Device for reading a magnetic stripe and/or chip card having a camera for the detection of inserted skimming modules

Abstract

A device (10) for reading a magnetic stripe and/or chip card has a card reader (16) for reading out data from the magnetic stripe and/or chip card, said card reader having a transport path (14) along which the magnetic stripe and/or chip card is moved when it is inserted into the card reader (16) and/or when it is removed from the card reader (16) and/or is received during the readout of data. Further, the device (10) has an image capturing unit (20) for capturing images of the card reader (16). The card reader (16) is designed to use images captured by the image capturing unit (16) to detect whether a skimming module is inserted into the transport path (14) of the card reader (16).

Claims

1. A device for reading a magnetic stripe and/or chip card, comprising: a slot leading into the device and configured for receiving the magnetic stripe and/or chip card from an external location, a card reader inside the device and configured to read out data from the magnetic stripe and/or chip card, the card reader having a transport path along which the magnetic stripe and/or chip card is moved after being inserted into the card reader and/or when being removed from the card reader and/or in which the magnetic stripe and/or chip card is received during readout, and an image capturing unit inside the device and outside the card reader and configured to capture images with a representation of at least a partial area of the outside of the card reader, wherein at least a partial area of the card reader that is offset from the slot is transparent, and the image capturing unit is disposed and configured to capture images of the transparent partial area of the card reader and to detect from images captured by the image capturing unit whether a skimming module for spying out data from magnetic stripe and/or chip cards is in the transport path of the card reader.

2. The device of claim 1, further comprising a control unit configured to compare an image of the card reader captured by the image capturing unit with a target image stored therein, and, dependent on a result of this comparison, detects whether a skimming module is in the transport path.

3. The device of claim 2, wherein the control unit is configured to execute a predetermined image processing program for the image comparison.

4. The device of claim 2, wherein the control unit is configured to: divide the captured image into at least two segments, and compare the at least two segments with corresponding segments of the target image, determine at least one contour in the captured image and compare it with contours in the target image, detect at least one object in the captured image and/or measure at least one object detected in the captured image and compare the object with preset target dimensions.

5. The device of claim 1, wherein the transport path is delimited at least in part by a delimiting element, at least a through hole is provided, and in the delimiting element the image captured by the image capturing unit images at least the area of the through hole.

6. The device of claim 1, wherein the image capturing unit is arranged at a first side of the transport path and that a light source for transilluminating the card reader is provided at a second side of the transport path opposite to the first side.

7. The device of claim 1, wherein a projection unit is provided in the card reader and is configured to project a predetermined pattern onto a side of a delimiting element delimiting the transport path and facing the transport path, and wherein the image captured by the image capturing unit comprises a representation of at least a detail of the projected pattern.

8. The device of claim 7, wherein the pattern comprises a grid and/or a point-shaped pattern.

9. The device of claim 7, wherein the control unit is configured to determine the position of preset elements of the pattern in the representation of the pattern in the captured image and compares this position with a target position of the respective element in the target image.

10. The device of claim 7, wherein the image capturing unit is arranged within the card reader.

11. The device of claim 1, wherein the card reader has a light source configured to emit pulsed light onto at least a partial area of the transport path, the capturing of the image by means of the image capturing unit is synchronized with the pulsed light, and that the image captured by the image capturing unit comprises a representation of at least a detail of the partial area of the transport path illuminated by the pulsed light.

12. A device for reading a magnetic stripe and/or chip card, comprising: a card reader configured to read out data from the magnetic stripe and/or chip card, the card reader having a transport path along which the magnetic stripe and/or chip card is moved when inserted into the card reader and/or when removed from the card reader and/or in which the magnetic stripe and/or chip card is received during readout, and an image capturing unit configured to capture images of the card reader, wherein the card reader is configured to detect from images captured by the image capturing unit whether a skimming module for spying out data from magnetic stripe and/or chip cards is in the transport path of the card reader, and wherein the transport path is delimited at least in part by a delimiting element, the delimiting element has a predetermined hole pattern with a plurality of through holes in the delimiting element, the image captured by the image capturing unit images at least the area of the through holes.

13. The device of claim 12, wherein the image capturing unit is arranged outside the card reader and is configured to capture an image with a representation of at least a partial area of the outside of the card reader.

14. A device for reading a magnetic stripe and/or chip card, comprising: a card reader configured to read out data from the magnetic stripe and/or chip card, the card reader having a transport path along which the magnetic stripe and/or chip card is moved when inserted into the card reader and/or when removed from the card reader and/or in which the magnetic stripe and/or chip card is received during readout, an image capturing unit arranged outside the card reader and configured to capture images of the card reader, a projection unit provided in the card reader and configured to project a predetermined pattern onto a side of a delimiting element that delimits the transport path and that faces the transport path, the image captured by the image capturing unit comprising a representation of at least a detail of the projected pattern, and at least one deflecting unit disposed and configured to deflect the detection area of the image capturing unit into the transport path of the card reader, wherein the card reader is configured to detect from images captured by the image capturing unit whether a skimming module for spying out data from magnetic stripe and/or chip cards is received in the transport path of the card reader.

