WO2001084486A1 - Anti-fraud card reader module - Google Patents

Anti-fraud card reader module Download PDF

Info

Publication number
WO2001084486A1
WO2001084486A1 PCT/GB2001/001214 GB0101214W WO0184486A1 WO 2001084486 A1 WO2001084486 A1 WO 2001084486A1 GB 0101214 W GB0101214 W GB 0101214W WO 0184486 A1 WO0184486 A1 WO 0184486A1
Authority
WO
WIPO (PCT)
Prior art keywords
card
module
card reader
reader module
detecting
Prior art date
Application number
PCT/GB2001/001214
Other languages
French (fr)
Inventor
David Charles Carrington May
Original Assignee
Ncr International, Inc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Ncr International, Inc filed Critical Ncr International, Inc
Priority to DE60116395T priority Critical patent/DE60116395T2/en
Priority to AU2001240905A priority patent/AU2001240905A1/en
Priority to EP01911987A priority patent/EP1410314B1/en
Publication of WO2001084486A1 publication Critical patent/WO2001084486A1/en

Links

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06KGRAPHICAL DATA READING; PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS
    • G06K19/00Record carriers for use with machines and with at least a part designed to carry digital markings
    • G06K19/06Record carriers for use with machines and with at least a part designed to carry digital markings characterised by the kind of the digital marking, e.g. shape, nature, code
    • G06K19/067Record carriers with conductive marks, printed circuits or semiconductor circuit elements, e.g. credit or identity cards also with resonating or responding marks without active components
    • G06K19/07Record carriers with conductive marks, printed circuits or semiconductor circuit elements, e.g. credit or identity cards also with resonating or responding marks without active components with integrated circuit chips
    • G06K19/073Special arrangements for circuits, e.g. for protecting identification code in memory
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06KGRAPHICAL DATA READING; PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS
    • G06K13/00Conveying record carriers from one station to another, e.g. from stack to punching mechanism
    • G06K13/02Conveying record carriers from one station to another, e.g. from stack to punching mechanism the record carrier having longitudinal dimension comparable with transverse dimension, e.g. punched card
    • G06K13/08Feeding or discharging cards

