DEVICE FOR READING A MAGNETIC STRIPE AND/OR CHIP CARD HAVING A CAMERA FOR THE DETECTION OF INSERTED SKIMMING MODULES
20180040206 ยท 2018-02-08
Inventors
- Torsten Wiesinger (Untergruppenbach, DE)
- Alexander Drichel (Bielefeld, DE)
- Steffen Priesterjahn (Paderborn, DE)
- Dieter Schliebe (Bad Wuennenberg, DE)
Cpc classification
International classification
G07F19/00
PHYSICS
G06K7/00
PHYSICS
Abstract
The invention relates to a device (10) for reading a magnetic stripe and/or chip card comprising a card reader (16) for reading out data from the magnetic stripe and/or chip card, said card reader having a transport path (14) along which the magnetic stripe and/or chip card is moved when it is inserted into the card reader (16) and/or when it is removed from the card reader (16) and/or is received during the readout of data. Further, the device (10) has an image capturing unit (20) for capturing images of the card reader (16), the card reader (16) being designed such that by means of images captured by the image capturing unit (16) it can be detected whether a skimming module is inserted into the transport path (14) of the card reader (16).
Claims
1. A device for reading a magnetic stripe and/or chip card, comprising a card reader (16) for reading out data from the magnetic stripe and/or chip card, which card reader comprises a transport path (14) along which the magnetic stripe and/or chip card is moved when it is inserted into the card reader (16) and/or when it is removed from the card reader (16) and/or in which the magnetic stripe and/or chip card is received during readout, and comprising an image capturing unit (20) for capturing images of the card reader (16), characterized in that the card reader (16) is designed such that by means of images captured by the image capturing unit (20) it can be detected whether a skimming module for spying out data from magnetic stripe and/or chip cards is received in the transport path (14) of the card reader (16).
2. The device (10) according to claim 1, characterized in that a control unit (18) is provided which compares an image of the card reader (16) captured by means of the image capturing unit (20) with a target image stored therein, and that, dependent on the result of this comparison, the control unit (18) detects whether a skimming module is received in the transport path (14).
3. The device (10) according to claim 2, characterized in that the control unit (18) executes a predetermined image processing program for the image comparison.
4. The device (10) according to claim 2 or 3, characterized in that the control unit (18) divides the captured image into at least two segments, and compares them with corresponding segments of the target image, determines at least one contour in the captured image and compares it with contours in the target image, detects at least one object in the captured image and/or measures at least one object detected in the captured image and compares it with preset target dimensions.
5. The device (10) according to one of the preceding claims, characterized in that the image capturing unit (20) is arranged outside the card reader (16) and captures an image with a representation of at least a partial area of the outside (22) of the card reader (16).
6. The device (10) according to one of the preceding claims, characterized in that at least a partial area of the card reader (16) is designed transparently, and that the image captured by the image capturing unit (20) comprises a representation of this transparent partial area.
7. The device (10) according to one of the preceding claims, characterized in that the transport path (14) is delimited at least in part by a delimiting element (24), that in the delimiting element (24) at least a through hole (30, 32) is provided, and that the image captured by the image capturing unit (20) images at least the area of this through hole (30, 32).
8. The device (10) according to claim 7, characterized in that in the delimiting element (24) a predetermined hole pattern with a plurality of through holes (30, 32) is provided.
9. The device (10) according to one of the claims 6 to 8, characterized in that the image capturing unit (20) is arranged at a first side of the transport path (14) and that a light source (26) for transilluminating the card reader (16) is provided at a second side of the transport path (14) opposite to the first side.
10. The device (10) according to one of the preceding claims, characterized in that within the card reader (16) a projection unit (52) is provided for projecting a predetermined pattern (54) onto a side of a delimiting element (24) delimiting the transport path (14), which side faces the transport path (14), and that the image captured by the image capturing unit (20) comprises a representation of at least a detail of the projected pattern (54).
11. The device (10) according to claim 10, characterized in that the pattern (54) comprises a grid and/or a point-shaped pattern.
12. The device (10) according to claim 10 or 11, characterized in that the control unit (18) determines the position of preset elements of the pattern (54) in the representation of the pattern (54) in the captured image and compares this position with a target position of the respective element in the target image.
13. The device (10) according to one of the preceding claims, characterized in that within the card reader (16) a light source (70) for emitting pulsed light onto at least a partial area (72) of the transport path (14) is provided, that the capturing of the image by means of the image capturing unit (20) is synchronized with the pulsed light, and that the image captured by the image capturing unit (20) comprises a representation of at least a detail of the partial area (72) of the transport path (14) illuminated by the pulsed light.
14. The device (10) according to one of the claims 10 to 13, characterized in that the image capturing unit (20) is arranged within the card reader (16).