Description

BRIEF DESCRIPTION OF THE DRAWINGS

(1) FIG. 1 shows a schematic illustration of an automated teller machine.

(2) FIG. 2 shows a schematic illustration of a device for reading a magnetic stripe and/or chip card according to a first embodiment.

(3) FIG. 3 shows an illustration of an image captured by means of the camera of the device according to FIG. 2.

(4) FIG. 4 shows an illustration of the image according to FIG. 3 during the image processing.

(5) FIG. 5 shows an illustration of a further image captured by means of the camera according to FIG. 2 without skimming module.

(6) FIG. 6 shows an illustration of an image captured by means of the camera according to FIG. 2 with skimming module.

(7) FIG. 7 shows a schematic illustration of a device for reading a magnetic stripe and/or chip card according to a second embodiment.

(8) FIG. 8 shows a highly simplified illustration of the functioning of the device according to FIG. 7.

(9) FIG. 9 shows a schematic illustration of a device for reading a magnetic stripe and/or chip card according to a third embodiment, and

(10) FIG. 10 shows a schematic illustration of a device for reading a magnetic stripe and/or chip card according to a fourth embodiment.

DETAILED DESCRIPTION

(11) In FIG. 1, a schematic illustration of an automated teller machine 100 is illustrated, which comprises a device 10 for reading a magnetic stripe and/or chip card which can be fed to a card reader 16 of the device 10 via a slot 12 of the device 10. Further, the automated teller machine 100 has four cash boxes 102 and an input and/or output unit 104 via which the notes of value can be withdrawn and/or deposited. For this, the input and/or output unit 104 is connected to the cash boxes 102 via a transport path 106.

(12) Alternatively, the device 10 for reading out data of a magnetic stripe and/or chip card can also be inserted into any other device, in particular an automatic cash register system, an automatic cash safe and/or a payment terminal. The magnetic stripe and/or chip card is in particular an EC (electronic cash) card, a credit card and/or a payment card.

(13) In the case of novel skimming attacks, a skimming module is inserted via the slot 12 into the transport path 14 of the card reader 16 of the device 10, by means of which skimming module the data of an inserted magnetic stripe and/or chip card can be read out. Further, by means of a camera mounted in a hidden manner and/or an additional keypad mounted on the keypad of the automated teller machine 100 the PIN associated with the magnetic stripe and/or chip card is spied out so that a person performing the skimming attack knows both the data of the magnetic stripe and/or chip card and the PIN and can thus withdraw money and/or make purchases in an unauthorized manner.

(14) Such skimming modules inserted within the transport path 14 in which usually only the magnetic stripe and/or the chip card is inserted during the read out by the card reader and/or when feeding and/or removing the magnetic stripe and/or chip card cannot be detected by known measures for blocking skimming attacks which are directed to the detection of skimming modules mounted in front of the slot 12. In order to be able to also detect such skimming modules arranged within the transport path 14, the methods and devices for blocking skimming attacks described in the following in connection with FIGS. 2 to 10 are applied.

(15) In FIG. 2, a schematic illustration of a device 10 for reading a magnetic stripe and/or chip card according to a first embodiment is illustrated. The device 10 comprises, in addition to the card reader 16 with the transport path 14, a control unit 18 as well as an image capturing unit designed as a camera 20. By means of the camera 20, images with representations of the outside 22 of the card reader 16 are taken. Here, a hole pattern is provided at least in a partial area of the delimiting element 24 delimiting the transport path 14. At the side of the transport path 14 opposite to the camera 20 a light source 26 is arranged by means of which the hole pattern is transilluminated so that, provided that no object is inserted into the transport path 14, the corresponding hole pattern is illustrated as bright points in the image captured by the camera 20. In FIG. 3, an image captured by means of the camera 20 and showing the representation of the area transilluminated by the light source 20 is illustrated. Here, the individual through holes of the hole pattern are illustrated as bright elements, two of which being identified exemplarily with the reference sign 30, 32.

(16) The control unit 18 in particular executes an image processing program by means of which the actual image captured by the camera 20 is compared with a preset target image of the hole pattern. By means of this comparison, the control unit can easily determine whether a skimming module is inserted into the transport path 14. If a skimming module is indeed inserted, then at least one of the holes of the hole pattern is covered so that no light of the light source 26 can pass therethrough and this hole is correspondingly not imaged in the image captured by means of the camera 20.

(17) It is particularly advantageous when the different devices 10 make use of different hole patterns each time, so that the people performing the skimming attacks cannot adapt the form of their skimming modules to the hole patterns and thus skimming modules can be detected reliably.