Definitions

  • the present invention relates to a card reader module, particularly a motorised card reader module, for resisting fraud.
  • the invention is particularly related to preventing fraud at a self-service terminal (SST) , such as an ATM (automated teller machine) , a point of sale (PoS) terminal, or any other terminal using a motorised card reader module .
  • SST self-service terminal
  • ATM automated teller machine
  • PoS point of sale
  • ATMs typically store large amounts of cash. This makes them vulnerable to attack by thieves .
  • ATMs include a safe for storing the cash.
  • ATMs are also vulnerable to attack by fraud.
  • One type of fraud involves a third party placing a loop of thin, strong, material over a card entry slot in the ATM.
  • the material is so thin that it may not be noticed by an unwary user of the ATM.
  • the material is designed so that:
  • this material causes an entered card to jam in the module so that the module cannot draw in or eject the card.
  • the user generally assumes that the ATM has gone out of service and goes away from the ATM, leaving his/her card jammed in the card reader module .
  • the third party can then extract the card from the card reader module, remove the thin material, and (if the third party has observed or otherwise obtained the user's PIN) use the card to withdraw cash from the ATM.
  • a motorised card reader module characterised in that the module includes a trap mechanism operable to trap a card within the card reader module in response to the card reader module detecting a card within the module that cannot be transported.
  • the module when a card is stuck within the module the module is able to trap the card therein, thereby preventing a third party or the authorised card holder from removing the card from the module. This safeguards the card without damaging it in any way.
  • the card reader module may be able to read data from and write data to a card (that is, it may be a card read/write module) , or it may only be able to read data from a card.
  • the trap mechanism is implemented by a width switch and an associated interlock, where the width switch is located within a throat portion of the card reader module and has an arm that is deflected by insertion of a card.
  • Conventional card reader modules use a width switch to ensure that a shutter within the module is only opened when a card of correct width is inserted, the width of the card being determined by deflection of the width switch.
  • the width switch is locked in a non- deflected position when a card is to be trapped within the module. This has two advantages.
  • any tampering with the switch e.g. jamming it in the deflected position
  • this security measure will be evident to the card reader as the switch must move normally (from the open to the closed position) during a transaction.
  • the throat portion becomes too narrow for a card to be removed therethrough.
  • the trap mechanism may be activated using software and/or firmware and/or hardware control.
  • the card reader module is operable, on detecting that the trap mechanism cannot trap an entered card, to activate a magnetic head located in a throat portion of the card reader module to erase data stored on a magnetic stripe on the entered card.
  • a magnetic head located in a throat portion of the card reader module to erase data stored on a magnetic stripe on the entered card.
  • a self-service terminal comprising a fascia defining a card entry slot, and a card reader module located behind the card entry slot, characterised in that the module includes a trap mechanism operable to trap a card within the card reader module in response to the card reader module detecting a card within the module that cannot be transported.
  • the terminal may be an ATM.
  • a motorised card reader module including a shutter and a width switch, characterised in that the width switch is operable to trap a card within the card reader module in response to the card reader module detecting a card within the module that cannot be transported.
  • the module may include a throat portion having a magnetic read/write head located so that only items of the correct width (as determined by the width switch) and having magnetic data (detected by the magnetic read/write head) are recognised as magnetic cards.
  • the module may be operable, on detecting that the width switch cannot trap a card within the module, to activate the read/write head to erase any data stored on a magnetic stripe in a card located in the vicinity of the width switch.
  • the module may activate an alarm on detecting a card within the module that cannot be transported. This alarm may be audible or visual, and may be relayed automatically to an appropriate person, for example to a person authorised to service the terminal .
  • the card reader module may use sensors to detect that a card cannot be transported (that is, having jammed) .
  • the event of a card having jammed may be indicated by any convenient technique. For example, where a first sensor detects the presence of a card and a second sensor does not detect the presence of the card a predetermined time after the first sensor detected the presence of the card. Another example is where a sensor continuously detects the presence of a card for a predetermined time interval . A further example is where a sensor detects the presence of a card for a predetermined time during attempted transportation of the card in a forward direction and the same sensor detects the presence of the card for a predetermined time during attempted transportation of the card in a reverse direction. Any one or any combination of these techniques may be used to detect that a card cannot be transported.
  • a method of preventing fraud comprising the steps of: providing a trap mechanism for trapping a card within a card reader module; detecting entry of a card into the card reader module; monitoring transport of the card within the card reader module; and, in response to detection of a failure of the card reader module to transport the card correctly, activating the trap mechanism to trap the card.
  • the method may include the further step of displaying on a monitor a message informing the user about the capture of his/her card.
  • the method may include the steps of detecting continued activation of a first sensor but not detecting activation of a second sensor within a predetermined time.
  • the first sensor may be a width sensor (width switch) for sensing the width of the card, and/or a magnetic stripe detecting sensor for detecting the correct orientation of a card.
  • the agnetic stripe detecting sensor may be a magnetic read/write head.
  • the second sensor may be a read head sensor located in the vicinity of a magnetic card reading head within the card reader module .
  • the method may include the step of: on detecting that the trap mechanism is unable to trap the card, activating a read/write head for erasing any data stored on the card.
  • the trap mechanism may be unable to trap the card if the card jams while maintaining the width switch in a deflected position.
  • a method of preventing fraud comprising the steps of: providing a magnetic head for erasing data stored on a magnetic stripe carried by a card; detecting entry of a card into the card reader module; monitoring transport of the card within the card reader module; and, in response to detection of a failure of the card reader module to transport the card correctly, activating the magnetic head to erase any data stored on the stripe on the card.
  • a motorised card reader module characterised in that the module includes a magnetic head operable to erase data stored by a magnetic stripe on a card in response to the card reader module detecting a card within the module that cannot be transported.
  • the magnetic head is located in a throat portion of the module.
  • the magnetic head may be an erase coil or a magnetic read/write head.
  • the module may erase data by passing an erase current through the magnetic head.
  • Fig 1 is a schematic front view of a motorised card reader module according to an embodiment of the present invention
  • Fig 2 is a schematic side view of the module of Fig 1;
  • Fig 3 is a schematic plan view of a card at a first position in the module of Figs 1 and 2;
  • Fig 4 is a schematic plan view of a card at a second position in the module of Figs 1 and 2 ;
  • Fig 5 is a schematic plan view of a card at a third position in the module of Figs 1 and 2;
  • Fig 6 is a schematic plan view of a card at a fourth position in the module of Figs 1 and 2;
  • Fig 7 is a perspective view of a self-service terminal according to another embodiment of the present invention.
  • Figs 1 and 2 are front and side schematic views respectively of a motorised card reader/writer (MCRW) module 10.
  • MCRW motorised card reader/writer
  • the module 10 is a modified version of a conventional MCRW module made by Sankyo (trade mark) and available from Sankyo at 1-17-2, SHINBASHI, MINATO-KU, TOKYO, 1058633, Japan.
  • Module 10 comprises a housing 12 coupled to a throat portion 14 and is suitable for reading a standard size magnetic stripe card.
  • the throat portion 14 defines a slot 16 into which a magnetic stripe card may be inserted, and includes a shutter 18 pivotally coupled to the housing 12. With the shutter 18 in the open position, a card may be conveyed between the housing 12 and the throat portion 14; whereas, with the shutter 18 in the closed position no card may pass between the throat portion 14 and the housing 12. When the leading edge of a card passes the shutter 18, the shutter 18 is biased against the top of the card so that the shutter 18 automatically closes once the trailing edge of the card clears the shutter 18.
