Remote display tamper detection using data integrity operations

• US 8,558,685 B2
• Filed: 08/29/2011
• Issued: 10/15/2013
• Est. Priority Date: 11/21/2006
• Status: Active Grant

• Current Assignee: Gilbarco Incorporated (Vontier Corp.)
• Original Assignee: Gilbarco Incorporated (Vontier Corp.)
• Inventors: Long, Joseph D., Carapelli, Giovanni
• Primary Examiner(s): Bugg, George
• Assistant Examiner(s): Labbees, Edny
• Application Number:
  US13/220,183
• Publication Number:
  US 20110314552A1
• Time in Patent Office: 778 Days
• Field of Search: 340/500, 340/539.1, 340/539.31, 340/5.1, 340/5.9, 705 16- 18
• US Class Current: 340/500
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 2221/032 Protect output to user by software means
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/204 comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
• CPC Class Codes: G07F 13/025 wherein the volume is determined during delivery
• CPC Class Codes: G07F 9/002 Vending machines being part of a centrally controlled network of vending machines

Abstract

Methods and systems for detecting tampering of a remote display. According to one method, a first data integrity result is generated by performing a first data integrity operation on display data to be displayed on the remote display at a secure module. The display data is transmitted from the secure module to the remote display security module. The remote display security module receives the display data. A second data integrity result is generated by performing the first data integrity operation on the display data received at the remote display security module. A determination is made as to whether the remote display has been tampered with at the secure module if the first data integrity result does not match the second data integrity result.

Claims

1. A method for detecting tampering of a remote display having an associated remote display security module, comprising:

generating at a secure module a first data integrity result by performing a first data integrity operation on display data that instructs the remote display what to display;

transmitting the display data from the secure module to the remote display security module;

receiving at the remote display security module the display data;

generating a second data integrity result at the remote display security module by performing the first data integrity operation on the received display data;

transmitting the second data integrity result to the secure module; and

determining at the secure module whether the remote display has been tampered with based at least in part on determining whether the first data integrity result matches the second data integrity result.

2. The method of claim 1 wherein the step of determining whether the first data integrity result matches the second data integrity result comprises determining whether the second data integrity result is received at the secure module.

3. The method of claim 1 further comprising displaying the display data on the remote display.

4. The method of claim 3 wherein the step of displaying the display data is performed at the remote display security module.

5. The method of claim 1 further comprising monitoring a tamper detection switch at the remote display security module.

6. The method of claim 5 comprising determining that the remote display has been tampered with at the remote display security module by sensing a signal from the tamper detection switch indicating that the remote display has been tampered with.

7. The method of claim 6 wherein the remote display security module senses the signal from the tamper detection switch indicating that the remote display has been tampered with in association with a boot sequence for the remote display security module after at least one of a reset and a power-down condition at the remote display security module.

8. The method of claim 5 wherein the tamper detection switch is selected from a group consisting of a plunger switch and a proximity switch.

9. The method of claim 1 wherein the first data integrity operation includes calculating a cyclical redundancy check (CRC) on the display data.

10. The method of claim 9 wherein the CRC is calculated on a fixed portion of the display data.

11. The method of claim 9 wherein the CRC is calculated on a varying portion of the display data.

12. The method of claim 9 wherein the CRC is calculated by delaying at least one bit of the display data.

13. The method of claim 1 wherein the first data integrity operation is selected from a plurality of data integrity operations.

14. The method of claim 1 wherein the first data integrity operation is selected in association with a control signal asserted to the remote display.

15. The method of claim 1 further comprising sending an indication identifying the first data integrity operation within a plurality of data integrity operations to the remote display security module.

16. The method of claim 15 wherein the indication identifying the first data integrity operation is sent to the remote display security module at a time other than when the display data is sent to the remote display security module.

17. The method of claim 1 wherein at least a portion of the display data is used to select the first data integrity operation within a plurality of data integrity operations.

18. A system for detecting tampering of a remote display having an associated remote display security module, comprising:

a secure module adapted to;

generate a first data integrity result by performing a first data integrity operation on display data to be displayed on the remote display;

transmit the display data to the remote display security module;

determine whether the remote display has been tampered with based at least in part on determining whether the first data integrity result matches a second data integrity result; and

a remote display security module adapted to;

receive the display data;

generate the second data integrity result by performing the first data integrity operation on the display data received at the remote display security module; and

transmit the second data integrity result to the secure module.

19. The system of claim 18 wherein the secure module is further adapted to determine whether the first data integrity result matches the second data integrity result based on whether the second data integrity result is received.

20. The system of claim 18 wherein the remote display security module is further adapted to display the display data on the remote display.

21. The system of claim 18 wherein the remote display security module is further adapted to monitor a tamper detection switch, wherein the remote display security module is further adapted to determine that the remote display has been tampered with by sensing a signal from the tamper detection switch indicating that the remote display has been tampered with.

22. The system of claim 21 wherein the remote display security module is further adapted to sense the signal from the tamper detection switch indicating that the remote display has been tampered with in association with a boot sequence for the remote display security module after at least one of a reset and a power down condition at the remote display security module.

23. The system of claim 18 wherein the secure module and the remote display security module are adapted to perform the first data integrity operation by calculating a cyclical redundancy check (CRC) on the display data.