An anti-disassembly switch, an anti-disassembly structure and a POS

Abstract

The present invention provides a tamper-proof switch, a tamper-proof structure and a POS. The tamper-proof switch includes a first contact, a second contact, a third contact, a fourth contact and a fifth contact; the second contact and the third contact are connected in series; the fourth contact and the fifth contact are connected in series; the second contact, the third contact, the fourth contact and the fifth contact are distributed in a circumference outside the first contact. The contacts of the tamper-proof switch form an associated protection, providing more obstacles for attack behaviors, thereby improving the safety performance. For the POS and the tamper-proof structure, at least two or more of the tamper-proof safety switches are arranged under the grid network protective film. The tamper-proof switch has a three-layer structure. The outermost layer is a circle, the second layer is four contacts arranged at a certain interval, and the innermost layer is a circular contact.

Description

Technical Field

[0001] The present invention relates to the technical field of POS security protection, in particular to an anti-disassembly switch, an anti-disassembly structure and a POS.

Background Art

[0002] With the rapid development of technology, financial terminal products are applied in more and more fields, and the security requirements for financial POS products are getting higher and higher. In order to prevent POS from being disassembled and stolen, now financial POS terminals must be designed with a security protection mechanism. Through the cooperation of the outer shell and the security protection circuit, the protection of the POS terminal is realized, and important information such as passwords is prevented from being stolen, causing serious financial losses.

[0003] In general, financial product design must use a security processor. The security processor has multiple anti-attack detection inputs. The security processor needs to cooperate with our structural design and the peripheral security detection circuit. If the design is not good, it is easy to be disassembled. An attacker can embed a device for stealing information into the POS machine, thereby stealing sensitive information such as keys, endangering the security of financial transactions.

[0004] Now many financial POS terminals are generally composed of an anti-disassembly switch contact and an outer shell. These anti-disassembly switches generally use conductive rubber to connect signals together through structural action, and then connect to the security detection circuit. Once the outer shell is disassembled, these points are disconnected, and the security processor will detect that the device is attacked, thereby triggering the security protection mechanism, causing the device to automatically clear sensitive information such as keys, and the device is locked to prevent it from continuing to operate the device.

[0005] In the existing technology, each security detection electrical contact is scattered and independent, and then connected together through the cooperation of the structure and input to the security processor. There is no mutual protection between them. These electrical contacts can often be short-circuited relatively easily through certain means. For example, others can use means such as drilling, laser, and chemical solvents to invade, and then can disassemble the outer shell without triggering the security protection, and then hide a device for stealing information into the device to steal key sensitive information. For example, the application number: 201210498833.6, the publication number: CN102968854A, the publication date: 20130313, specifically discloses an open cover data self-destruction device and method for a security payment terminal, and the contacts described therein are not protected, and the contacts are relatively easy to be attacked.

[0006] There is also an anti-disassembly structure such as the application number: CN201610491883.X, the publication number 106097606A, which specifically discloses a security anti-disassembly structure and its use method. This anti-disassembly switch design is too complex and has poor practicality.

Summary of the Invention

[0007] To overcome the defects of existing devices, the present invention provides an anti-disassembly switch, an anti-disassembly structure and a POS. Each contact is designed with associated protection to form mutual protection, which can effectively prevent the grid network protection film from being lifted to attack the protected anti-disassembly switch.

[0008] The present invention is implemented as follows: An anti-disassembly switch includes a first contact, a second contact, a third contact, a fourth contact and a fifth contact;

[0009] The second contact and the third contact are connected in series;

[0010] The fourth contact and the fifth contact are connected in series;

[0011] The second contact, the third contact, the fourth contact and the fifth contact are distributed in a circle outside the first contact.

[0012] Further, the first contact is located at the central position; the second contact and the third contact are arranged diagonally; the fourth contact and the fifth contact are arranged diagonally.