15. The device (10) according to one of the claims 10 to 13, characterized in that the image capturing unit (20) is arranged outside the card reader (16) and that at least one deflecting unit (60), in particular at least one reflecting prism, is provided for deflecting the detection area (62) of the image capturing unit (20) into the transport path (14) of the card reader (16).
Description
[0031] Further features and advantages of the invention result from the following description which explains the invention in more detail on the basis of embodiments in connection with the enclosed Figures.
[0032]
[0033]
[0034]
[0035]
[0036]
[0037]
[0038]
[0039]
[0040]
[0041]
[0042] In
[0043] Alternatively, the device 10 for reading out data of a magnetic stripe and/or chip card can also be inserted into any other device, in particular an automatic cash register system, an automatic cash safe and/or a payment terminal. The magnetic stripe and/or chip card is in particular an EC (electronic cash) card, a credit card and/or a payment card.
[0044] In the case of novel skimming attacks, a skimming module is inserted via the slot 12 into the transport path 14 of the card reader 16 of the device 10, by means of which skimming module the data of an inserted magnetic stripe and/or chip card can be read out. Further, by means of a camera mounted in a hidden manner and/or an additional keypad mounted on the keypad of the automated teller machine 100 the PIN associated with the magnetic stripe and/or chip card is spied out so that a person performing the skimming attack knows both the data of the magnetic stripe and/or chip card and the PIN and can thus withdraw money and/or make purchases in an unauthorized manner.
[0045] Such skimming modules inserted within the transport path 14 in which usually only the magnetic stripe and/or the chip card is inserted during the read out by the card reader and/or when feeding and/or removing the magnetic stripe and/or chip card cannot be detected by known measures for blocking skimming attacks which are directed to the detection of skimming modules mounted in front of the slot 12. In order to be able to also detect such skimming modules arranged within the transport path 14, the methods and devices for blocking skimming attacks described in the following in connection with
[0046] In
[0047] The control unit 18 in particular executes an image processing program by means of which the actual image captured by the camera 20 is compared with a preset target image of the hole pattern. By means of this comparison, the control unit can easily determine whether a skimming module is inserted into the transport path 14. If a skimming module is indeed inserted, then at least one of the holes of the hole pattern is covered so that no light of the light source 26 can pass therethrough and this hole is correspondingly not imaged in the image captured by means of the camera 20.
[0048] It is particularly advantageous when the different devices 10 make use of different hole patterns each time, so that the people performing the skimming attacks cannot adapt the form of their skimming modules to the hole patterns and thus skimming modules can be detected reliably.
[0049] In
[0050] In an alternative embodiment, additionally or alternatively to the hole patterns also partial areas of the delimiting elements 24 can be designed in a partially transparent manner so that through these transparent areas an image of the inside of the card reader, in particular of the transport path 14, can be captured by means of the camera 20.
[0051] In
[0052] This object 40 resulted from the fact that due to the skimming module the light of the light source 24 cannot transilluminate at this position or cannot transilluminate so strongly and thus a dark area is captured by the camera 20.
[0053] The control unit 10 in particular performs a segment analysis in which the images captured by means of the camera 20 are divided into segments and these segments are compared with predetermined segments of stored target images. Additionally or alternatively, also a contour determination of captured objects can take place and thus a comparison of contours can be made. Additionally or alternatively, the determined objects can also be measured and/or their position can be determined. Based on the corresponding image information gained during the image processing, it can reliably be detected each time by means of the comparison between the captured actual image and the predetermined target values whether a skimming module or another object which is usually not provided is arranged in the transport path 14.
[0054] In
[0055] In the example shown in
[0056] In an alternative embodiment, also any other pattern can be projected which enables to detect an object in the region of the pattern 54 via the determination of changes of the pattern in the representations determined by the camera 20.
[0057] In
[0058] In
[0059] In an alternative embodiment of the invention, the individual embodiments described above can also be combined. By the simultaneous application of several of these embodiments, the reliability for the detection of skimming modules can be increased further. Moreover, in different partial areas of the transport path different of the afore-described embodiments can also be applied in parallel.
LIST OF REFERENCE SIGNS
[0060] 10 device [0061] 12 slot [0062] 14 transport path [0063] 16 card reader [0064] 18 control unit [0065] 20 camera [0066] 22 outside [0067] 26, 70 light source [0068] 30, 32 through hole [0069] 40 segment [0070] 50 surface [0071] 52 projection unit [0072] 54 pattern [0073] 56 grid line [0074] 58 point of intersection [0075] 60 deflecting unit [0076] 62 detection area [0077] 100 automated teller machine [0078] 102 cash box [0079] 104 input and/or output unit [0080] 106 transport path