Patent Application
20130327832
The present invention pertains to the field of electronic payment terminals. More particularly, the present invention pertains to a novel type of electronic payment device which can be paired. The invention also pertains more particularly to the protection of a magnetic reading head of such an electronic payment device.
At present, payment terminals are used mostly to enable payment for purchases of goods and services at sales points. These terminals generally include a smartcard reader and a magnetic card reader. They also have a screen used in particular to view the amounts involved in the transactions and a keypad for entering these amounts as well as confidential codes, entered by the customers, or else they have a touch-sensitive screen.
The most recent terminals are connected to cash registers and/or to computers by means of communications networks. Such connections can be cable connections, for example of the Ethernet type, or wireless connections. These connections are used for example to link up to an authentication server or to a bank server in order to obtain an authorization of debit.
In order to be able to communicate with the exterior and especially with bank servers, the terminal payments therefore use connection means. One of these means consists of the use of a wireless communications network, for example GPRS (General Packet Radio Service) network. The payment terminal is then provided with a SIM (Subscriber Identity Module) card. This is a chip containing a microcontroller and memory. This SIM card is associated with a telephone subscription (of the data transmission type) which must be paid by the merchant. Apart from the fact that this type of subscription is relatively costly, the performance of communications functions is assigned to the payment terminal. Thus, in addition to the payment functions, the terminal must manage communications functions which are not naturally the functions expected of a payment terminal.
To mitigate the problem of subscription costs associated with the GPRS communication in particular, novel types of payments terminals communicate by means of a WiFi (Wireless Fidelity) type of network for example. The merchant then is no longer obliged to take out a particular subscription. The payment terminal can link up to the merchant's WiFi network and access the bank servers in the same way as in the wire connection. However, the use of the payment terminal is then limited to the coverage zone of the WiFi network, which is not suited to nomadic use (for example for a doctor visiting his patients).
There is therefore a need to propose a payment terminal that can be used by nomadic merchants, hence through the use of a GPRS/UMTS type wireless communications network and, at the same time, to reduce to the minimum the costs of using such a payment terminal.
The invention does not have these drawbacks of the prior art. The invention pertains more particularly to a payment device intended to be paired with a communications device to form an electronic payment terminal.
According to the invention, said payment device comprises an upper half-shell and a lower half-shell comprising a surface enabling the attachment of a modular interface for the pairing of the communications device and comprising a slot extending longitudinally, said lower half-shell further comprising, within said slot, an aperture enabling the passage of a magnetic reading head, said payment device being furthermore characterized in that it comprises, beneath the attachment surface, an electronic circuit board positioned laterally to said magnetic reading head so that said electronic circuit board makes it possible to fill an unused volume within said payment device.
Thus, the invention prevents the introduction of a fraudulent device into said payment device. Such a fraudulent device could for example take the form of a complementary reading head.
In other words, the invention pertains to a payment device intended to be paired with a communications device to form an electronic payment terminal comprising means for reading a chip of a smartcard and means for reading a magnetic track of a magnetic card, comprising a magnetic reading head.
According to the invention, such a payment device has a longitudinal slot enabling the insertion of a magnetic card and comprises a motherboard carrying at least one first integrated circuit capable of communicating with a smartcard and at least one protective daughter board bearing at least one security element, said protection daughter board extending in parallel to said motherboard along a portion of said slot, so as to prevent fraudulent access to said motherboard by means of said slot.
According to one particular embodiment, said electronic circuit board furthermore comprises at least one integrated circuit for controlling said electronic circuit board.
Thus, this complementary card can be used to provide supplementary functions to the payment device.
According to one particular characteristic, said at least one control integrated circuit comprises means of communication belonging to the group comprising:
bluetooth type means of communication;
WiFi type means of communication;
contactless means of communication.
Thus, the complementary card can be used to add additional functions of communication to the payment device.
According to one particular characteristic, said at least one control integrated circuit comprises at least on identifier of said electronic circuit board.
Thus, it is possible to identify the electronic circuit board to prevent fraudulent use of this circuit card.
According to one particular characteristic, said at least one identifier of said electronic circuit board is a MAC address of a communications means of an integrated circuit for controlling said electronic circuit board.