[0013] Further, it further includes a circular contact, and the circular contact is located outside the second contact, the third contact, the fourth contact and the fifth contact.

[0014] Further, the signals of the second contact and the third contact are anti-phase signals with the signals of the fourth contact and the fifth contact.

[0015] The present invention also provides an anti-disassembly structure, including at least two anti-disassembly switches;

[0016] Each of the anti-disassembly switches includes a first contact; the first contacts of each of the anti-disassembly switches are connected in series.

[0017] Further, each of the anti-disassembly switches further includes a second contact and a third contact; the second contact and the third contact are connected in series;

[0018] Each of the anti-disassembly switches further includes a fourth contact and a fifth contact; the fourth contact and the fifth contact are connected in series;

[0019] The second contact, the third contact, the fourth contact and the fifth contact are distributed in a circle outside the first contact; the first contact is located at the central position; the second contact and the third contact are arranged diagonally; the fourth contact and the fifth contact are arranged diagonally.

[0020] Further, each of the anti-disassembly switches further includes a circular contact, and the circular contact is located outside the second contact, the third contact, the fourth contact and the fifth contact.

[0021] Further, the signals of the second and third contacts are anti-phase signals with the signals of the fourth and fifth contacts;

[0022] or the signals of the second and third contacts are dynamically changing signals;

[0023] or the signals of the fourth and fifth contacts are dynamically changing signals;

[0024] or the signal of the first contact is a dynamically changing signal.

[0025] The present invention also provides a POS, including a housing, a grid network protection film and a security processor, and further including the anti-disassembly structure. Connection lines are arranged on the grid network protection film. The first contacts of the anti-disassembly switches of the anti-disassembly structure are connected in series through the connection lines of the grid network protection film and then connected to the security processor to form a closed loop; the second and third contacts of each anti-disassembly switch are connected to the security processor through the connection lines of the grid network protection film to form a closed loop; the fourth and fifth contacts of each anti-disassembly switch are connected to the security processor through the connection lines of the grid network protection film to form a closed loop; the circular contacts of each anti-disassembly switch are connected to the ground terminal or high-level terminal of the security processor through the connection lines of the grid network protection film.

[0026] Further, the signals of the second and third contacts are anti-phase signals with the signals of the fourth and fifth contacts;

[0027] or the signals of the second and third contacts are dynamically changing signals;

[0028] or the signals of the fourth and fifth contacts are dynamically changing signals;

[0029] or the signal of the first contact is a dynamically changing signal.

[0030] The advantages of the present invention are as follows:

[0031] First, an associated protection is formed between the contacts of the anti-disassembly switch, providing more obstacles for attack behaviors, thereby improving the security performance.

[0032] Second, for the POS and the anti-disassembly structure, at least two or more of the anti-disassembly safety switches are arranged under the grid network protection film. The anti-disassembly switch has a three-layer structure. The outermost layer is a circle, the second layer is four contacts arranged at a certain interval, and the innermost layer is a circular contact.

[0033] Third, the first contacts at the centers of the anti-disassembly switches form a set of closed loops, and two contacts on the diagonal of each anti-disassembly switch form a pair to form a closed loop.

[0034] Fourth, each contact is connected in series and short-circuited through the corresponding connection line or contact on the grid network protective film.

[0035] Fifth, the outermost circular contacts are grounded or connected to a high level, which also plays a certain protective role against the potting attack on the internal contacts.

[0036] With the above settings, when an attacker tries to lift the protective film and short-circuit a pair of contact signals of the anti-tamper switch, it will cause another pair of contact signals to disconnect, thus triggering the safety protection mechanism. The center points of different anti-tamper switches are designed as a pair of signals, and each is protected by the four surrounding points, so this design is safer.

Description of the Drawings

[0037] The present invention will be further described below with reference to the drawings in conjunction with embodiments.

[0038] Figure 1 It is a schematic structural diagram of the anti-tamper switch described in the present invention.

