Device for reading magnetic stripe and/or chip cards with a touch screen for pin entry

• US 8,579,190 B2
• Filed: 11/28/2011
• Issued: 11/12/2013
• Est. Priority Date: 11/29/2010
• Status: Active Grant

• Current Assignee: Diebold Nixdorf Systems GmbH (Diebold Nixdorf, Incorporated)
• Original Assignee: Wincor Nixdorf International GmbH (Diebold Nixdorf, Incorporated)
• Inventors: Golueke, Peter, Carozzi, Andrea
• Primary Examiner(s): VO, TUYEN KIM
• Application Number:
  US13/305,166
• Publication Number:
  US 20120132705A1
• Time in Patent Office: 715 Days
• Field of Search: 235379-383, 235/451, 235/492
• US Class Current: 235/379
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/82 Protecting input, output or interconnection devices
• CPC Class Codes: G06F 3/04886 by partitioning the display area of the touch-screen or the surface of the digitising tablet into independently controllable areas, e.g. virtual keyboards or menus
• CPC Class Codes: G07F 19/201 Accessories of ATMs
• CPC Class Codes: G07F 7/1033 Details of the PIN pad

Abstract

The invention relates to a device (10) for reading magnetic stripe and/or chip cards, in particular bank cards, EC cards and/or credit cards. The device (10) comprises a display unit (14) and a touch module (16) arranged in front of this display unit for determining a position of a touch of a display area. Further, the device (10) has a security module (18) for controlling the display unit (14) and the touch module (16). The security module (18) transmits first data for displaying a keypad for entry of a PIN to the display unit (14). In response to a touch of the display area, the touch module (16) generates second data with information about the position of the touch, encrypts these data and transmits the encrypted data to the security module (18).

Claims

1. A device for reading magnetic stripe and/or chip cards, in particular bank cards, EC cards and/or credit cards, comprising

a display unit,

a touch module arranged in front of the display unit and comprising at least one sensor for determining a position of a touch of a display area,

and a security module for controlling the display unit and the touch module,

wherein:

the security module transmits first data for displaying a keypad by means of the display unit for entering a personal identification number (PIN) to the display unit,

the touch module generates second data with information about the position of the touch in response to the touch of the display area, and

in that the touch module encrypts the second data and transmits these encrypted data to the security module.

2. The device according to claim 1, wherein the security module encrypts the first data and transmits the first data to the display unit in an encrypted manner.

3. The device according to claim 1 wherein the touch module determines a first coordinate and/or a second coordinate of the position of the touch of the display area, in that the touch module determines a first transmission value by adding a first offset value to the first coordinate and/or a second transmission value by adding a second offset value to the second coordinate, and in that the second data comprise information about the first transmission value and/or the second transmission value.

4. The device according to claim 3, wherein the security module determines the first offset value and/or the second offset value, in particular by means of a random number generator, and in that, before the display area is touched, the security module transmits third data with information about the first offset value and/or the second offset value to the touch module, preferably in an encrypted manner.

5. The device according to claim 1 wherein the security module encrypts the first data and/or third data by means of a stored encryption algorithm, in particular by means of a Data Encryption Standard (DES) encryption algorithm and/or in that the touch module encrypts the second data by means of a stored encryption algorithm, in particular by means of a Data Encryption Standard (DES) encryption algorithm.

6. The device according to claim 3 wherein the security module decrypts the second data and determines the first coordinate by subtracting the first offset value from the first transmission value and/or the second coordinate by subtracting the second offset value from the second transmission value.

7. The device according to claim 1 wherein the first data comprise information about the position where the keypad is to be displayed on the display unit, in particular a first coordinate and a second coordinate of a center of the keypad.

8. The device according to claim 7, wherein the security module determines the position of the keypad by means of a random process.

9. The device according to claim 7 wherein the security module controls the display unit such that in the case of a first entry of a personal identification number (PIN) the display unit displays the keypad at a first position and in the case of a second entry of a personal identification number (PIN) the security module displays the keypad at a second position different from the first position.