Thus, it is not necessary to provide for supplementary means, which are necessarily costlier to implement, in order to define an identifier of the control integrated circuit.
According to one particular embodiment, said electronic circuit board furthermore comprises an anti-intrusion device comprising at least one 3D conductive circuit connected to an input of a security processor of said payment device.
Thus, the invention prevents any malicious individual from carrying out a perforation of the payment device.
According to another aspect, the invention also pertains to a method for verifying an integrity of construction of a payment device intended to be paired with a communications device to form an electronic payment terminal, said communications device being characterized in that it comprises an electronic circuit board comprising at least one control integrated circuit comprising at least one identifier of said electronic circuit board.
According to the invention, such a method of verification comprises the following steps in said payment device:
a step for obtaining an identifier recorded within a memory of said payment device;
a step for comparing said recorded identifier with said at least one identifier of said electronic circuit board;
a step for implementing at least one protective measure for protecting at least one piece of confidential data of said payment device when said step for comparing indicates that the recorded identifier and said at least one identifier of said electronic circuit board are different.
According to another aspect, the invention pertains to an electronic payment terminal (10) formed by the pairing of a payment device (20) and a communications device (30).
According to the invention, said payment device (20) comprises a case formed by an upper half-shell (21-3) and a lower half-shell (21-4) comprising a surface (22) for attaching a modular interface (60) for the pairing of the communications device (30) and a slot (21-42) extending longitudinally, said slot having an aperture (23-1) enabling the passage of a magnetic reading head (24), said payment device (20) furthermore comprising, beneath the attachment surface (22), an electronic circuit board (26) positioned laterally to said magnetic reading head (24) so that said electronic circuit board (26) makes it possible to fill an unused volume (25) within said payment device, said communications device (30) being a standard telephone terminal.
Other features and advantages of the invention shall appear more clearly from the following description of a particular embodiment given by way of a simple illustratory and non-exhaustive example and from the appended figures, of which:
The general principle of the invention relies on the physical pairing of a payment device with a communications device, such as a “smartphone” to form a payment terminal.
Thus, the invention makes it possible to overcome the drawbacks of the prior art and especially makes it possible to avoid having recourse to a dedicated telephone line in order to set up a connection with the communications network and with servers such as authorization servers or bank servers.
More particularly, in one embodiment of the invention, the payment device can be physically paired with the communications device by means of a particular pairing structure, called a modular interface. When it is used, this modular interface is fixed to a rear face of the payment device. This structure can be dismantled according to one particular embodiment of the invention by applying a particular mode of kinematic functioning.
This modular interface according to the invention enables the insertion and retaining of the communications device in a housing planned for this purpose. Among the elements of this modular interface, according to the invention, it is possible to distinguish particularly a pairing device, also called an electronic connection board, by which a physical connection can be set up between the payment device and the communications device.
This modular interface comprises other elements which, according to certain embodiments of the invention, enable secure use of the payment terminal formed by the payment device and the communications device.
More particularly, the payment terminal that is an object of the invention is described with reference to
The payment terminal (10) comprises two general sub-assemblies, which can be assembled, constituted by the payment device (20) and the communications device (30).
As illustrated, and in an illustratory and non-exhaustive embodiment of the invention, the payment device (20) comprises a front face, which can be seen in
More particularly, this modular interface defines a housing (60-1) for inserting and pairing the communications device (30).
The payment device, for its part, is formed to fulfill the payment functions. To this end, the payment device (20) comprises, in addition to the keypad for keying in information (21-1) and the screen (21-2) for viewing keyed-in information, an upper half-shell (21-3) comprising the holes needed for the passage of the keys of the keypad (21-1) and an aperture for the viewing of the screen (21-2). The screen can also be touch-sensitive and fulfill the keypad function.
The payment device (20) also includes a lower half-shell (21-4) which is fixedly attached to the upper half-shell (21-3) to form the case of the payment device (20). The lower half-shell (21-4) defines the surface (22) enabling the attachment of the modular interface (60). The lower half-shell (21-4) comprises a housing (21-41) to insert a battery enabling the electrical power supply to the payment device (20).