[0039] Figure 2 It is a schematic diagram of the anti-tamper structure described in the present invention.

[0040] Figure 3 It is a schematic structural diagram of the POS described in the present invention.

[0041] Explanation of the reference numerals in the drawings:

[0042] 1. Anti-tamper switch, 11. First contact, 12. Second contact, 13. Third contact, 14. Fourth contact, 15. Fifth contact, 16. Circular contact;

[0043] 2. Anti-tamper structure;

[0044] 3. POS, 31. Safety processor, 32. Housing, 33. Grid network protective film, 331. Connection line.

Specific Embodiments

[0045] Please refer to Figures 1 to 3 as shown.

[0046] The present invention provides an anti-tamper switch 1, including a first contact 11, a second contact 12, a third contact 13, a fourth contact 14 and a fifth contact 15;

[0047] The second contact 12 and the third contact 13 are connected in series. The way they are connected in series can be achieved by connecting them in series through an external connection line. For example, by setting a connection line on the grid network protection film of the POS, after installing the anti-tamper switch 1 on the POS, the grid network protection film is pressed by the outer shell of the POS, so that the connection line connects the second contact 12 and the third contact 13 in series. When in use, the connection line is set on the grid network protection film of the POS in advance. This connection line needs to be able to connect the second contact 12 and the third contact 13 to the input and output ends of the security processor of the POS respectively, and then connect the second contact 12 and the third contact 13 in series. The layout of this connection line can be arranged as needed according to the size and space of the grid network protection film. Then, just press the grid network protection film with the outer shell of the POS, and finally connect the closed loop. When the connected state is maintained, it is in a safe state and the security mechanism is not triggered.

[0048] The fourth contact 14 and the fifth contact 15 are connected in series, and their usage method is the same as that of the second contact 12 and the third contact 13.

[0049] The second contact 12, the third contact 13, the fourth contact 14 and the fifth contact 15 are distributed in a circle outside the first contact 11.

[0050] Usage method: Install the anti-tamper switch 1 under the grid network protection film of the POS, set circuit connection lines on the grid network protection film, and press the grid network protection film with the outer shell in advance, so that the second contact 12 and the third contact 13 form a closed loop with the security processor of the POS, and the fourth contact 14 and the fifth contact 15 form a closed loop with the security processor of the POS. Set in advance in the security processor that when the closed loop is normally connected, it is safe and the security processor has no reaction; when the closed loop is disconnected, it means that a risk event has occurred, then the security processor automatically clears sensitive information such as keys, and the device is locked to prevent it from continuing to operate the device.

[0051] The signal connection mode on the specific contact is as follows: the second contact 12 and the third contact 13 form a pair, and the fourth contact 14 and the fifth contact 15 form a pair. The second contact 12 and the third contact 13 are respectively connected to the input and output ends of the security processor of the POS, thus forming a closed loop, so that the second contact 12 and the third contact 13 form an associated protection. Similarly, the fourth contact 14 and the fifth contact 15 are respectively connected to the input and output ends of the security processor of the POS. When information theft occurs, if the grid network protective film is lifted, when one of a pair of contacts is disconnected, the closed loop of this pair of contacts will be disconnected, and in this way, the security processor will trigger a preset security mechanism, which can prevent short-circuit or open-circuit operations by lifting the grid network protective film. Compared with the existing mode of individual contacts or independent protection of each contact, the present invention adopts associated protection between contacts, and the security is higher. Because when short-circuiting in the same way, taking the second contact 12 and the third contact 13 as an example, when the thief lifts the grid network protective film, the closed loop formed by the second contact 12 and the third contact 13 is disconnected, thus triggering the security protection mechanism. When the thief shorts one of the contacts according to the existing technology, it will still cause the closed loop to be disconnected, thus triggering the security mechanism.

