Ncr Corporation

Ncr Voyix Corporation

Ncr Atleos Corporation

Cardtronics Usa, Inc.

Graeme Mitchell

Alexander William Whytock

Gary A Ross

Kevan Johnston

Peter Roy Vettraino

Francesc Alier Pous

Steven Ritchie

Martin Barrett

Alistair Lowden

Yoshitaka Utsumi

Gordon David Chisholm

Jim Henderson

Kevin Horgan

Colin Sinclair

Conor Michael Fyfe

David Sleeman

Michael McBride

Shannon Mcgrath

Mike Taylor

A card reader's motorized transport is controlled by firmware of the reader so as to control a distance that any card can be pulled into the reader during a transaction on a host device. The distance is sufficient enough to allow an embedded chip on the card to be read by a chip read interface but is insufficient to be read by a magnetic read interface. Furthermore, the entire length of the card is prevented from completely passing over the magnetic read interface during the transaction such that any skimmer placed within the reader is physically unable to read the magnetic card information from the magnetic strip of the card. In an embodiment, the firmware is configured to permit only chips from the cards to be read for transactions or configured to turn off chip only reading by permitting both chip reads and magnetic strip reads for each transaction.

Device, system, and method for card skimming protection

A computer-implemented method and transaction terminal is disclosed. The method comprises capturing, by an imaging device, a first image of an internal region of an apparent peripheral device of the transaction terminal, calculating, by a processor of a transaction terminal, a first amount of change between the first image and a baseline image of the internal region, capturing, by the imaging device, at least one further image of the internal region, for each further image, calculating, by the processor, a second amount of change between the further image and a respective baseline image of the internal region, and when at least two consecutive values of the first and/or second amount of change are below a predefined value, determining that the imaging device is in a dummy peripheral device to prevent detection of a foreign object in an active peripheral device of the transaction terminal.

Detection of peripheral device manipulation

A system and method is described for detecting a foreign object such as a skimmer placed adjacent to a bezel for a magnetic card reader device, as used in automatic teller machines and gas pumps. At least two sensors are mounted adjacent to the bezel. Each sensor provides a signal that varies when a skimmer is mounted adjacent to the bezel. A controller receive measurement signals from the sensors, and generates an alarm signal when the measurement signals differ from associated predetermined baseline signals by at least associated predetermined thresholds. The alarm signal indicates that a foreign object has been detected adjacent he bezel. The sensors may be capacitive, time of flight, spectral, radar, and/or inductive. The capacitive sensors may include three or more plates, forming multiple capacitive pairs, each capacitive pair effectively forming a separate sensor.

Fraud detection system and method

A system and method is described for detecting a foreign object such as a skimmer placed adjacent to a bezel for a magnetic card reader device, as used in automatic teller machines and gas pumps. At least two sensors are mounted adjacent to the bezel. Each sensor provides a signal that varies when a skimmer is mounted adjacent to the bezel. A controller receive measurement signals from the sensors, and generates an alarm signal when the measurement signals differ from associated predetermined baseline signals by at least associated predetermined thresholds. The alarm signal indicates that a foreign object has been detected adjacent the bezel. The sensors may be capacitive, time of flight, spectral, radar, and/or inductive. The capacitive sensors may include three or more plates, forming multiple capacitive pairs, each capacitive pair effectively forming a separate sensor.

Various embodiments include composite security interconnect devices and methods. One method embodiment that may be performed by a composite security interconnect device, also referred to herein as a security controller, includes decrypting a first encrypted input received from a peripheral device with a first encryption key to obtain clear text. The first encryption key may be an encryption key established between the security controller and the peripheral device. The method further includes encrypting the clear text with a second encryption key to obtain second encrypted input, the second encryption key being a key of an encryption key pair established with a transaction processing host.

Composite security interconnect device and methods

A method of detecting interference with a fraud prevention transmitter on a self-service terminal is described. The method comprises: detecting presentation of a card at a card reader; attempting to detect a customer while the card is presented; and triggering an alarm event if the customer is not detected while the card is presented on a predetermined number of occasions.

Fraud prevention

An Operating-System (OS) independent peripheral API is provided to applications processing in an application OS. The API communicates with a peripheral OS that includes device drivers for peripherals. Requests for accessing the peripherals are made through the API of the application OS but access and control of the peripherals are maintained through the device drivers of the peripheral OS.

Operating system (OS) independent peripheral control

A card reader guide for use in a fascia of a self-service terminal is described. The card reader guide defines a card reader aperture extending in a first direction through which a customer may insert a data card. The card reader guide also comprises: a first protrusion extending (i) along part of the card reader aperture through which a magnetic stripe of the card passes, and (ii) towards the customer, wherein the first protrusion defines a stripe path in registration with the magnetic stripe of the card as the card is inserted by the customer; a second protrusion, opposite to, and aligned with, the first protrusion, and extending (i) along the part of the card reader aperture through which the magnetic stripe of the card passes, and (ii) towards the customer; and a magnetic reader detector located in the first protrusion at the stripe path.

A method of preventing fraud at a self-service terminal is described. The method comprises: receiving a signal from an electromagnetic sensor located in the vicinity of an electromagnetic signal transmitter; monitoring a drive signal being delivered to the electromagnetic signal transmitter; and comparing the drive signal with the electromagnetic sensor signal. The method then ascertains if a state of the electromagnetic sensor signal is inconsistent with a state of the drive signal; and triggers an alarm when the state of the electromagnetic sensor signal is inconsistent with a state of the drive signal.

A method of protecting a magnetic card inserted into a card reader in a self-service terminal is described. The method comprises detecting presentation of a card at a card reader; energizing an electromagnetic signal transmitter in response to detecting presentation of the card; detecting a change of state of a width switch; de-energizing the electromagnetic signal transmitter in response to detecting the change of state of the width switch; detecting a magnetic signal from a pre-read magnetic reader; and re-energizing an electromagnetic signal transmitter in response to detecting the magnetic signal from the pre-read magnetic reader.

An electromagnetic signal transmitter for fraud prevention in a self-service terminal is described. The electromagnetic signal transmitter comprises a plurality of coil drives. The plurality of coil drives may include a first inductive coil drive comprising a first pair of opposing poles; and a second inductive coil drive comprising a second pair of opposing poles, where the second pair of opposing poles are offset from the first pair of opposing poles in at least two dimensions.

A particular problem for self-service devices incorporating USB devices () and a USB host () is that, when communication is lost between the USB host and one or more of the devices it is difficult (in particular situations) to reset those USB devices without manual intervention. We address that problem by using self-powered USB devices and/or bus powered devices connected to USB hubs, and by creating a power control interface () which is itself a USB device. That power control interface takes instructions from the USB host and is able to interrupt a power supply () to the USB devices to provoke automatic reset of those devices. Additionally, a watchdog application within the power control interface causes reset of that interface should it malfunction. Also, a master watchdog application at the USB host communicates with a slave watchdog application at the power control interface via a USB link. In the event of cessation of heartbeat signals between the master and slave the power control interface sends a hardware reset signal to the USB host.

Growing community of inventors

Dundee, United Kingdom

Graeme Mitchell