Automated banking machine that uses inductance readings to detect unauthorized card reader devices

• US 8,028,900 B2
• Filed: 03/19/2010
• Issued: 10/04/2011
• Est. Priority Date: 11/26/2002
• Status: Active Grant

• Current Assignee: Diebold Nixdorf, Incorporated
• Original Assignee: Diebold Self-Service Systems (Diebold Nixdorf, Incorporated)
• Inventors: Laskowski, Edward L., Blackson, Dale H., Enright, Jeffery M., Ramachandran, Natarajan
• Primary Examiner(s): St. Cyr, Daniel
• Application Number:
  US12/661,579
• Publication Number:
  US 20100223181A1
• Time in Patent Office: 564 Days
• Field of Search: 235/379, 235/380, 235/382
• US Class Current: 235/379
• CPC Class Codes: G06Q 20/1085 involving automatic teller machines [ATMs]
• CPC Class Codes: G06Q 20/18 involving self-service terminals [SST], vending machines, kiosks or multimedia terminals
• CPC Class Codes: G07F 19/20 Automatic teller machines [ATMs]
• CPC Class Codes: G07F 19/201 Accessories of ATMs
• CPC Class Codes: G07F 19/2055 Anti-skimming aspects at ATMs
• CPC Class Codes: G07F 19/207 Surveillance aspects at ATMs
• CPC Class Codes: G07F 19/211 Software architecture within ATMs or in relation to the ATM network

Abstract

A cash dispensing automated banking machine includes a card reader associated with a card slot. An anti-fraud sensing device is able to sense ambient light or generated radiation that passes to the sensing device through the card reader slot. The installation of an unauthorized card reading device on the machine changes at least one property sensed by the sensing device. A controller in the machine receives signals from the sensing device, and determines if an unauthorized card reading device has been installed.

Claims

1. A method comprising:

(a) operating at least one computer to obtain through operation of at least one inductance sensor of a cash dispensing automated banking machine including a card reader, at least one inductance reading of material located adjacent a card slot to the card reader;

(b) operating the at least one computer in determining whether the at least one inductance reading obtained in step (a) indicates a presence of an unauthorized card reading device located adjacent the card slot; and

(c) responsive at least in part to a positive determination in step (b), operating the at least one computer to cause at least one message suggestive of the presence of an unauthorized card reading device located adjacent the card slot, to be sent to at least one remote computer that is located remotely from the machine.

2. The method according to claim 1 wherein the automated banking machine is part of a banking system including a plurality of automated banking machines, wherein each automated banking machine includes a card reader, a biometric reader, and a cash dispenser,

and further comprising:

(d) operating the card reader of the automated banking machine to read card data from a user card;

(e) operating the biometric reader of the automated banking machine to read user biometric data;

(f) authorizing a user to use the automated banking machine to carry out a cash dispensing transaction responsive at least in part to both

computer-determined correspondence between the card data read in step (d) and stored card information, and

computer-determined correspondence between user biometric data read in step (e) and stored biometric information.

3. The method according to claim 1

wherein step (b) includes determining that the at least one inductance reading obtained in step (a) indicates the presence of an unauthorized card reading device adjacent the card slot,

wherein step (c) includes causing the at least one message to be sent to the at least one remote computer.

4. The method according to claim 3 wherein step (b) includes determining a change in at least one inductance reading, wherein the change indicates that additional material has been placed adjacent the card slot.

5. The method according to claim 4 wherein step (a) includes obtaining at least one first inductance reading, and further comprising:

(d) subsequent to step (a), operating the at least one computer to obtain through operation of the at least one inductance sensor, at least one second inductance reading of material adjacent the card slot;

wherein step (b) includes comparing the at least one first inductance reading and the at least one second inductance reading to determine whether there is a difference which indicates the presence of an added unauthorized card reading device adjacent the card slot.

6. The method according to claim 4 wherein step (b) includes comparing the at least one inductance reading and inductance data stored in at least one data store, to determine whether there is a difference which indicates the presence of an added unauthorized card reading device adjacent the card slot.

7. The method according to claim 1 wherein the automated banking machine includes at least one proximity sensor in operative connection with the at least one computer, and further comprising

(d) operating the at least one proximity sensor to detect a customer adjacent the machine;

wherein step (a) is responsive at least in part to the customer detection in step (d).

8. The method according to claim 7 wherein the at least one computer is programmed to cause operation of the at least one inductance sensor only during a transaction step which involves expected use of the card reader, and further comprising

(e) operating the at least one inductance sensor during the transaction step;

(f) subsequent to step (e), operating the card reader to receive a user card during the transaction step.