[0052] In a specific implementation, a preferred embodiment: the first contact 11 is located at the central position; the second contact 12 and the third contact 13 are arranged diagonally; the fourth contact 14 and the fifth contact 15 are arranged diagonally. With such a setting, when an attacker tries to lift the protective film and short-circuit one pair of signals of the anti-tampering contacts, it will cause the signals of the other pair of contacts to be disconnected, thus triggering security.

[0053] In a specific implementation, a preferred embodiment: further includes a circular contact 16, and the circular contact 16 is located outside the second contact 12, the third contact 13, the fourth contact 14 and the fifth contact 15.

[0054] The signals of the second contact 12 and the third contact 13 and the signals of the fourth contact 14 and the fifth contact 15 are anti-phase signals.

[0055] The anti-tampering switch 1 has a three-layer structure. The outermost layer is a circle, that is, the circular contact 16. The second layer is four contacts arranged at a certain interval, namely the second contact 12, the third contact 13, the fourth contact 14 and the fifth contact 15. The innermost layer is a circular contact, that is, the first contact 11.

[0056] The second contact 12 and the third contact 13 on the anti-tampering switch 1 are short-circuited through the corresponding contacts on the grid network protective film. The fourth contact 14 and the fifth contact 15 are short-circuited through the corresponding contacts on the protective film.

[0057] Furthermore, it is preset that the signals of the second contact 12 and the third contact 13 are anti-phase signals with the signals on the second contact 2, the fourth contact 14 and the fifth contact 15. In this way, when a short circuit occurs in the closed loop of the two pairs of signals, they will affect each other, and the loop will detect an error level, thereby triggering the safety protection mechanism, making the safety performance higher. The principle is as follows: for example, if the high level is pre-input to the second contact 12 and the third contact 13, then the low level is pre-input to the fourth contact 14 and the fifth contact 15. When a short circuit occurs, the high level will be pulled down, so that it is no longer a high level, and finally the preset adjustment is triggered, and the safety protection mechanism is triggered. Similarly, vice versa.

[0058] The outermost circular contact 16 is used for grounding or connecting to a high level, which also plays a certain protective role against the potting attack on the internal contacts.

[0059] The above design method can ensure that when an attacker tries to lift the protective film and short-circuit one pair of signals of the anti-tamper contacts, it will cause the disconnection of the signals of the other pair of contacts, thereby triggering safety. The center points of different anti-tamper switches are designed as a pair of signals, and each is protected by the four surrounding points, so this design is safer.

[0060] Such a structure is much safer than the original simple anti-tamper switch designed under the grid network protective film. Because the existing simple anti-tamper switch generally has only two internal and external contacts, and the contacts are short-circuited by conductive particles or dome arrays, and the contacts are short-circuited by injecting conductive glue from the side, making the safety fail. However, for the anti-tamper switch 1 of the present invention, due to the formation of associated protection between the contacts, it can effectively prevent the potting attack.

[0061] The present invention also provides an anti-tamper structure 2, including at least two anti-tamper switches 1;

[0062] Each of the anti-tamper switches 1 includes a first contact 11; the first contacts 11 of each of the anti-tamper switches 1 are connected in series. An associated protection is formed between the anti-tamper switches 1 and the anti-tamper switches 1, making the safety higher. Usage method: Connect the first contacts 11 of each anti-tamper switch in series, and then the first contacts 11 of the two anti-tamper switches 1 at both ends are respectively connected to the safety processor of the POS, thereby forming a closed loop. When a certain first contact 11 is not short-circuited and the grid network protective film is lifted, the closed loop will be disconnected, thereby triggering the safety protection mechanism.

[0063] In a specific implementation, a preferred embodiment: each of the anti-tamper switches 1 further includes a second contact 12 and a third contact 13; the second contact 12 and the third contact 13 are connected in series.

[0064] In a specific implementation, a preferred embodiment is as follows: Each of the anti-tamper switches 1 further includes a fourth contact 14 and a fifth contact 15; the fourth contact 14 and the fifth contact 15 are connected in series.

