Method of securing volumes of space in card readers

• US 9,483,668 B2
• Filed: 10/30/2015
• Issued: 11/01/2016
• Est. Priority Date: 05/08/2007
• Status: Active Grant

• Current Assignee: Cirque Corporation (Alps Alpine Co., Ltd.)
• Original Assignee: Cirque Corporation (Alps Alpine Co., Ltd.)
• Inventors: Bytheway, Jared G.
• Primary Examiner(s): VO, TUYEN KIM
• Application Number:
  US14/928,081
• Publication Number:
  US 20160070939A1
• Time in Patent Office: 368 Days
• Field of Search: 235/379, 235/380, 235438-441, 235/482
• US Class Current: 1/1
• CPC Class Codes: G01R 27/2605 Measuring capacitance capacitive sensors G01D5/24
• CPC Class Codes: G01V 3/02 operating with propagation of electric current
• CPC Class Codes: G06F 21/83 input devices, e.g. keyboards, mice or controllers thereof
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: G06F 3/0445 using two or more layers of sensing electrodes, e.g. using two layers of electrodes separated by a dielectric layer
• CPC Class Codes: G06K 7/0095 Testing the sensing arrangement, e.g. testing if a magnetic card reader, bar code reader, RFID interrogator or smart card reader functions properly testing of electrical circuits G01R31/28

Abstract

Capacitive sensing electrodes may be placed in strategic locations inside, outside or inside and outside of a card reader, wherein touch sensor circuitry is then used to take mutual capacitance or self-capacitance measurements that are saved in non-volatile memory as a reference intrusion measurement that is not deleted when power is removed, wherein the reference intrusion measurement may then be used during subsequent intrusion measurements to determine if a skimming device has been disposed adjacent to the card reader, and if a skimming device is detected, appropriate action may be taken such as the automatic disabling of the card reader, the display of a message indicating that the card reader should not be used, or any other action that may prevent a financial card from being compromised.

Claims

1. A method for performing intrusion detection on a card reader by comparing intrusion detection measurements, said method comprising:

providing a card reader assembly in a housing, the card reader assembly including a card slot for receiving a card to be read;

providing a capacitive sensor module for detecting changes in capacitance on intrusion detection electrodes, wherein the intrusion detection electrodes are disposed adjacent to the card slot and coupled to the capacitive sensor module and dedicated to detection of conductive or dielectric objects that cause an imbalance of electrical charges on at least one of the intrusion detection electrodes;

creating an intrusion detection matrix by transmitting at least one signal pattern from the intrusion detection electrodes, receiving at least one response on the intrusion detection electrodes, and storing the at least one response in the intrusion detection matrix to show an initial imbalance of electrical charges on the intrusion detection electrodes, the intrusion detection matrix being stored in non-volatile memory that is not erased when the card reader is shut off;

performing an intrusion detection procedure by transmitting the at least one signal pattern from the intrusion detection electrodes, receiving at least one new response on the intrusion detection electrodes and comparing the at least one new response to the initial imbalance of electrical charges stored in the intrusion detection matrix stored in the non-volatile memory to determine if an object has caused a change in capacitance on the intrusion detection electrodes; and

performing an action if it is determined that the at least one new response is different from the initial imbalance stored in the intrusion detection matrix, the action being selected from the group of actions comprised of taking no action and letting the card reader to continue operating but sending an alert signal, shutting down the card reader, or a combination of these actions.

2. The method as defined in claim 1 wherein the method further comprises disposing the card reader assembly within a point-of-sale (POS) device that includes a Personal Identity Number (PIN) Entry Device (PED), the POS functioning as the housing.

3. The method as defined in claim 2 wherein the method further comprises performing the intrusion detection procedure each time that power is applied to the card reader.

4. The method as defined in claim 2 wherein the method further comprises constructing the intrusion detection electrodes from Indium-Tin Oxide (ITO) so that the intrusion detection electrodes are easily damaged.

5. The method as defined in claim 2 wherein the method further comprises:

providing an Interlock circuit in the card reader;

detecting an intrusion;

sending a signal to the Interlock circuit that the card reader should be shut down; and

removing power from the card reader using the Interlock circuit.

6. The method as defined in claim 2 wherein the method further comprises disposing at least two of the intrusion detection electrodes inside the card slot.

7. The method as defined in claim 2 wherein the method further comprises modifying sensitivity of the intrusion detection procedure to thereby improve performance of the intrusion detection system.

8. The method as defined in claim 7 wherein the method further comprises operating a second intrusion detection system at the same time as the first intrusion detection system.