coupler, in particular the directional coupler, as well as knowledge of the reflection characteristics of the foreign objects to be detected. If the configurations of the foreign objects used as skimming devices or tampering devices are known, then also their reflection characteristics are, at least substantially, known in advance.
According to a further preferable embodiment, the coupler is arranged to set the level of the oscillating signal for the detection device in dependence of the expected dimensions of the foreign object, in particular of a skimming device.
According to a further preferable embodiment, the coupler is arranged to set the attenuation of the oscillating signal for the detection device to a value between 2 dB and 8 dB. In particular, the coupler may set the attenuation of the oscillating signal for the detection device to 5 dB.
Thus, the attenuation by the coupler, in particular directional coupler, of the oscillating signal that is supplied to the detection device, in particular the demodulator, is considerably lower than in conventional directional couplers.
According to a further preferable embodiment, the coupler is impedance matched at its input terminals to the oscillator, the antenna and the detection device, in order to reduce reflections.
According to a further preferable embodiment, the patch antenna is formed on a substrate with a high relative dielectricity. In particular, the relative dielectricity of the substrate may be greater than 6 (er>6). The substrate may be a ceramic substrate, for example.
In order to manufacture the patch antenna, a circuit board material with high relative dielectricity is preferably used, in order to attain particularly compact dimensions. The resonance frequency of the antenna is preferably adjusted to the operating frequency, so that a maximum radiation is attained at that frequency. The impedance of the antenna input terminals is preferably adjusted at the operation frequency to the directional coupler in such a manner that signal reflection is low or minimal.
According to a further preferable embodiment, the detection device is arranged to multiply a superposition between the supplied oscillating signal having the predetermined level and the reflection signal that is coupled out with a characteristic curve of a non-linear element. The phase difference between the provided oscillating signal with the predetermined signal and the reflection signal that is coupled out can be detected in dependence thereof.
According to a further preferable embodiment, the non-linear element is a detector diode. The detection of the phase difference or the demodulation is carried out preferably at the detector diode, which converts the reception signal into the base band.
According to a further preferable embodiment, a lowpass filter is provided downstream of the detection device.
The lowpass filter provided downstream has the function to eliminate mixing products, in particular at double the frequency. In order to minimize the influence of temperature on the demodulation, variations in the diode characteristics of the detector diode are preferably compensated with a diode that is of identical configuration and thermally sufficiently coupled, and by subtraction at an instrumentation amplifier.
According to a further preferable embodiment, the coupler is arranged to detect foreign objects, in particular skimming devices, that are small in relation to the dimensions of the part of the service machine that is to be monitored.
Skimming devices such as audio heads or antenna coils are small in relation to the region of the service machine that is to be monitored, such as the card insert port.
According to a further preferable embodiment, the frequency of the oscillating signal and the geometry of the antenna are arranged such that the monitoring region of the apparatus is in a region where the reception sensitivity of the antenna is large.
If the oscillator frequency and thus the wavelength is varied over time within a predefined region, then the inherently present zones with low detection sensitivity can be shifted spatially. Thus, the overall attainable detection probability can be increased.
The invention is explained in the following in more detail with reference to the working examples shown in the diagrammatic figures.
In all figures, the same or functionally the same means and devices are denoted by the same reference symbols, unless noted otherwise.
The apparatus 1 includes a coupler 2, which is arranged to guide an oscillating signal 3 to the input terminals 4 and 5 of an antenna 6, in order to generate a standing, circularly polarized wave. Thus, a foreign object F that is arranged or introduced without permission into the service machine is detected. In
The coupler 2 may be configured in particular as a directional coupler. The directional coupler 2 is configured to shift a phase of the oscillating signal 3 that is supplied to the first input terminal 4 and/or the second input terminal 5 of the antenna 6 by a predetermined phase angle, for example by 90°. The oscillating signal is divided evenly onto the two input terminals 4, 5 of the antenna 6 with a phase shift of 0° and 90°, in order to generate a standing, circularly polarized wave.
Furthermore, the directional coupler 2 supplies the oscillating signal 7 with a predetermined level to a demodulator 8. The directional coupler 2 adjusts an attenuation of the oscillating signal 7 for the demodulator 8 such that the level of the oscillating signal 7 supplied to the demodulator 8 corresponds, within a tolerance, to the level of the reflection signal 9 received through the antenna 6. The level of the oscillating signal 7 for the demodulator 8 is adjusted in particular in view of the expected dimensions of the foreign object F. For example, the attenuation of the oscillating signal 7 for the demodulator 8 may be adjusted to a value between 2 dB and 8 dB, preferably to 5 dB.