[0065] In a specific implementation, a preferred embodiment is as follows: The second contact 12, the third contact 13, the fourth contact 14, and the fifth contact 15 are distributed in a circle outside the first contact 11.

[0066] The first contact 11 is located at the central position; the second contact 12 and the third contact 13 are arranged diagonally; the fourth contact 14 and the fifth contact 15 are arranged diagonally.

[0067] In a specific implementation, a preferred embodiment is as follows: Each of the anti-tamper switches 1 further includes a circular contact 16, and the circular contact 16 is located outside the second contact 12, the third contact 13, the fourth contact 14, and the fifth contact 15.

[0068] The signals of the second contact 12 and the third contact 13 and the signals of the fourth contact 14 and the fifth contact 15 are anti-phase signals;

[0069] Or the signals of the second contact 12 and the third contact 13 are dynamically changing signals;

[0070] Or the signals of the fourth contact 14 and the fifth contact 15 are dynamically changing signals;

[0071] Or the signal of the first contact 11 is a dynamically changing signal.

[0072] The described anti-tamper structure is much safer than only designing a simple anti-tamper switch under the original grid network protective film. Because the existing simple anti-tamper switch generally has only two inner and outer contacts, and the contacts are short-circuited by conductive particles or pogo pins, or conductive glue is injected from the side to short-circuit the contacts, resulting in safety failure. However, our new type of anti-tamper switch can effectively prevent glue injection attacks. At the same time, due to the cooperation of multiple identical anti-tamper contacts, cross-protecting each other, it is not easy to short-circuit the corresponding contacts.

[0073] The present invention further provides a POS3, which includes a housing 32, a mesh network protection film 33, and a security processor 31, and further includes the anti-disassembly structure 2. A connection line 331 is provided on the mesh network protection film 33. The first contacts 11 of the anti-disassembly switches 1 of the anti-disassembly structure 2 are connected in series through the connection line 331 of the mesh network protection film 33 and then connected to the security processor 31 to form a closed loop; the second contacts 12 and the third contacts 13 of each anti-disassembly switch 1 are connected to the security processor 31 through the connection line 331 of the mesh network protection film 33 to form a closed loop; the fourth contacts 14 and the fifth contacts 15 of each anti-disassembly switch 1 are connected to the security processor 31 through the connection line 331 of the mesh network protection film 33 to form a closed loop; the circular contacts 16 of each anti-disassembly switch 1 are connected to the ground terminal or the high-level terminal of the security processor 31 through the connection line 331 of the mesh network protection film 33.

[0074] The signals of the second contact 12 and the third contact 13 are anti-phase signals to the signals of the fourth contact 14 and the fifth contact 15;

[0075] Or the signals of the second contact 12 and the third contact 13 are dynamically changing signals;

[0076] Or the signals of the fourth contact 14 and the fifth contact 15 are dynamically changing signals;

[0077] Or the signal of the first contact 11 is a dynamically changing signal. In a specific implementation, the dynamic signals of the three loops are the same or different. If the dynamic signals of each loop are all different, it can further play a protective role.

[0078] The anti-disassembly principles of loading dynamically changing signals in the above three loops are the same. Taking the signals of the second contact 12 and the third contact 13 as dynamically changing signals as an example: Its anti-disassembly principle: The dynamically changing signal is a signal with a certain frequency and a certain phase driven and output from a pin of the security processor 31 and returned to another detection pin of the security processor 31 through the loop of the second contact 12 and the third contact 13. If the second contact 12 and the third contact 13 are disconnected, the security processor cannot receive this dynamically changing signal, and the security protection mechanism will be triggered.

