KR20070033601A - Desorption detection EP pad - Google Patents

Abstract

The present invention relates to a detachment detecting EPP pin pad capable of detecting illegal detachment of an EPP pin pad installed in an automated teller machine. When the illegal removal of the EPP pin pad is detected, all related data of the EPP pin pad is deleted. The present invention relates to a detachable detection EPP pin pad that prevents illegal hacking. To this end, the present invention, the detachment detection sensor unit for detecting that the EPP pin pad is detached and detached from the automated teller machine, and if the detachment detachment is detected, delete all the data in the EPP pin pad and the operation of the automated teller machine An encryption control unit for stopping, a key scanning unit for scanning a key value received from a user, an external communication unit in charge of communication with an external financial server, a memory storing an encryption key and a password by a user input, and the EPP pin pad It is provided with an internal damage detection sensor for detecting the internal decomposition of the.

ATM, Pinpad, EPP, Encryption, Key, Input

Description

Encryption Pin Pad for sensing detachment

Figure 1a, 1b is a view showing the mounting state of the detachable detection EPP pin pad according to an embodiment of the present invention.

Figure 2 is a diagram showing the internal configuration block of the detachable detection EPP pin pad according to an embodiment of the present invention.

Figure 3 is a flow chart showing the operation of the detachable detection EPP pin pad.

* Description of the symbols for the main parts of the drawings *

S302: EPP pin pad S304: Detach detection value '0'

S306: Detach EPP Pin Pad Detachment S308: Set Detach Detect Value '1'

S310: Delete all data, stop the automatic teller machine operation

The present invention relates to a detachment detecting EPP pin pad capable of detecting illegal detachment of an EPP pin pad installed in an automated teller machine. When the illegal removal of the EPP pin pad is detected, all related data of the EPP pin pad is deleted. The present invention relates to a detachable detection EPP pin pad that prevents illegal hacking.

In terms of financial services, financial automation equipment is developed to provide unmanned services, except consultation services, quickly and conveniently regardless of time. Thus, when information for financial transactions is input following the recognition of the bankbook / card, the check and withdrawal unit or the cash withdrawal unit can be operated while performing data communication with the central computer of the head office to perform the required transaction.

A device that prevents unauthorized access and use of other devices by the automated teller machine should be assigned a password for each user so that only authorized users can operate the device normally. After confirming whether the password is registered in advance, the next step can be processed only when it matches.

As such, in a financial automation device such as an extremely secure device, a keypad for inputting a password is combined with an encryption device for encrypting input data. As such an encryption device, an encryption pin pad module adopting the DES (Data Encryption Standard) algorithm is widely used. The DES pin pad module is a module for processing encryption or key processing for a user's password, and includes a numeric button for inputting a password, a plurality of menu buttons for performing various functions, and an SRAM storing an encryption key. Doing. The SRAM is installed inside the apparatus so that arbitrary operation is not possible from the outside, but the upper surface of the number button and the menu button is exposed so that it is easy for the user to operate.

Meanwhile, the DES pin pad module includes a bus type mounted in an input / output slot of a system, a serial type connected to a communication port of a system, and an EPP type integrated in a pin pad for password input. Among the above types, in particular, in the case of the EPP (Encryption Pin Pad) type pin pad installed in the automated teller machine, the card number of the person who used the automated teller machine by hacking by dismantling the EPP pin pad internally, the corresponding password There was a problem that could hack a fraud. Conventionally, in order to prevent this, a sensor for detecting disassembly / break of the EPP pin pad is placed to prevent hacking. However, even if the disassembly / breakage of the EPP pinpad can be detected, it is possible to prevent the hacking by removing the EPP pinpad itself and installing a new hacking EPP pinpad without disassembling / breaking the EPP pinpad. There was no problem. In other words, if the EPP pin pad itself is completely removed from the automated teller machine, and a separate hacking EPP pinpad is connected to the key input unit, the card number and the corresponding password of the person who used the automated teller machine can be illegally hacked. There was a problem.

As a result, a financial automated device having a structure for inputting a password, such as a magnetic card, which is difficult to encrypt itself, has an encryption device such as an EPP pin pad that receives and encrypts a password. If you remove it and replace it with another hacking EPP pin pad, there was a risk of financial accidents that hacked user information such as card numbers and passwords.

The present invention has been made to solve the above problems, an object of the present invention to provide a device that can detect the illegal removal of the EPP pin pad. In addition, when the EPP pin pad is illegally detached, an object of the present invention is to provide an algorithm capable of blocking illegal hacking by deleting all relevant data.