  • the throat portion 14 includes a trap mechanism 20 comprising a card width switch 22 and an interlock 24.
  • the card width switch 22 has an elongated arm 26 that is pivotally mounted to the throat portion 14.
  • the interlock 24 is in the form of a solenoid and pin arrangement, whereby when the pin protrudes from the solenoid it locks the switch 22 and prevents the arm 26 from pivoting.
  • the switch's arm 26 is deflected by a card on insertion and ejection of the card.
  • Switch 22 detects when the arm 26 has been deflected by a card and when the arm 26 is in the undeflected position.
  • the housing 12 includes a shutter detect sensor 27 for detecting whether the shutter 18 is in an open or closed position.
  • the throat portion 14 also includes a magnetic head in the form of a read/write head 28.
  • Magnetic head 28 is used to detect that a magnetic stripe is present on a card being inserted. If no magnetic stripe is detected then the shutter 18 will not be opened, even if the arm 26 is deflected. Thus, shutter 18 will only be opened if a card is entered that has
  • the housing 12 also includes a linear transport mechanism, shown generally by arrow 30, comprising four pairs of rollers 32,34,36,38 and associated stretchable endless toothed belts (not shown) for transporting a card when it is within the housing 12.
  • a linear transport mechanism shown generally by arrow 30, comprising four pairs of rollers 32,34,36,38 and associated stretchable endless toothed belts (not shown) for transporting a card when it is within the housing 12.
  • the housing 12 defines an entrance/exit slot 40 at one end and a card retention/capture slot 42 at the opposite end.
  • the first pair of rollers 32 pinch the leading edge of the card and draw the card into the housing 12.
  • the shutter 18 closes thereby capturing the card within the housing 12 , and the card reading operation begins .
  • the housing 12 includes four sensors for accurately locating the position of the card within the housing 12.
  • a card present sensor 44 is located in the vicinity of the throat portion 14 at the first pair of rollers 32.
  • the sensor 44 is in the form of an optical sensor for detecting the presence of a card inserted into the housing 12.
  • a card eject sensor 46 is located a predetermined distance from the throat portion 14 to ensure that on ejection of a card the card protrudes from the throat portion 14 by a sufficient distance to allow a user to grip and remove the card.
  • a card detect sensor 48 is located at the second pair of rollers 34 in the vicinity of a card read/write head 50 so that when the leading edge of a card is detected, the magnetic stripe on the card may be read by the card read head 50.
  • a card stop sensor 52 is located distal from the throat portion 14 at the third pair of rollers 36.
  • the card stop sensor 52 is spaced from the card read sensor 48 by a distance less than the length of a standard card, so that when the card stop sensor 52 detects the leading edge of a card, the card is still in contact with the card read sensor 48.
  • the card is only transported beyond the card stop sensor 52 if the card is to be conveyed out of the retention slot 42 and retained by the card reader module 10. Where the module 10 is used in an ATM, this may occur because a user has inserted the wrong PIN on a predetermined number of occasions, or because the card is registered as stolen.
  • the four sensors 44,46,48,52 are located so that once a card enters the housing 12 it can always be located by at least one of the sensors 44,46,48,52, unless the card is conveyed out of the retention slot 42.
  • Fig 3 shows a card 60 having a magnetic stripe 62, the card being located at the entrance of the throat portion 14 of the module 10.
  • the arm 26 is in the undeflected position and the shutter 18 is closed.
  • Fig 4 shows the card 60 partially within the housing 12.
  • the shutter 18 is open and resting on the card 60, so sensor 27 detects the open shutter 18.
  • the arm 26 is in the deflected position, so switch 22 detects the deflected arm 26.
  • Read/write head 28 is in contact with the magnetic stripe 62, so head 28 detects magnetic data on the stripe 62.
  • Fig 5 shows the card 60 having cleared switch 22.
  • the card 60 has been jammed within the module 10 by a loop of material (not shown) so that the card cannot be transported by the module 10.
  • the shutter 18 is still open and resting on the card 60, so sensor 27 still detects the open shutter 18.
  • the arm 26 has returned to the undeflected position, so switch 22 detects that the arm 26 is undeflected.
  • Read/write head 28 is not in contact with the magnetic stripe 62, so head 28 does not detect magnetic data.
  • sensor 44 and eject sensor 46 detect the presence of the card 60.
  • the card 60 is not in contact with the card read sensor 48, so sensor 48 does not detect the card 60.
  • the module 10 After a predetermined length of time between sensor 44 detecting the presence of a card and sensor 48 not detecting the card 60, for example ten seconds, the module 10 attempts to eject the card; however, the material (not shown) stops ejection of the card. Thus the module 10 can neither capture nor eject the card 60.
  • the module 10 After another predetermined time during which the module 10 attempts to transport the card 60 (for example, 20 seconds) and in which sensor 44 continues detecting the presence of the card 60 but sensor 48 does not detect the presence of the card 60, the module 10 activates the interlock 24 to lock the arm 26 and prevent the card 60 from being removed.
  • Fig 6 shows the card 60 still in contact with the arm 26.
  • the card 60 has been jammed within the module 10 by a loop of material (not shown) so that the card 60 cannot be transported by the module 10.
  • the interlock 24 cannot be activated.
  • ATM software activates (sends an erase current to) the read/write head 28 to delete the data stored on the magnetic stripe 62. This ensures that if the card 60 is retrieved by a fraudulent third party, sufficient magnetic data has been erased so that card 60 cannot be used in motorised or swipe card reader modules.
  • the read/write head 28 may be activated (continuously or intermittently) until the card 60 is removed so that most of (or all) the data on the magnetic stripe 62 is erased when the card 60 is removed from the module 10.
  • Fig 7 is a perspective view of an SST 70, in the form of an ATM, including the module of Figs 1 to 6.
  • the ATM 70 comprises a chassis (not shown) for supporting a fascia 72, exterior panels 74 and internal ATM modules (not shown) .
  • the fascia 72 incorporates a user interface 76.
  • the fascia 72 defines a plurality of slots so that when the fascia 72 engages fully with the chassis and panels 74 the slots align with user interface elements located within the ATM 70.
  • the user interface 76 comprises a display 78, a cash dispense slot 80, a card entry/exit slot 82 (herein referred to as a card entry slot) , a receipt slot 84, and an encrypting keypad 86.
  • the fascia 72 has a lock mechanism 88 for securing the fascia 72 to and for releasing the fascia 72 from the chassis and panels 74.
  • An unwary user may approach the ATM 70 and insert his card into ATM card entry slot 82.
  • the card enters throat slot 16; deflects arm 26, thereby opening the shutter 18; enters the housing 12; is pinched by first rollers 32; and is drawn into housing 12.
  • Sensor 44 detects the presence of the card, but sensor 48 does not detect the presence of a card.
  • the module 10 attempts to eject the card; however, the material (not shown) stops ejection of the card. Thus the module 10 can neither draw in nor eject the card.
  • the module 10 After another predetermined time (for example, 20 seconds) during which the module 10 attempts to eject the card, if sensor 44 continues to detect the presence of a card but sensor 48 does not detect the presence of a card, the module 10 then determines via switch 22 whether the arm 26 is deflected or undeflected.
  • a predetermined time for example, 20 seconds
  • the module 10 activates the interlock 24 to prevent removal of the card.
  • the module 10 activates the read/write head 28 to erase any magnetic data stored on the magnetic stripe on the card.
  • the ATM 70 displays a message on the display 78 informing the user that the card has been retained.
  • the ATM 70 displays a message on the display 78 informing the user that the card is not usable.
  • the display may also provide details of how the user may apply for the card back or for a new card.
  • the ATM 10 then informs a service centre that it is out of operation due to possible fraud.
  • a service engineer is then called to remove the material and the card (if still present) so that the ATM 70 is restored to working order.
  • the service engineer lifts the fascia 72 and resets the interlock 24 on the module 10. The engineer can then remove the material and the card in a similar way to the third party.
  • the interlock may be implemented in a number of different ways.
  • the predetermined time periods such as when one sensor detects a card but another sensor does not detect a card may be longer or shorter than 20 seconds.
  • Any convenient combination of the sensors 26,27,28,44,46,48 may be used (for example sensor 27 and sensor 48; or, sensor 44 and sensor 48) to detect that a card has jammed within the housing 12.
  • the self-service terminal may be a non-cash kiosk.
  • a different MCRW modules than that described may be used, for example, an MCRW module from Omron.