9. The method according to claim 8 wherein step (e) includes operating the at least one computer to cause the at least one inductance sensor to begin sensing prior to step (a), and further comprising

(g) prior to step (f), operating the at least one computer to cause the at least one inductance sensor to cease sensing.

10. The method according to claim 1 wherein step (a) includes operating the at least one computer to cause the at least one inductance sensor to begin a predetermined period of sensing, and further comprising

(d) subsequent to step (a), operating the at least one computer to cause the at least one inductance sensor to cease sensing;

wherein step (d) is responsive at least in part to expiration of the predetermined period.

11. Apparatus comprising:

an automated banking machine including;

a cash dispenser,

a card reader,

a card slot to the card reader,

at least one inductance sensor,

at least one computer in operative connection with the card reader and the at least one inductance sensor,

wherein the at least one computer includes computer instructions executable by the at least one computer,

wherein the at least one computer is programmed to operate to obtain through operation of the at least one inductance sensor, at least one inductance reading of material located adjacent the card slot,

wherein the at least one computer is programmed to subsequently operate in determining whether the at least one inductance reading obtained indicates a presence of an unauthorized card reading device located adjacent the card slot, and

wherein the at least one computer is programmed to subsequently operate

 

responsive at least in part to a positive determination that the at least one inductance reading obtained indicates the presence of an unauthorized card reading device located adjacent the card slot,

to cause at least one message to be sent to at least one remote computer that is located remotely from the machine,

 

wherein the at least one message is suggestive of the presence of an unauthorized card reading device located adjacent the card slot.

12. The apparatus according to claim 11 wherein the automated banking machine is part of a banking system including a plurality of automated banking machines, wherein each automated banking machine includes a card reader, a biometric reader, and a cash dispenser,

wherein the card reader of the automated banking machine is operative to read card data from a user card,

wherein the biometric reader of the automated banking machine is operative to read user biometric data,

wherein the at least one computer is operative to authorize a user to use the automated banking machine to carry out a cash dispensing transaction responsive at least in part to both

computer-determined correspondence between read card data and stored card information, and

computer-determined correspondence between read user biometric data and stored biometric information.

13. The apparatus according to claim 11 wherein the at least one computer is programmed to operate in determining a change in at least one inductance reading, wherein the change indicates that additional material has been placed adjacent the card slot.

14. The apparatus according to claim 13

wherein the at least one computer is programmed to operate to obtain at least one first inductance reading of material adjacent the card slot through operation of at least one inductance sensor,

wherein the at least one computer is programmed to subsequently operate to obtain at least one second inductance reading of material adjacent the card slot through operation of at least one inductance sensor,

wherein the at least one computer is programmed to cause a comparison of the at least one first inductance reading and the at least one second inductance reading in determining whether there is a difference which indicates the presence of an unauthorized card reading device adjacent the card slot.

15. The apparatus according to claim 13 wherein the at least one computer is programmed to cause a comparison of the at least one inductance reading and inductance data stored in at least one data store, in determining whether there is a difference which indicates the presence of an unauthorized card reading device adjacent the card slot.

16. The apparatus according to claim 13

wherein the automated banking machine includes at least one proximity sensor in operative connection with the at least one computer,

wherein the at least one proximity sensor is operative to detect a customer adjacent the machine,

wherein the at least one computer is programmed to operate to obtain the at least one inductance reading of material adjacent the card slot responsive at least in part to customer detection by the at least one proximity sensor.

17. The apparatus according to claim 16 wherein the at least one computer is programmed to begin operation of the at least one inductance sensor during a transaction step which involves expected use of the card reader, and wherein the at least one computer is programmed to cease operation of the at least one inductance sensor during the transaction step prior to operation of the card reader.

18. The apparatus according to claim 13

wherein the at least one computer is programmed to cause the at least one inductance sensor to begin a predetermined period of sensing;

wherein the at least one computer is programmed to subsequently cause the at least one inductance sensor to cease sensing, responsive at least in part to expiration of the predetermined period.

19. A method comprising:

(a) operating the at least one inductance sensor of an automated banking machine in measuring at least one inductance level of material adjacent a card slot to a card reader of the machine;

(b) determining whether the at least one inductance level measured in step (a) indicates a presence of an unauthorized card reading device adjacent the card slot; and

(c) further comprising

(ci) responsive to a negative determination in step (b), causing operation the card reader to read account data from a user card during a user authorization process;

or

(cii) responsive to a positive determination in step (b), sending at least one message reflective of the presence of an unauthorized card reading device, to at least one remote computer.

20. The method according to claim 19 wherein step (cii) includes both

(ciia) sending to a service provider computer, a message requesting service of the machine;

and

(ciib) causing operation the card reader to read account data from a user card, and sending to a financial institution computer, a message indicating to watch for unauthorized activity regarding the account data.