In order to achieve the above object, the present invention provides a desorption detection unit for detecting that the EPP pin pad is detached and detached from the automated teller machine; An encryption control unit for stopping the operation of the key, a key scanning unit for scanning a key value received from the user, an external communication unit for communication with an external financial server, a memory storing an encryption key and a password by a user input, and EPP pin pad includes an internal damage detection unit for detecting the internal disassembly.

In addition, the present invention is a process for initializing the detachment detection value indicating the mounting / detachment state of the EPP pin pad when the EPP pin pad for performing data encryption for the first time to the automated teller machine, and the EPP pin Periodically detecting whether the pad is detached or detached from the automated teller machine; changing and detaching the detachable detection value to '1' when detached and detached; and when the detachable detection value is '1', the EPP pin pad Deleting all the stored data and stopping the operation of the automated teller machine.

Hereinafter, the detailed description of the preferred embodiments of the present invention will be described with reference to the accompanying drawings. In the following description of the reference numerals to the components of the drawings it should be noted that the same reference numerals as possible even if displayed on different drawings. In addition, in describing the present invention, when it is determined that a detailed description of a related known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted. In addition, terms to be described below are terms defined in consideration of functions in the present invention, which may vary according to general practices of those belonging to the technical field of the present invention, and the definitions should be made based on the contents throughout the present specification.

1A is a perspective view illustrating a state in which an EPP pin pad is mounted according to an embodiment of the present invention.

Referring to FIG. 1A, the EPP pin pad 100 is mounted to the ATM using the EPP fixing hole 104. A fixing bar such as a screw is inserted into the EPP fixing hole 104 so that the EPP pin pad can be fixedly mounted on the ATM. The upper end of the EPP pin pad 105 is provided with a pin (PIN) consisting of a key input unit. Enter a password or the like from the user.

Detachable detection sensors 102 and 103 are provided between the upper EPP fixing hole and the lower EPP fixing hole to detect that the EPP pin pad is separated from the automatic teller machine. The detachment detecting sensors 102 and 103 are sensors for detecting a detachment of a mount, and when the detachment detection is detected, the detachment detection sensors 102 and 103 have a detachment detection value indicating the detachment detection. Referring to Figure 1b is a cross-sectional view of the EPP pin pad is mounted on the automated teller machine, it can be seen that the removable sensor 102 is mounted between the EPP fixing hole (104).

2 is a diagram illustrating an internal configuration block of an EPP pin pad according to an embodiment of the present invention.

The conventional EPP pin pad includes a function unit 220 such as a kisscan unit, an external communication unit, a memory, an internal damage detection sensor unit, and the like. In addition to the block, the EPP pin pad further includes a detachable detection sensor unit 210. Characterized in having. Hereinafter, the conventional kisscan unit 222, the external communication unit 224, the memory 226, the internal damage detection sensor unit 228 will be described first, and then the detachable detection sensor unit 210 which is a feature of the present invention. The encryption control unit 200 will be described.

The key scan unit 222 receives a key value input from the user through the key input unit. The key scan unit 220 performs a function of transmitting the key value received from the user to the encryption control unit. It will be apparent that the key value may be various numeric key values such as a password, a card number, a menu selection number, and the like.

The external communication unit 224 is an interface in charge of communication with an external financial server, and the communication method is Ethernet, Universal Serial Bus, IEEE 1394, serial communication, parallel communication ( There may be no limitations on the method, such as a wired communication method such as parallel communication. Therefore, the external communication unit provides hardware and protocol for a specific communication method among the various communication methods as described above.

The memory 226 is a storage means for storing the encryption key and data, and is implemented as a recording storage medium such as SRAM. The encryption key is provided to an encryption control unit and used when encrypting a password or the like according to a predetermined algorithm.

The internal damage detection sensor unit 228 is a sensor for detecting the breakage of the EPP pin pad, and performs a function for detecting that the EPP pin pad is damaged and hacked by an illegal hacker. That is, when an illegal hacker attempts to hack by disassembling the inside of the EPP pin pad without removing the EPP pin pad from the automated teller machine, the internal damage detection sensor unit 228 detects this. All data such as passwords and card numbers stored by user input are deleted.