Abstract

A card reader module (10) is described. The module (10) includes a trap mechanism (20) operable to trap a card (60) within the module (10) in response to the module (10) detecting a card (60) therein that cannot be transported. The trap mechanism (20) may be implemented by a width switch (22) and associated interlock (24), where the width switch (22) is located within a throat portion (14) of the card reader module (10). On detecting a jammed card, the width switch (22) is locked to prevent removal of the card. The module (10) may also include a magnetic head (28) operable to erase data stored on a magnetic stripe (62) on a card (60) if the trap mechanism (20) is not able to prevent removal of the card (60). A self-service terminal (70) for preventing fraud and a method of preventing fraud using the module (10) are also described.

Description

ANTI-FRAUD CARD READER MODULE
The present invention relates to a card reader module, particularly a motorised card reader module, for resisting fraud. The invention is particularly related to preventing fraud at a self-service terminal (SST) , such as an ATM (automated teller machine) , a point of sale (PoS) terminal, or any other terminal using a motorised card reader module .
ATMs typically store large amounts of cash. This makes them vulnerable to attack by thieves . To combat physical attack, ATMs include a safe for storing the cash. However, ATMs are also vulnerable to attack by fraud.
One type of fraud involves a third party placing a loop of thin, strong, material over a card entry slot in the ATM. The material is so thin that it may not be noticed by an unwary user of the ATM. The material is designed so that:
(1) it prevents a user's card from fully entering a motorised card reader module located behind the card entry slot, and
(2) it prevents the entered user's card from being ejected from the motorised card reader module.
Thus, the design of this material causes an entered card to jam in the module so that the module cannot draw in or eject the card. When this happens, the user generally assumes that the ATM has gone out of service and goes away from the ATM, leaving his/her card jammed in the card reader module .
The third party can then extract the card from the card reader module, remove the thin material, and (if the third party has observed or otherwise obtained the user's PIN) use the card to withdraw cash from the ATM.
It is an object of an embodiment of the present invention to reduce the possibility of this type of fraud.
According to a first aspect of the invention there is provided a motorised card reader module characterised in that the module includes a trap mechanism operable to trap a card within the card reader module in response to the card reader module detecting a card within the module that cannot be transported.
By virtue of this aspect of the invention when a card is stuck within the module the module is able to trap the card therein, thereby preventing a third party or the authorised card holder from removing the card from the module. This safeguards the card without damaging it in any way.
The card reader module may be able to read data from and write data to a card (that is, it may be a card read/write module) , or it may only be able to read data from a card.
Preferably, the trap mechanism is implemented by a width switch and an associated interlock, where the width switch is located within a throat portion of the card reader module and has an arm that is deflected by insertion of a card.
Conventional card reader modules use a width switch to ensure that a shutter within the module is only opened when a card of correct width is inserted, the width of the card being determined by deflection of the width switch. In a preferred embodiment, the width switch is locked in a non- deflected position when a card is to be trapped within the module. This has two advantages.
(i) any tampering with the switch (e.g. jamming it in the deflected position) to overcome this security measure will be evident to the card reader as the switch must move normally (from the open to the closed position) during a transaction.
(ii) a conventional card reader module only requires slight modification for use in the present invention.
By locking the width switch, the throat portion becomes too narrow for a card to be removed therethrough.
The trap mechanism may be activated using software and/or firmware and/or hardware control.
Preferably, the card reader module is operable, on detecting that the trap mechanism cannot trap an entered card, to activate a magnetic head located in a throat portion of the card reader module to erase data stored on a magnetic stripe on the entered card. This has the advantage that if the trap mechanism is unable to trap an entered card because part of the card is still in contact with the trap mechanism, then a magnetic head may be used to erase the data on the card so that the card is much less valuable to a fraudulent third party.
According to a second aspect of the present invention there is provided a self-service terminal comprising a fascia defining a card entry slot, and a card reader module located behind the card entry slot, characterised in that the module includes a trap mechanism operable to trap a card within the card reader module in response to the card reader module detecting a card within the module that cannot be transported.
The terminal may be an ATM.
According to a third aspect of the invention there is provided a motorised card reader module including a shutter and a width switch, characterised in that the width switch is operable to trap a card within the card reader module in response to the card reader module detecting a card within the module that cannot be transported.
The module may include a throat portion having a magnetic read/write head located so that only items of the correct width (as determined by the width switch) and having magnetic data (detected by the magnetic read/write head) are recognised as magnetic cards.
The module may be operable, on detecting that the width switch cannot trap a card within the module, to activate the read/write head to erase any data stored on a magnetic stripe in a card located in the vicinity of the width switch.
The module may activate an alarm on detecting a card within the module that cannot be transported. This alarm may be audible or visual, and may be relayed automatically to an appropriate person, for example to a person authorised to service the terminal .
The card reader module may use sensors to detect that a card cannot be transported (that is, having jammed) . The event of a card having jammed may be indicated by any convenient technique. For example, where a first sensor detects the presence of a card and a second sensor does not detect the presence of the card a predetermined time after the first sensor detected the presence of the card. Another example is where a sensor continuously detects the presence of a card for a predetermined time interval . A further example is where a sensor detects the presence of a card for a predetermined time during attempted transportation of the card in a forward direction and the same sensor detects the presence of the card for a predetermined time during attempted transportation of the card in a reverse direction. Any one or any combination of these techniques may be used to detect that a card cannot be transported.