(18) In FIG. 4, a schematic illustration of the actual image according to FIG. 3 is illustrated during the image processing by the control unit. During image processing, in particular distances between the holes are measured to thus determine the position of the holes. Alternatively or additionally, also other pattern recognition methods and/or matching methods can be used.

(19) In an alternative embodiment, additionally or alternatively to the hole patterns also partial areas of the delimiting elements 24 can be designed in a partially transparent manner so that through these transparent areas an image of the inside of the card reader, in particular of the transport path 14, can be captured by means of the camera 20.

(20) In FIG. 5, such an image captured by the camera 20 is illustrated, the image shown in FIG. 5 showing the state when no skimming module is inserted into the transport path 14. FIG. 6, on the other hand, shows an image captured by means of the camera 20 when a skimming module is inserted into the transport path 14. As shown by the comparison between FIGS. 5 and 6, in this case an angular dark object 40 can be seen in the image in FIG. 6, which is not present in FIG. 5. This object 40 resulted from the fact that due to the skimming module the light of the light source 24 cannot transilluminate at this position or cannot transilluminate so strongly and thus a dark area is captured by the camera 20.

(21) The control unit 10 in particular performs a segment analysis in which the images captured by means of the camera 20 are divided into segments and these segments are compared with predetermined segments of stored target images. Additionally or alternatively, also a contour determination of captured objects can take place and thus a comparison of contours can be made. Additionally or alternatively, the determined objects can also be measured and/or their position can be determined. Based on the corresponding image information gained during the image processing, it can reliably be detected each time by means of the comparison between the captured actual image and the predetermined target values whether a skimming module or another object which is usually not provided is arranged in the transport path 14.

(22) In FIG. 7, a schematic illustration of a device 10 for reading a magnetic stripe and/or chip card according to a second embodiment is illustrated. In this second embodiment, the camera 20 is arranged within the card reader 16 so that by means of it an image with a representation of at least a partial area of the surface 50 of the delimiting element 24 delimiting the transport path 14 can be captured. Further, a projection unit 52 is provided by means of which a predetermined pattern 54 is projected onto the surface 50 of the delimiting element 24 at least in a partial area. In FIG. 8, a schematic highly simplified illustration of this functional principle is illustrated.

(23) In the example shown in FIG. 8, the pattern 54 is illustrated as a grid with orthogonally intersecting grid lines 56. When a skimming module is inserted into the transport path 14, then the surface condition of the surface onto which the pattern 54 is projected changes. As a result, also the position of the intersecting points 58 at which the grid lines 56 intersect each other changes. By means of a comparison of the positions of the individual intersections determined in the image captured by the camera 20 and the target positions according to the predetermined target image it can easily be detected if a skimming module is inserted.

(24) In an alternative embodiment, also any other pattern can be projected which enables to detect an object in the region of the pattern 54 via the determination of changes of the pattern in the representations determined by the camera 20.

(25) In FIG. 9, an illustration of a device 10 for reading a magnetic stripe and/or chip card according to a third embodiment is illustrated. In this embodiment, in contrast to the embodiment in FIG. 7, the camera 20 is not arranged within the card reader 16 but is provided outside the card reader 16. In this embodiment, an optical deflecting element 60, such as a reflecting prism, is provided by means of which the detection area of the camera 20 indicated by the line 62 is deflected such that by means of the camera 20 an image with a representation of the projected pattern 54 can be captured.

(26) In FIG. 10, a schematic illustration of a device 10 for reading a magnetic stripe and/or chip card according to a fourth embodiment is illustrated. In this fourth embodiment, a light source 70 is provided within the card reader 16, by means of which a pulsed light is emitted onto at least a partial area 72 of the transport path. By means of the camera 20, at least an image with a representation of this partial area 72 is captured, wherein the images captured by means of the camera 20 are synchronized with the pulsed light of the light source 70. As a result, it is achieved that distances within the partial area 72 can easily be determined in the images captured by means of the camera 20 so that by means of deviations between determined distances and predetermined planned distances the presence of a skimming module in the transport path 14 can easily be detected.

(27) In an alternative embodiment of the invention, the individual embodiments described above can also be combined. By the simultaneous application of several of these embodiments, the reliability for the detection of skimming modules can be increased further. Moreover, in different partial areas of the transport path different of the afore-described embodiments can also be applied in parallel.

LIST OF REFERENCE SIGNS

(28) 10 device 12 slot 14 transport path 16 card reader 18 control unit 20 camera 22 outside 26, 70 light source 30, 32 through hole 40 segment 50 surface 52 projection unit 54 pattern 56 grid line 58 point of intersection 60 deflecting unit 62 detection area 100 automated teller machine 102 cash box 104 input and/or output unit 106 transport path