CENTRAL PROCESSING UNIT AND ENCRYPTED PIN PAD FOR AUTOMATED TELLER MACHINES

• US 20070204173A1
• Filed: 02/15/2007
• Published: 08/30/2007
• Est. Priority Date: 02/15/2006
• Status: Abandoned Application

• Current Assignee: PAI ATM Industries LLC
• Original Assignee: WRG Services, Inc.
• Inventors: Kuhn, Jason
• Application Number:
  US11/675,221
• Publication Number:
  US 20070204173A1
• Time in Patent Office: Days
• US Class Current: 713/194
• CPC Class Codes: G06F 21/83 input devices, e.g. keyboards, mice or controllers thereof
• CPC Class Codes: G07F 19/20 Automatic teller machines [ATMs]
• CPC Class Codes: G07F 19/205 Housing aspects of ATMs
• CPC Class Codes: G07F 19/207 Surveillance aspects at ATMs
• CPC Class Codes: G07F 7/10 together with a coded signal , e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data

Abstract

A system and method for securing a central processing unit and/or encrypting pin pad (EPP) for an automated teller machine from tampering is disclosed. A user input is provided that has a plurality of input keys for allowing associated users to enter information by depressing the input keys. The input keys include key contacts and conductive traces that lead to a processing unit and other security features. In general operation, the key contacts and traces are measured and/or read for capacitance and resistance and are compared against prior readings to establish base for next sequences. If base readings are significantly out of tolerance or if other security features generate a fault condition, a tamper response is triggered, which causes erasing (e.g., zeroing) of cryptographic information contained in the security processor and renders unit inoperable.

Claims

1. A method for securing a central processing unit and/or encrypting PIN pad of an automated teller machine from tampering, the system comprising:

providing a user input device having a plurality of input keys for allowing associated users to enter information by depressing the input keys, wherein the input keys include key contacts having an associated capacitance and an associated resistance;

detecting a first capacitance and first resistance associated with the key contacts;

storing the first capacitance and first resistance;

detecting a second capacitance and a second resistance at a predetermined time from the step of detecting the first capacitance and first resistance;

processing the first and second capacitances and first and second resistances to determine if the capacitance and/or resistance is within a threshold range.

2. The method of claim 1 further including triggering a tamper response if the first and second capacitances and/or first and second resistances are outside of the threshold range for a predetermined number of calculations.

3. The method of claim 2, wherein the predetermined number of calculations is three.

4. The method of claim 2, wherein the tamper response is erasing cryptographic information stored in a memory.

5. The method of claim 2, wherein the tamper response is erasing cryptographic information stored in a processor.

6. The method of claim 2, wherein the tamper response is disabling a portion of the central processing unit.

7. The method of claim 1, wherein the predetermined time is a product of the resistance and the capacitance of the key contact.

8. The method of claim 1, wherein the threshold range is determined by an algorithm that allows for gradual temperature induced changes in the capacitance and resistance associated with the key contact.

9. The method of claim 1, wherein the capacitance and resistance for each key contact is detected one after another at a predetermined time constant.

10. The method of claim 9, wherein the time constant of a product of the capacitance and resistance associated with the key contact.

11. A system for securing a central processing unit and/or an encrypting PIN pad of an automated teller machine from tampering, the system comprising:

a user input device having a plurality of input keys for allowing associated users to enter information by depressing the input keys, wherein the input keys include key contacts having an associated capacitance and resistance;

a processor coupled to the key contacts for detecting capacitance and resistance of the key contacts;

a memory coupled to the processor, wherein the memory includes cryptographic information stored therein; and

a tamper trigger, wherein when a change in capacitance and/or resistance is detected above and/or below a threshold value, the cryptographic information is erased from memory.

12. The system of claim 11 further including conductive traces coupling the key contacts to the processor, wherein the conductive traces include an associated capacitance and resistance.

13. The system of claim 12 wherein when a change in capacitance and/or resistance associated with conductive traces is detected above and/or below the threshold value, the cryptographic information is erased from memory.

14. A method for securing a central processing unit of an automated teller machine from tampering, the method comprising:

providing a user input device having a plurality of input keys for allowing associated users to enter information by depressing the input keys, wherein the input keys include circuitry having a capacitance and a resistance;

detecting capacitance and resistance from the circuitry at predetermined time intervals; and

processing the detected capacitance and resistance to determine if the capacitance and/or resistance is above and/or below a predetermined range.

15. The method according to claim 14 further including erasing cryptographic information stored in a memory when the detected capacitance and/or resistance is above and/or below the predetermined range.

16. The method of according to claim 14, wherein the user input device includes a plurality of hold down keys for detecting whether the central processing unit has been opened.

17. The method of according to claim 16, wherein the hold down keys also include a grounded outer ring.

18. A method for securing a central processing unit of an automated teller machine from tampering, the method comprising:

detecting at least one of a capacitance and/or a resistance associated with a user input device;

monitoring the capacitance and resistance at predetermined intervals to determine that the at least one of a capacitance and/or resistance is within a predetermined range;

triggering a tamper event when the at least one of a capacitance and/or resistance is outside the predetermined range.

19. The method of claim 18, wherein the step of triggering a tamper event includes erasing cryptographic information stored in a memory.

20. A central processor unit for an automated teller machine comprising:

a display;

a user input device for interactively entering information by an associated user, wherein the user input device includes a plurality of key contacts having an associated capacitance and resistance;

a central processing unit for controlling the display and the user input device;

a main power supply providing power to at least one of the display, the user input device or the central processing unit;

a security processing unit for protecting the central processing unit from a tamper event, wherein the security processing unit stores cryptographic information and the security processing unit is coupled to the user input device and the central processing unit; and

the security processing unit detects the capacitance and resistance of the plurality of key contacts at predetermined times to determine if the capacitance and/or resistance is within a predetermined range.

21. The unit of claim 20, wherein the cryptographic information stored in the security processing unit is erased if the capacitance and/or resistance fall outside the predetermined range.

22. The unit of claim 21, wherein the cryptographic information stored in the security processing unit is erased if a loss of electrical power is detected from the security processing unit.

25. The unit according to claim 21, wherein the numeric keypad are recessed from a face of the housing.

26. The unit of claim 20 further including a temperature sensor coupled to the security processing unit.

27. The unit of claim 26, wherein when a change in temperature is above a high threshold temperature and/or below a low threshold temperature, the cryptographic information is erased from memory.

23. The unit of claim 23, wherein the user input devices includes a plurality of hold down keys for detecting when the central processing unit has been opened.

24. The unit of according to claim 23, wherein the hold down keys also include a grounded outer ring.

28. A method for securing an encrypted PIN pad (EPP) of an automated teller machine from tampering, the method comprising:

providing a portable user input device having a plurality of input keys for allowing associated users to enter information by depressing the input keys, wherein the input keys include circuitry having a capacitance and a resistance;

detecting capacitance and resistance from the circuitry at predetermined time intervals; and

processing the detected capacitance and resistance to determine if the capacitance and/or resistance is above and/or below a predetermined range.