According to a fourth aspect of the present invention there is provided a method of preventing fraud, the method comprising the steps of: providing a trap mechanism for trapping a card within a card reader module; detecting entry of a card into the card reader module; monitoring transport of the card within the card reader module; and, in response to detection of a failure of the card reader module to transport the card correctly, activating the trap mechanism to trap the card.
The method may include the further step of displaying on a monitor a message informing the user about the capture of his/her card.
The method may include the steps of detecting continued activation of a first sensor but not detecting activation of a second sensor within a predetermined time. The first sensor may be a width sensor (width switch) for sensing the width of the card, and/or a magnetic stripe detecting sensor for detecting the correct orientation of a card. The agnetic stripe detecting sensor may be a magnetic read/write head.
The second sensor may be a read head sensor located in the vicinity of a magnetic card reading head within the card reader module .
The method may include the step of: on detecting that the trap mechanism is unable to trap the card, activating a read/write head for erasing any data stored on the card. The trap mechanism may be unable to trap the card if the card jams while maintaining the width switch in a deflected position.
According to a fifth aspect of the present invention there is provided a method of preventing fraud, the method comprising the steps of: providing a magnetic head for erasing data stored on a magnetic stripe carried by a card; detecting entry of a card into the card reader module; monitoring transport of the card within the card reader module; and, in response to detection of a failure of the card reader module to transport the card correctly, activating the magnetic head to erase any data stored on the stripe on the card.
According to a sixth aspect of the present invention there is provided a motorised card reader module characterised in that the module includes a magnetic head operable to erase data stored by a magnetic stripe on a card in response to the card reader module detecting a card within the module that cannot be transported.
Preferably, the magnetic head is located in a throat portion of the module. The magnetic head may be an erase coil or a magnetic read/write head.
The module may erase data by passing an erase current through the magnetic head.
These and other aspects of the invention will be apparent from the following specific description, given by way of example, with reference to the accompanying drawings, in which:
Fig 1 is a schematic front view of a motorised card reader module according to an embodiment of the present invention;
Fig 2 is a schematic side view of the module of Fig 1;
Fig 3 is a schematic plan view of a card at a first position in the module of Figs 1 and 2;
Fig 4 is a schematic plan view of a card at a second position in the module of Figs 1 and 2 ;
Fig 5 is a schematic plan view of a card at a third position in the module of Figs 1 and 2;
Fig 6 is a schematic plan view of a card at a fourth position in the module of Figs 1 and 2; and
Fig 7 is a perspective view of a self-service terminal according to another embodiment of the present invention.
Reference is now made to Figs 1 and 2, which are front and side schematic views respectively of a motorised card reader/writer (MCRW) module 10.
The module 10 is a modified version of a conventional MCRW module made by Sankyo (trade mark) and available from Sankyo at 1-17-2, SHINBASHI, MINATO-KU, TOKYO, 1058633, Japan.
Module 10 comprises a housing 12 coupled to a throat portion 14 and is suitable for reading a standard size magnetic stripe card.
The throat portion 14 defines a slot 16 into which a magnetic stripe card may be inserted, and includes a shutter 18 pivotally coupled to the housing 12. With the shutter 18 in the open position, a card may be conveyed between the housing 12 and the throat portion 14; whereas, with the shutter 18 in the closed position no card may pass between the throat portion 14 and the housing 12. When the leading edge of a card passes the shutter 18, the shutter 18 is biased against the top of the card so that the shutter 18 automatically closes once the trailing edge of the card clears the shutter 18.
The throat portion 14 includes a trap mechanism 20 comprising a card width switch 22 and an interlock 24. The card width switch 22 has an elongated arm 26 that is pivotally mounted to the throat portion 14. The interlock 24 is in the form of a solenoid and pin arrangement, whereby when the pin protrudes from the solenoid it locks the switch 22 and prevents the arm 26 from pivoting.
The switch's arm 26 is deflected by a card on insertion and ejection of the card. Switch 22 detects when the arm 26 has been deflected by a card and when the arm 26 is in the undeflected position.
If a user inserts a conventional magnetic stripe card into the throat portion 14 then the arm 26 is deflected and switch 22 detects the deflection of the arm 26, which indicates the presence of the card.
The housing 12 includes a shutter detect sensor 27 for detecting whether the shutter 18 is in an open or closed position.
The throat portion 14 also includes a magnetic head in the form of a read/write head 28. Magnetic head 28 is used to detect that a magnetic stripe is present on a card being inserted. If no magnetic stripe is detected then the shutter 18 will not be opened, even if the arm 26 is deflected. Thus, shutter 18 will only be opened if a card is entered that has
(1) the correct width (as detected by switch 22) , and
(2) a magnetic stripe in the correct location (as detected by read/write head 28) .
Thus, if a magnetic stripe card is inserted in a wrong orientation the shutter 18 will not open.
Referring particularly to Fig 2, the housing 12 also includes a linear transport mechanism, shown generally by arrow 30, comprising four pairs of rollers 32,34,36,38 and associated stretchable endless toothed belts (not shown) for transporting a card when it is within the housing 12.
The housing 12 defines an entrance/exit slot 40 at one end and a card retention/capture slot 42 at the opposite end. When a card is inserted by a user, the first pair of rollers 32 pinch the leading edge of the card and draw the card into the housing 12. When the trailing edge of the card clears the shutter 18, the shutter 18 closes thereby capturing the card within the housing 12 , and the card reading operation begins .
The housing 12 includes four sensors for accurately locating the position of the card within the housing 12.
A card present sensor 44 is located in the vicinity of the throat portion 14 at the first pair of rollers 32. The sensor 44 is in the form of an optical sensor for detecting the presence of a card inserted into the housing 12.
A card eject sensor 46 is located a predetermined distance from the throat portion 14 to ensure that on ejection of a card the card protrudes from the throat portion 14 by a sufficient distance to allow a user to grip and remove the card.
A card detect sensor 48 is located at the second pair of rollers 34 in the vicinity of a card read/write head 50 so that when the leading edge of a card is detected, the magnetic stripe on the card may be read by the card read head 50.
A card stop sensor 52 is located distal from the throat portion 14 at the third pair of rollers 36. The card stop sensor 52 is spaced from the card read sensor 48 by a distance less than the length of a standard card, so that when the card stop sensor 52 detects the leading edge of a card, the card is still in contact with the card read sensor 48.