10. The device according to claim 1 wherein the touch module and the security module are connected to each other via a first cable connection, in particular by means of a USB cable, and/or the display unit and the security module are connected to each other via a second cable connection, in particular by means of a USB cable and/or a DVI cable, and in that a first sensor for determining an interruption of the first cable connection and/or a second sensor for determining an interruption of the second cable connection are provided.

11. The device according to claim 1 wherein the touch module and/or the display unit respectively comprise a memory element in which data for an unambiguous identification of the touch module or, respectively, of the display unit are stored, and in that the security module reads out these data at preset time intervals or continuously and determines the presence of the touch module or, respectively, of the display unit dependent on the read-out data.

12. The device according to claim 1 wherein the touch module and/or the display unit are mounted on a housing part of the device in an installation position, in that at least a first anti-removal switch and/or a second anti-removal switch is provided, in that the first anti-removal switch closes an electric circuit that is open in the installation position or opens an electric circuit that is closed in the installation position when the touch module is removed from its installation position, and in that, by way of closing or, respectively, opening the electric circuit, the security module detects the removal of the touch module from the installation position, in that the second anti-removal switch closes an electric circuit that is open in the installation position or opens an electric circuit that is closed in the installation position when the display unit is removed from the installation position, and in that the security module detects the removal of the display unit from the installation position by way of closing or, respectively, opening the electric circuit.

13. The device according to claim 1 wherein the security module determines whether the device is operated in a secure operating mode or in a non-secure operating mode.

14. The device according to claim 13, wherein the security module controls the display unit such that the display unit displays in which operating state the device is operated.

15. The device according to claim 1 wherein the device comprises a control unit for controlling the security module, and in that the control unit is connected to the security module via at least one data transmission connection.

16. A device for reading magnetic stripe and/or chip cards, including bank cards, EC cards, and/or credit cards, comprising:

a display unit;

a touch module adjacent to the display unit, the touch module including at least one sensor for determining a touch position of a touch of a display area, the touch module configured to generate touch coordinate data including the touch position; and

a security module configured to control both the display unit and the touch module, the security module configured to transmit to the display unit keypad display data for displaying a keypad on the display unit for accepting entry of a personal identification number (PIN) at the display unit, the security module is further configured to encrypt the keypad display data and transmit the encrypted keypad display data to the display unit;

wherein the touch module is configured to encrypt the touch coordinate data including the touch position and transmit the encrypted touch coordinate data to the security module.

17. The device of claim 16, wherein the security module is configured to position the entire keypad at a random location on the display unit.

18. The device of claim 17, wherein an arrangement of numbers on the keypad remains constant at each location of the keypad on the display unit.

19. The device of claim 16, wherein the touch module is configured to determine a first coordinate and a second coordinate of the touch position, determine a first transmission value by adding a first offset value to the first coordinate, and determine a second transmission value by adding a second offset value to the second coordinate, the first transmission value and the second transmission value are included in the touch coordinate data.

20. A device for reading magnetic stripe and/or chip cards, including bank cards, EC cards, and/or credit cards, comprising:

a display unit;

a touch module adjacent to the display unit, the touch module including at least one sensor for determining a touch position of a touch of a display area, the touch module configured to generate touch coordinate data including the touch position; and

a security module configured to control both the display unit and the touch module, the security module configured to transmit to the display unit keypad display data for displaying a keypad on the display unit for accepting entry of a personal identification number (PIN) at the display unit, the security module is further configured to position the entire keypad at a random location on the display unit, and an arrangement of numbers on the keypad remains constant at each location of the keypad on the display unit;

a control unit that controls the security module; and

a reading unit that reads a magnetic stripe and/or chip card, the reading unit is controlled by the control unit;

wherein the touch module is configured to encrypt the touch coordinate data including the touch position and transmit the encrypted touch coordinate data to the security module; and

wherein the touch module is further configured to determine a first coordinate and a second coordinate of the touch position, determine a first transmission value by adding a first offset value to the first coordinate, and determine a second transmission value by adding a second offset value to the second coordinate, the first transmission value and the second transmission value are included in the touch coordinate data.