In the EPP pin pad of the present invention, in addition to the functional unit 220, a detachable detecting sensor unit 210 is provided. The detachable detecting sensor unit 210 is different from the internal damage detecting sensor unit 228. This function detects the detachment of the pin pad. That is, the internal damage detection sensor unit 228 is a sensor that detects when the inside of the EPP pin pad is disassembled in a state in which the EPP pin pad is not detached and is mounted on the automatic teller machine, and the detachable detection sensor unit in the present invention. 210 is a sensor that detects when the EPP pin pad body itself is separated from the automatic teller machine. The detachment detecting sensor unit 210 may include detachment detecting sensors 102 and 103 illustrated in FIGS. 1A and 1B to detect detachment detachment of an EPP pin pad. Desorption detection sensor unit 210 has a desorption detection value as shown in the following [Table 1], when the EPP pin pad is mounted for the first time in the automated teller machine, the detachment of '0' means EPP pin pad mounting It is initialized to the detected value. Then, when the EPP pin pad is detached and detached, the detachment detection value is set to change to '1' which means detachment. When the detachment detection value is set to '1', the encryption control unit 200 deletes all data.

TABLE 1

Attachment / Removal Status Desorption detection value mounting 0 Desorption One

The encryption controller 200 encrypts a password input from a user according to a predetermined encryption algorithm. That is, the encryption control unit reads the encryption key stored in the memory, and encrypts the input password. As the encryption algorithm, various known encryption methods may be used. In addition, when the EPP pin pad detachment is detected, the encryption control unit 200 deletes all data such as an encryption key and a password stored by a user input.

3 is a flowchart illustrating an algorithm for deleting data such as a user password when an EPP pin pad is detached and detected according to an embodiment of the present invention.

When the EPP pin pad is first mounted on the automated teller machine (S302), the detachment detection value is initially set to a value of '0', meaning that the EPP pin pad is installed as an initial value (S304). The detachment detection value is a value representing the EPP pin pad mounting / detachment state, and a value thereof may be changed and set by the detachment detection sensor unit. For example, when the EPP pin pad is attached and detached, the detachable detection sensor may change and set the detachable detection value from '0' to '1'.

On the other hand, after the EPP pin pad mounting (S302) after the initial setting to the initial value '0' is set (S306), the detachment detecting sensor unit periodically detects whether the EPP pinpad is detached from the automated teller machine (S306). . When the EPP pin pad is detached during the sensoring, the EPP pin pad is set to change the detachment detection value from the conventional '0' to '1' (S308). If the detachable detection value is set to change to '1', the encryption controller deletes all data (eg, password, encryption key) in the EPP pin pad and stops all operations of the automated teller machine (S310). Therefore, when the EPP pin pad is detached by an illegal hacker, all data are automatically deleted. Thus, the hacking of the card number and password due to the illegal hacking by the EPP pin pad detachment can be prevented. It becomes possible.

In the above description of the present invention has been described with respect to specific embodiments, such as a detachable detection EPP pin pad, various modifications can be made without departing from the scope of the invention. Therefore, the patent scope of the present invention is not to be determined by the above-described embodiments, and the claims will be apparent not only in the claims but also in the equivalent ranges.

As described above, the present invention can prevent illegal hacking of the EPP pin pad as well as preventing hacking by EPP pin pad disassembly / breaking, thereby preventing password and card number hacking by illegal hackers. It works.

Claims (5)

In the EPP pin pad for performing data encryption of the automated teller machine, Desorption detection sensor unit for detecting that the EPP pin pad is detached and detached from the automated teller machine, If the detachment detachment is detected, the encryption control unit to delete all data in the EPP pin pad and to stop the operation of the automated teller machine Desorption detection EPP pin pad provided with. The method according to claim 1, wherein the EPP pin pad, A key scanning unit scanning a key value received from a user, External communication department in charge of communication with external financial server, Memory storing encryption key, password by user input, Internal breakage detection unit for detecting the internal decomposition of the EPP pin pad Desorption detection EPP pin pad characterized in that it further comprises. The detachment detecting EPP pin pad according to claim 1, wherein the detachment detecting sensor unit has a detachment detecting value indicating a mounting / removing state of the EPP pin pad. When the EPP pin pad for performing data encryption is first mounted on the automated teller machine, initializing the detachment detection value indicating the attachment / detachment state of the EPP pin pad to '0'; Periodically detecting whether the EPP pin pad is detached and detached from the ATM, and changing and setting the detachment detection value to '1' when detached and detached; If the detachment detection value is '1', deleting all data stored in the EPP pin pad and stopping the operation of the automated teller machine. Method of operation of the detection detection EPP pin pad provided with. The method of claim 4, wherein the data includes a card number and a password.

Images