The card is only transported beyond the card stop sensor 52 if the card is to be conveyed out of the retention slot 42 and retained by the card reader module 10. Where the module 10 is used in an ATM, this may occur because a user has inserted the wrong PIN on a predetermined number of occasions, or because the card is registered as stolen.
The four sensors 44,46,48,52 are located so that once a card enters the housing 12 it can always be located by at least one of the sensors 44,46,48,52, unless the card is conveyed out of the retention slot 42.
Fig 3 shows a card 60 having a magnetic stripe 62, the card being located at the entrance of the throat portion 14 of the module 10. In Fig 3 the arm 26 is in the undeflected position and the shutter 18 is closed.
Fig 4 shows the card 60 partially within the housing 12. The shutter 18 is open and resting on the card 60, so sensor 27 detects the open shutter 18. The arm 26 is in the deflected position, so switch 22 detects the deflected arm 26. Read/write head 28 is in contact with the magnetic stripe 62, so head 28 detects magnetic data on the stripe 62.
Fig 5 shows the card 60 having cleared switch 22. The card 60 has been jammed within the module 10 by a loop of material (not shown) so that the card cannot be transported by the module 10.
The shutter 18 is still open and resting on the card 60, so sensor 27 still detects the open shutter 18. The arm 26 has returned to the undeflected position, so switch 22 detects that the arm 26 is undeflected. Read/write head 28 is not in contact with the magnetic stripe 62, so head 28 does not detect magnetic data. As a large portion of the card 60 is inside the housing 12, sensor 44 and eject sensor 46 detect the presence of the card 60. However, the card 60 is not in contact with the card read sensor 48, so sensor 48 does not detect the card 60.
After a predetermined length of time between sensor 44 detecting the presence of a card and sensor 48 not detecting the card 60, for example ten seconds, the module 10 attempts to eject the card; however, the material (not shown) stops ejection of the card. Thus the module 10 can neither capture nor eject the card 60.
After another predetermined time during which the module 10 attempts to transport the card 60 (for example, 20 seconds) and in which sensor 44 continues detecting the presence of the card 60 but sensor 48 does not detect the presence of the card 60, the module 10 activates the interlock 24 to lock the arm 26 and prevent the card 60 from being removed.
Fig 6 shows the card 60 still in contact with the arm 26. The card 60 has been jammed within the module 10 by a loop of material (not shown) so that the card 60 cannot be transported by the module 10. However, as the card 60 is still in contact with the arm 26, the interlock 24 cannot be activated. Thus, when the module 10 detects that the card 60 cannot be transported and that the interlock 24 cannot be activated, ATM software activates (sends an erase current to) the read/write head 28 to delete the data stored on the magnetic stripe 62. This ensures that if the card 60 is retrieved by a fraudulent third party, sufficient magnetic data has been erased so that card 60 cannot be used in motorised or swipe card reader modules. The read/write head 28 may be activated (continuously or intermittently) until the card 60 is removed so that most of (or all) the data on the magnetic stripe 62 is erased when the card 60 is removed from the module 10.
Fig 7 is a perspective view of an SST 70, in the form of an ATM, including the module of Figs 1 to 6. The ATM 70 comprises a chassis (not shown) for supporting a fascia 72, exterior panels 74 and internal ATM modules (not shown) . The fascia 72 incorporates a user interface 76. The fascia 72 defines a plurality of slots so that when the fascia 72 engages fully with the chassis and panels 74 the slots align with user interface elements located within the ATM 70.
The user interface 76 comprises a display 78, a cash dispense slot 80, a card entry/exit slot 82 (herein referred to as a card entry slot) , a receipt slot 84, and an encrypting keypad 86.
The fascia 72 has a lock mechanism 88 for securing the fascia 72 to and for releasing the fascia 72 from the chassis and panels 74.
Referring to Figs 1 to 7, in the event of a fraudulent third party placing a length of thin, strong, material (not shown) over the ATM card entry slot 82, the operation of the ATM 70 would be as follows.
An unwary user may approach the ATM 70 and insert his card into ATM card entry slot 82. The card enters throat slot 16; deflects arm 26, thereby opening the shutter 18; enters the housing 12; is pinched by first rollers 32; and is drawn into housing 12. However, as the card is being drawn into housing 12 the material (not shown) stops the card from fully entering the housing 12. At this position part of the card is still underneath the shutter 18 so that the shutter 18 cannot close. Sensor 44 detects the presence of the card, but sensor 48 does not detect the presence of a card. After a predetermined length of time, for example ten seconds, the module 10 attempts to eject the card; however, the material (not shown) stops ejection of the card. Thus the module 10 can neither draw in nor eject the card.
After another predetermined time (for example, 20 seconds) during which the module 10 attempts to eject the card, if sensor 44 continues to detect the presence of a card but sensor 48 does not detect the presence of a card, the module 10 then determines via switch 22 whether the arm 26 is deflected or undeflected.
(1) If the arm 26 is undeflected then the module 10 activates the interlock 24 to prevent removal of the card.
(2) If the arm 26 is deflected then the module 10 activates the read/write head 28 to erase any magnetic data stored on the magnetic stripe on the card.
In the event of condition (1) above, the ATM 70 displays a message on the display 78 informing the user that the card has been retained.
In the event of condition (2) above, the ATM 70 displays a message on the display 78 informing the user that the card is not usable.
The display may also provide details of how the user may apply for the card back or for a new card.
The ATM 10 then informs a service centre that it is out of operation due to possible fraud. A service engineer is then called to remove the material and the card (if still present) so that the ATM 70 is restored to working order. To remove the card, the service engineer lifts the fascia 72 and resets the interlock 24 on the module 10. The engineer can then remove the material and the card in a similar way to the third party.
Various modifications may be made to the above described embodiment within the scope of the invention, for example, the interlock may be implemented in a number of different ways. The predetermined time periods, such as when one sensor detects a card but another sensor does not detect a card may be longer or shorter than 20 seconds. Any convenient combination of the sensors 26,27,28,44,46,48 may be used (for example sensor 27 and sensor 48; or, sensor 44 and sensor 48) to detect that a card has jammed within the housing 12. The self-service terminal may be a non-cash kiosk. In other embodiments, a different MCRW modules than that described may be used, for example, an MCRW module from Omron.