The lower half-shell (21-4) is also formed so that it has a slot (21-42) enabling the passage of a payment card comprising a magnetic track. Once the payment device has been assembled, this slot (21-42) extends on one of the flanks of the payment device (20) and enables the reading of the magnetic stripe payment card by a motion of translation of this magnetic stripe card on the length of the payment device (20).
The lower half-shell (21-4) of the payment device (20) comprises an aperture (21-43) crossed by a magnetic reading head (24). This aperture (21-43) is formed so that it can enable a certain mobility on the part of the magnetic reading head (24). Thus a limited clearance, providing this mobility, is possible. It is made on the rim of the aperture. The magnetic head (24) can thus move to a certain extent in order to provide optimum reading of the pieces of information contained on the magnetic track of a payment card. This magnetic reading head (24) is placed on a support and connected to a motherboard (20) of the payment device by means of a ribbon cable connector.
The motherboard (27) is an electronic circuit comprising, on a first face in this embodiment, a set of microcircuits, for example one or more microprocessors and/or memories, as well as devices enabling the connection of the keypad elements (21-1) and the viewing screen (21-2). On its second face, the motherboard comprises other microcircuits as well as a memory card reader (also called an MC reader) (28). This reader (28) is configured to enable the insertion and the reading of a payment card comprising a chip. An unused volume (25) is present beneath the attachment surface (22) of the lower half-shell (21-4) laterally to the magnetic reading head (24).
In order to increase the security of the payment devices, the inventors have had the idea of proposing the addition of a card, also called a “daughter” board, making it possible, on the one hand, to secure access to the internal components of the payment device and, on the other hand, to fulfill other ancillary functions of the payment card which are described in detail here below. This daughter board is situated beneath the attachment surface (22) enabling the attachment of a modular interface (60) to pair the communications device (30). In other words, it is this daughter board that prevents access to the motherboard and prevents the insertion of a magnetic head.
According to the invention, a security board (PCB) called a “daughter” board (26,
Thus, the security of the payment device is optimized in a simple and efficient manner in taking account of the constraints laid down by its shape, which must be adapted to the communications device with which it has to cooperate.
According to one complementary characteristic, the daughter board furthermore comprises one or more of the communications means between the payment communications device and the exterior. These envisaged communication means include:
a BT (bluetooth) communications interface;
a WiFi communications interface;
an RFID type contactless communications interface.
According to a complementary characteristic, the daughter board furthermore comprises a device for identifying the payment device to which said daughter board is supposed to be connected. Thus, the invention makes it possible to be sure that the payment device cannot be disassembled in order to rebuild another payment device out of detached parts belonging to various other payment devices. Indeed, an individual without the necessary authorization to assemble and disassemble the payment devices will not be able to assemble a new device using detached parts recovered from other payment devices because the identification device present on the daughter board will enable the attempt to be detected. The payment device will therefore passes into attack mode.
As already mentioned, in this mode of functioning, the terminal takes the necessary steps to protect the content of the data, especially the bank data which is contained in the memories of the terminal.
According to one particular embodiment, this identifier comprises a MAC address corresponding to the MAC address of one of the communications interfaces integrated into the daughter board. This MAC address, which enables a unique identification of the communications circuit used, is provided to the payment device so that it can identify the motherboard associated with it.
According to another complementary characteristic, the daughter board is also provided with an anti-intrusion device itself connected to the input of the security processor of the payment device. The anti-intrusion device comprises at least one 3D conductive circuit, for example in the form of a lattice, and/or a contact element of this conductive circuit with an array for connecting the anti-intrusion device to the printed circuit of the motherboard of the payment device.
Although the present disclosure has been described with reference to one or more examples, workers skilled in the art will recognize that changes may be made in form and detail without departing from the scope of the disclosure and/or the appended claims.
| Number | Date | Country | Kind |
|---|---|---|---|
| 1060204 | Dec 2010 | FR | national |
| 1060205 | Dec 2010 | FR | national |
This Application is a Section 371 National Stage Application of International Application No. PCT/EP2011/072001, filed Dec. 7, 2011, which is incorporated by reference in its entirety and published as WO 2012/076568 on Jun. 14, 2012, not in English. None. None.
| Filing Document | Filing Date | Country | Kind | 371c Date |
|---|---|---|---|---|
| PCT/EP2011/072001 | 12/7/2011 | WO | 00 | 8/26/2013 |
