Card reader tampering detector

Patent metadata

Field	Value
Publication number	US-10497199-B2
Application number	US-201815982963-A
Country	US
Kind code	B2
Filing date	May 17, 2018
Priority date	May 17, 2017
Publication date	Dec 3, 2019
Grant date	Dec 3, 2019

Abstract

A card reader tampering detector includes a substrate, a detector circuit, and at least one sensor disposed on the substrate and configured for communication with the detector circuit. The substrate is dimensioned to facilitate at least partial insertion of the tampering detector in a smartcard reader. The sensor is positioned on the substrate such that, when the tampering detector is at least partially inserted in the smartcard reader, the sensor aligns with a region of the reader normally occupied by a smartcard when the smartcard is inserted in the reader. The detector circuit is configured to receive a sensor output from the at least one sensor, from the sensor output detect a presence of an unauthorized device within the smartcard reader when the tampering detector is at least partially inserted in the reader, and provide an output signal indicative of the presence of the unauthorized device within the smartcard reader.

First claim

The invention claimed is:

1. A card reader tampering detector comprising:
a substrate having dimensions facilitating at least partial insertion of the tampering detector in a smartcard reader;
a detector circuit; and
at least one sensor disposed on the substrate and configured for communication with the detector circuit,
wherein the at least one sensor is disposed on the substrate in a position thereon such that, when the tampering detector is at least partially inserted in the smartcard reader, the at least one sensor aligns with a region of the smartcard reader normally occupied by a smartcard when the smartcard is inserted in the smartcard reader, and
wherein the detector circuit is coupled to the at least one sensor and is configured to (i) receive a sensor output from the at least one sensor, (ii) from the sensor output detect a presence of an unauthorized device within the smartcard reader when the tampering detector is at least partially inserted in the smartcard reader, and (iii) provide an output signal indicative of the presence of the unauthorized device within the smartcard reader.

2. The tampering detector according to claim 1 , wherein the smartcard includes a first smartcard contact pad electrically isolated from the smartcard, the unauthorized device includes a first device electrical contact pin arranged to electrically engage the first smartcard contact pad, the at least one sensor comprises a first sensor electrical contact pad arranged to electrically engage the first device electrical contact pin, and the sensor output comprises a device signal received from the first device electrical contact pin.

3. The tampering detector according to claim 2 , wherein the detector circuit is configured to apply a stimulus to the first sensor electrical contact pad and to detect the presence of the unauthorized device from the stimulus and from the sensor output received from the first sensor electrical contact pad.

4. The tampering detector according to claim 2 , wherein the smartcard includes a second smartcard contact pad electrically isolated from the smartcard, the unauthorized device includes a second device electrical contact pin arranged to electrically engage the second smartcard contact pad, the at least one sensor comprises a second sensor electrical contact pad arranged to electrically engage the second device electrical contact pin, and the detector circuit is configured to apply a stimulus to the second sensor electrical contact pad and to detect the presence of the unauthorized device from the stimulus and from the sensor output received from the first sensor electrical contact pad.

5. The tampering detector according to claim 1 , wherein the at least one sensor comprises at least two of an electrical sensor, an image sensor, an optical sensor, an inductive sensor, and an inductive switch.

6. The tampering detector according to claim 1 , wherein the at least one sensor comprises an image sensor, and the detector circuit is configured with at least one reference image and is further configured to detect the presence of the unauthorized device by (i) using the at least one sensor to capture at least one image of a card access port of the smartcard reader, and (ii) comparing the at least one captured image with the at least one reference image.

7. The tampering detector according to claim 1 , wherein the at least one sensor comprises an optical sensor, and the detector circuit is configured with a reference optical pattern and is further configured to detect the presence of the unauthorized device by (i) using the at least one sensor to measure illuminance at at least one location within a card access port of the smartcard reader, and (ii) comparing the measured illuminance with the reference optical pattern.

8. The tampering detector according to claim 1 , wherein the at least one sensor comprises an inductive sensor, and the detector circuit is configured with a reference inductance pattern and is further configured to detect the presence of the unauthorized device by (i) using the at least one sensor to measure inductance at at least one location within a card access port of the smartcard reader, and (ii) compare the measured inductance with the reference inductance pattern.

9. The method according to claim 1 , wherein the at least one sensor comprises an inductive switch, and the inductive switch is configured to signal the detector circuit that a distance between the at least one sensor and a metal artefact is less than a minimum proximity value.

10. The tampering detector according to claim 1 , further comprising an operator output device coupled to the detector circuit and configured to provide one of an audible and a visual representation of the output signal received from the detector circuit.

11. The tampering detector according to claim 10 , wherein the detector circuit and the operator output device are disposed on the substrate.

12. A method for detecting tampering of a smartcard reader, the method comprising:
aligning at least one sensor with a region of a smartcard reader normally occupied by a smartcard when the smartcard is inserted in the smartcard reader;
receiving, at a detector circuit, a sensor output from the at least one sensor;
from the sensor output, detecting, at the detector circuit, a presence of an unauthorized device within the smartcard reader; and
generating, at the detector circuit, an output signal indicative of the presence of the unauthorized device within the smartcard reader.

13. The method according to claim 12 , wherein the smartcard includes a first smartcard contact pad electrically isolated from the smartcard, the unauthorized device includes a first device electrical contact pin arranged to electrically engage the first smartcard contact pad, the at least one sensor comprises a first sensor electrical contact pad, the aligning comprises electrically engaging the first sensor electronic contact pad with the first device electrical contact pin, and the receiving at a detector circuit comprises receiving a device signal from the first device electrical contact pin.

14. The method according to claim 13 , wherein the detecting comprises (i) applying a stimulus signal to the first sensor electrical contact pad, and (ii) determining the presence of the unauthorized device from the stimulus and from the sensor output received from the first sensor electrical contact pad.

15. The method according to claim 13 , wherein the smartcard includes a second smartcard contact pad electrically isolated from the smartcard, the unauthorized device includes a second device electrical contact pin arranged to electrically engage the second smartcard contact pad, the at least one sensor comprises a second sensor electrical contact pad arranged to electrically engage the second device electrical contact pin, and the detecting comprises (i) applying a stimulus to the second sensor electrical contact pad, and (ii) determining the presence of the unauthorized device from the stimulus and from the sensor output received from the first sensor electrical contact pad.

16. The method according to claim 12 , wherein the at least one sensor comprises an image sensor, and the detecting comprises (i) capturing at least one image of a card access port of the smartcard reader, via the image sensor, and (ii) comparing the at least one captured image with at least one reference image.

17. The method according to claim 12 , wherein the at least one sensor comprises an optical sensor, and the detecting comprises (i) measuring illuminance at at least one location withi

Assignees

• Toronto Dominion Bank

Inventors

• Mackinnon Robert Bruce
• Rabinovich Dmitri

Classifications

• H04K2203/20

  for contactless carriers, e.g. RFID carriers · CPC title

• G07F19/2055 Primary

  Anti-skimming aspects at ATMs · CPC title

• H04K3/822

  by detecting the presence of a surveillance, interception or detection · CPC title

• G07F7/0873

  Details of the card reader · CPC title

• G06F21/44

  Program or device authentication · CPC title