Claims

1. A motorised card reader module (10) characterised in that the module (10) includes a trap mechanism (20) operable to trap a card (60) within the card reader module (10) in response to the card reader module (10) detecting a card (60) within the module (10) that cannot be transported.
2. A module according to claim 1, wherein the trap mechanism (20) is implemented by a width switch (22) and associated interlock (24) , where the width switch (22) is located within a throat portion (14) of the card reader module (10) .
3. A module according to claim 1 or 2 , wherein the card reader module is operable, on detecting that the trap mechanism (20) cannot trap an entered card, to activate a magnetic head (28) located in a throat portion (14) of the card reader module (10) to erase data stored on a magnetic stripe on the entered card.
4. A self-service terminal (70) comprising a fascia (72) defining a card entry slot (82) , and a card reader module (10) located behind the card entry slot (82) , characterised in that the module includes a trap mechanism (20) operable to trap a card within the card reader module in response to the card reader module detecting a card within the module that cannot be transported.
5. A motorised card reader module (10) including a shutter (18) and a width switch (22) , characterised in that the width switch (22) is operable to trap a card within the card reader module (10) in response to the card reader module detecting a card within the module that cannot be transported.
6. A module according to claim 5 , wherein the module is operable to activate an alarm on detecting a card within the module that cannot be transported.
7. A method of preventing fraud, the method comprising the steps of: providing a trap mechanism for trapping a card within a card reader module; detecting entry of a card into the card reader module; monitoring transport of the card within the card reader module; and, in response to detection of a failure of the card reader module to transport the card correctly, activating the trap mechanism to trap the card.
8. A method according to claim 7 , wherein the method includes the further step of displaying on a monitor (78) a message informing the user about the capture of his/her card.
9. A method according to claim 7 or 8 , wherein the method includes the steps of detecting continued activation of a first sensor but not detecting activation of a second sensor within a predetermined time.
10. A method according to any of claims 7 to 9, wherein the method includes the step of : on detecting that the trap mechanism is unable to trap the card, activating a read/write head for erasing any data stored on the card.
11. A motorised card reader module (10) characterised in that the module (10) includes a magnetic head (28) operable to erase data stored on a magnetic stripe (62) on a card (60) in response to the card reader module (10) detecting a card (60) within the module (10) that cannot be transported.
12. A module according to claim 11, wherein the magnetic head is located in a throat portion (14) of the module (10) .
PCT/GB2001/001214 2000-05-04 2001-03-19 Anti-fraud card reader module WO2001084486A1 (en)

Priority Applications (3)

Application Number Priority Date Filing Date Title
DE60116395T DE60116395T2 (en) 2000-05-04 2001-03-19 FRAUD-PROTECTED CARD READ MODULE AND PROCEDURE FOR PROTECTION FROM FRAUD
AU2001240905A AU2001240905A1 (en) 2000-05-04 2001-03-19 Anti-fraud card reader module
EP01911987A EP1410314B1 (en) 2000-05-04 2001-03-19 Anti-fraud card reader module and method for preventing fraud

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
GB0010617.9 2000-05-04
GB0010617A GB2362013B (en) 2000-05-04 2000-05-04 Card reader module

Publications (1)

Publication Number Publication Date
WO2001084486A1 true WO2001084486A1 (en) 2001-11-08

Family

ID=9890840

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/GB2001/001214 WO2001084486A1 (en) 2000-05-04 2001-03-19 Anti-fraud card reader module

Country Status (7)

Country Link
US (1) US6588659B2 (en)
EP (1) EP1410314B1 (en)
AU (1) AU2001240905A1 (en)
DE (1) DE60116395T2 (en)
ES (1) ES2252201T3 (en)
GB (1) GB2362013B (en)
WO (1) WO2001084486A1 (en)

Cited By (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
AT501236A1 (en) * 2004-06-29 2006-07-15 Keba Ag READER FOR CARDBOARD CARRIER AND OPERATING PROCEDURES THEREFOR
EP2075771A3 (en) * 2007-12-20 2010-04-21 NCR Corporation Card reader device
NL2002677C2 (en) * 2009-03-27 2010-09-28 Ns Reizigers B V Magnetic card reader with anti-skimming measures.
WO2010110659A2 (en) * 2009-03-27 2010-09-30 Card Swipe Protection Technology B.V. Card feed unit, read out unit, atm and method
WO2011081610A1 (en) * 2009-12-29 2011-07-07 Ismet Yesil A device for a card jammed in a card reader

Families Citing this family (11)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP3934528B2 (en) * 2002-10-29 2007-06-20 日立オムロンターミナルソリューションズ株式会社 Card processing device
DE10302406B4 (en) * 2002-11-27 2004-09-30 Wincor Nixdorf International Gmbh Card holder in a card processing device
WO2004081740A2 (en) * 2003-03-10 2004-09-23 Diebold Incorporated Cash dispensing automated banking machine with improved card retention capabilities and method
JP4064913B2 (en) * 2003-12-02 2008-03-19 日本電産サンキョー株式会社 Card reader
US20060169764A1 (en) * 2005-01-28 2006-08-03 Ncr Corporation Self-service terminal
US7354003B1 (en) * 2006-09-15 2008-04-08 Ncr Corporation Card reader
US20080136657A1 (en) * 2006-12-08 2008-06-12 Barrie Clark Automated teller machine
US8584947B2 (en) * 2011-09-13 2013-11-19 Ncr Corporation Fraud prevention
JP6133656B2 (en) * 2013-03-29 2017-05-24 日本電産サンキョー株式会社 Card-like medium processing apparatus and card-like medium processing method
CN104350511B (en) * 2013-03-29 2017-07-04 日本电产三协株式会社 Card-like medium processing unit and card-like medium processing method
US20170061167A1 (en) * 2015-08-25 2017-03-02 Ncr Corporation Skimmer device detection

Citations (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP0236846A1 (en) * 1986-02-28 1987-09-16 Siemens Aktiengesellschaft Locking and unlocking device for a card reader
EP0363992A2 (en) * 1988-10-14 1990-04-18 Omron Corporation Card reader having locking mechanism
US5264688A (en) * 1990-06-21 1993-11-23 Kabushiki Kaisha Sankyo Seiki Seisakusho Card conveyance mechanism having card discharge means for removing a card from the travel path when abnormal travel occurs
US5317137A (en) * 1992-02-24 1994-05-31 Comproducts Inc. Magnetic debit card reader fraudulent use prevention
GB2293476A (en) * 1994-09-26 1996-03-27 Sankyo Seiki Seisakusho Kk Magnetic card reader
EP0784284A2 (en) * 1995-12-14 1997-07-16 Ncr International Inc. A card reader
US6045377A (en) * 1993-11-19 2000-04-04 Berg Technology, Inc. Data process medium connector with locking means