The directional coupler 2 is arranged to detect a phase difference between the supplied oscillating signal 7 with the predetermined level and the reflection signal 9 that is coupled out to detect the foreign object F. Moreover, the demodulator 8 may be arranged in particular to multiply a superposition of the provided oscillating signal 7 having the predetermined level and the reflection signal 9 that is coupled out with a characteristic curve of a non-linear element, and to provide on its output side a signal indicating the phase difference 10 in dependence thereof. Moreover, the signal for indicating the phase difference 10 is suitable to provide a result signal for detecting the foreign object to a downstream evaluation unit.
The antenna 6 may be configured as a circularly polarized patch antenna, for example. The patch antenna 6 may be printed for example on a ceramic substrate 13 having a high relative dielectricity or high dielectric constant (see
The frequency of the oscillating signal 3 and the geometry of the antenna 6 may be arranged in particular such that the monitoring region of the apparatus 1 is in a region of high reception sensitivity of the antenna 6. Concerning this,
Referring to
In Step S1, an oscillating signal is supplied to the two input terminals of an antenna to generate a standing, circularly polarized wave.
In Step S2, the oscillating signal is supplied with a predetermined level, in particular with an attenuated level, to a detection device.
In Step S3, a reflection signal received with the antenna is coupled out to the detection device. The reflection signal results preferably from a reflection of the standing wave at the foreign object.
In Step S4, a phase difference between the supplied oscillating signal having the predetermined level and the reflection signal that is coupled out is detected, in order to detect the foreign object.
Although the present invention has been described in the foregoing with reference to preferred working examples, it is not limited to this, but can be modified in many ways.
| Number | Date | Country | Kind |
|---|---|---|---|
| 10190003 | Nov 2010 | EP | regional |
| Filing Document | Filing Date | Country | Kind | 371c Date |
|---|---|---|---|---|
| PCT/EP2011/068098 | 10/17/2011 | WO | 00 | 5/1/2013 |
| Publishing Document | Publishing Date | Country | Kind |
|---|---|---|---|
| WO2012/059316 | 5/10/2012 | WO | A |
| Number | Name | Date | Kind |
|---|---|---|---|
| 4166973 | Lilly, Jr. et al. | Sep 1979 | A |
| 4238795 | Schiek et al. | Dec 1980 | A |
| 5459405 | Wolff et al. | Oct 1995 | A |
| 5703601 | Nalbandian | Dec 1997 | A |
| 6315194 | Graef et al. | Nov 2001 | B1 |
| 6367695 | Mair et al. | Apr 2002 | B1 |
| 6390367 | Doig | May 2002 | B1 |
| 6587072 | Gresham et al. | Jul 2003 | B1 |
| 6693598 | Bishop et al. | Feb 2004 | B1 |
| 7240827 | Ramachandran et al. | Jul 2007 | B2 |
| 7305934 | Ishii | Dec 2007 | B2 |
| 7379013 | Dean et al. | May 2008 | B2 |
| 7479921 | Iritani et al. | Jan 2009 | B2 |
| 7598903 | Yang et al. | Oct 2009 | B2 |
| 7798395 | Ramachandran et al. | Sep 2010 | B2 |
| 20040026507 | Nagata et al. | Feb 2004 | A1 |
| 20040119966 | Iritani | Jun 2004 | A1 |
| 20060023571 | Uebo et al. | Feb 2006 | A1 |
| 20060169764 | Ross et al. | Aug 2006 | A1 |
| 20060214842 | Takenoshita et al. | Sep 2006 | A1 |
| 20090251360 | Uebo | Oct 2009 | A1 |
| 20100231387 | Hong et al. | Sep 2010 | A1 |
| Number | Date | Country |
|---|---|---|
| 19739771 | Mar 1999 | DE |
| 102005030345 | Mar 2006 | DE |
| 0015920 | Oct 1980 | EP |
| 0561124 | Sep 1993 | EP |
| 1844454 | Oct 2007 | EP |
| 2 232 423 | Jul 2004 | RU |
| 2006 101 691 | Jun 2006 | RU |
| WO 2005001598 | Jan 2005 | WO |
| Entry |
|---|
| International Search Report issued in corresponding application No. PCT/EP2011/068098, dated Nov. 25, 2011 (6 pgs). |
| English translation of Decision of Grant issued in corresponding Russian Application No. 2013125515/08(037581) received on Apr. 1, 2015 (7 pgs). |
| Chinese Office Action issued in application No. 201180064195.0, dated Apr. 24, 2015 (24 pgs). |
| Number | Date | Country | |
|---|---|---|---|
| 20130221989 A1 | Aug 2013 | US |