Family Cites Families (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US3909595A (en) * 1974-08-08 1975-09-30 Diebold Inc Entry gate construction for credit card actuated automatic remote banking equipment
US4322613A (en) * 1980-04-08 1982-03-30 Vendacopy, Inc. Method for tamper-proofing magnetic stripe card reader
JPH08185461A (en) * 1994-12-28 1996-07-16 Nisca Corp Method and device for processing issuance defective card in card preparing machine
US5850079A (en) * 1995-02-22 1998-12-15 Sankyo Seiki Mfg.Co., Ltd. Card reader with a theft counter measure
GB9626196D0 (en) * 1996-12-18 1997-02-05 Ncr Int Inc Self-service terminal (sst) and a method of oerating the sst to control movement of a card of the sst
JP3696468B2 (en) * 2000-02-09 2005-09-21 株式会社三協精機製作所 Card reader

Patent Citations (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP0236846A1 (en) * 1986-02-28 1987-09-16 Siemens Aktiengesellschaft Locking and unlocking device for a card reader
EP0363992A2 (en) * 1988-10-14 1990-04-18 Omron Corporation Card reader having locking mechanism
US5264688A (en) * 1990-06-21 1993-11-23 Kabushiki Kaisha Sankyo Seiki Seisakusho Card conveyance mechanism having card discharge means for removing a card from the travel path when abnormal travel occurs
US5317137A (en) * 1992-02-24 1994-05-31 Comproducts Inc. Magnetic debit card reader fraudulent use prevention
US6045377A (en) * 1993-11-19 2000-04-04 Berg Technology, Inc. Data process medium connector with locking means
GB2293476A (en) * 1994-09-26 1996-03-27 Sankyo Seiki Seisakusho Kk Magnetic card reader
EP0784284A2 (en) * 1995-12-14 1997-07-16 Ncr International Inc. A card reader

Cited By (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
AT501236A1 (en) * 2004-06-29 2006-07-15 Keba Ag READER FOR CARDBOARD CARRIER AND OPERATING PROCEDURES THEREFOR
AT501236B1 (en) * 2004-06-29 2007-07-15 Keba Ag READER FOR CARDBOARD CARRIER AND OPERATING PROCEDURES THEREFOR
EP2075771A3 (en) * 2007-12-20 2010-04-21 NCR Corporation Card reader device
NL2002677C2 (en) * 2009-03-27 2010-09-28 Ns Reizigers B V Magnetic card reader with anti-skimming measures.
WO2010110659A2 (en) * 2009-03-27 2010-09-30 Card Swipe Protection Technology B.V. Card feed unit, read out unit, atm and method
WO2010110659A3 (en) * 2009-03-27 2010-12-23 Card Swipe Protection Technology B.V. Card feed unit, read out unit, atm and method
US8870072B2 (en) 2009-03-27 2014-10-28 Card Swipe Protection Technology B.V. Card feed unit, read out unit, ATM and method
WO2011081610A1 (en) * 2009-12-29 2011-07-07 Ismet Yesil A device for a card jammed in a card reader

Also Published As

Publication number Publication date
AU2001240905A1 (en) 2001-11-12
US20010038036A1 (en) 2001-11-08
GB2362013B (en) 2004-03-31
EP1410314A1 (en) 2004-04-21
GB0010617D0 (en) 2000-06-21
EP1410314B1 (en) 2005-12-28
ES2252201T3 (en) 2006-05-16
GB2362013A (en) 2001-11-07
DE60116395T2 (en) 2006-08-03
US6588659B2 (en) 2003-07-08
DE60116395D1 (en) 2006-02-02

Similar Documents

Publication Publication Date Title
EP1139309B1 (en) Self-service terminal
US6588659B2 (en) Card reader module
US7143933B2 (en) Safe for deposits, method of control of safe for deposits, deposit system utilizing safe for deposits, and method for same
US6491216B1 (en) Security system
EP2075771B1 (en) Card reader device
JP5030678B2 (en) Recording medium processing apparatus
JP5919953B2 (en) Drawer and medium transaction device
US6729538B2 (en) Card reader module
US7344065B1 (en) ATM with security sensing system for cash dispenser customer interface gate
US20060118624A1 (en) Systems and methods for preventing use of card skimmers on electronic card terminals
JP2004094482A (en) Recording medium recording device and transaction device
JP5142740B2 (en) Automatic transaction equipment
US8622296B2 (en) Magnetic stripe card reader assembly and method
US20090152354A1 (en) Card reader device
JP6623546B2 (en) Automatic transaction equipment
JPS589257A (en) Receiving device for transaction medium
JP3865360B2 (en) Card reader
JPH0454540Y2 (en)
KR101519526B1 (en) Device for reading card
JP4006940B2 (en) Wristband automatic payment machine
JPH01302485A (en) Card carrying device
JPS5810266A (en) Automatic transaction device
JP2005190037A (en) Cash automatic transaction device

Legal Events

Date Code Title Description
AK Designated states

Kind code of ref document: A1

Designated state(s): AE AG AL AM AT AU AZ BA BB BG BR BY BZ CA CH CN CR CU CZ DE DK DM DZ EE ES FI GB GD GE GH GM HR HU ID IL IN IS JP KE KG KP KR KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ NO NZ PL PT RO RU SD SE SG SI SK SL TJ TM TR TT TZ UA UG US UZ VN YU ZA ZW

AL Designated countries for regional patents

Kind code of ref document: A1

Designated state(s): GH GM KE LS MW MZ SD SL SZ TZ UG ZW AM AZ BY KG KZ MD RU TJ TM AT BE CH CY DE DK ES FI FR GB GR IE IT LU MC NL PT SE TR BF BJ CF CG CI CM GA GN GW ML MR NE SN TD TG

121 Ep: the epo has been informed by wipo that ep was designated in this application
DFPE Request for preliminary examination filed prior to expiration of 19th month from priority date (pct application filed before 20040101)
WWE Wipo information: entry into national phase

Ref document number: 2001911987

Country of ref document: EP

WWP Wipo information: published in national office

Ref document number: 2001911987

Country of ref document: EP

NENP Non-entry into the national phase

Ref country code: JP

WWG Wipo information: grant in national office

Ref document number: 2001911987

Country of ref document: EP