[0079] Further, if the adjacent circuits of the fourth contact 14 and the fifth contact 15 also input dynamically changing signals, and these dynamically changing signals are different from those of the second contact 12 and the third contact 13, they constitute a set of corresponding dynamic drive and detection signals. If there is a short circuit between adjacent circuits, that is, a short circuit between the circuits of the second contact 12 and the third contact 13 and the circuits of the fourth contact 14 and the fifth contact 15, it will affect the detection signals of their respective circuits. Since different circuits are loaded with different dynamic signals, a short circuit between circuits will detect signals with incorrect frequencies or phases, thereby triggering safety.

[0080] The present invention does not innovate in the design of the security processor and the housing. The present invention provides a new anti-disassembly switch 1 and an anti-disassembly structure 2 for POS. Only by setting connection lines 331 at corresponding positions on the grid network protective film 33, when the housing presses the grid network protective film 33, each contact can be connected in series according to a preset connection relationship through the connection lines 331. As for the setting method of the connection lines 331, no new method is designed. Only according to the positions of each contact of the anti-disassembly switch 1, the positions of the connection lines 331 are arranged. The grid network protective film is placed on the anti-disassembly switch 1. After the housing of the POS is assembled and presses the grid network protective film 33 to fit it on the anti-disassembly switch, according to the preset connection method, the corresponding connection lines connect the contacts.

[0081] The design concept of the present invention:

[0082] First, for the POS 3 and the anti-disassembly structure 2, at least two or more of the anti-disassembly safety switches 1 are provided under the grid network protective film 33. The anti-disassembly switch has a three-layer structure. The outermost layer is a circle, the second layer is four contacts arranged at a certain interval, and the innermost layer is a circular contact.

[0083] Second, several anti-disassembly contacts shaped as Figure 1 are distributed under the grid network protective film. The signal connection method on the contacts: as Figure 2 shown, the first contact 11 in the center is a set of closed circuits, and two contacts on the diagonal of each anti-disassembly switch 1 form a pair to form a closed circuit.

[0084] Third, each contact is connected in series and short-circuited through the corresponding connection lines or contacts on the grid network protective film.

[0085] Fourth, it is preset that the signals on the second contact 12 and the third contact 13 on the anti-disassembly switch 1 and the signals on the fourth contact 14 and the fifth contact 15 are anti-phase signals. When the closed circuits of the two pairs of signals are short-circuited, the high-level path will be pulled low, thereby triggering the safety protection mechanism.

[0086] 5. The outermost circular contacts are grounded or connected to a high level, which also plays a certain protective role against the potting attack on the internal contacts.

[0087] With the above settings, when an attacker attempts to lift the protective film and short-circuit a pair of contact signals of the anti-tamper switch, it will cause the disconnection of another pair of contact signals, thus triggering the safety protection mechanism. The center points of different anti-tamper switches 1 are designed as a pair of signals. Since each is protected by the four surrounding points, this design is safer.

[0088] Such a mechanism is much safer than simply designing an anti-tamper switch under the original mesh network protective film. Because the existing simple anti-tamper switch generally has only two internal and external contacts, and the contacts are short-circuited by conductive particles or dome contacts, and the contacts are short-circuited by injecting conductive glue from the side, which is a safety failure. While the anti-tamper switch of the present invention can effectively prevent the potting attack. At the same time, due to the cooperation of multiple anti-tamper contacts of the same kind and cross protection, it is not easy to short-circuit the corresponding contacts.

[0089] Although the specific implementation manners of the present invention have been described above, those skilled in the art should understand that the specific embodiments we described are illustrative rather than used to limit the scope of the present invention. Equivalent modifications and variations made by those skilled in the art in accordance with the spirit of the present invention should be covered by the scope protected by the claims of the present invention.

Claims

1. An anti-tamper switch, characterized in that: it includes a first contact, a second contact, a third contact, a fourth contact and a fifth contact; the second contact and the third contact are connected in series; the fourth contact and the fifth contact are connected in series; the second contact, the third contact, the fourth contact and the fifth contact are distributed in a circle outside the first contact; the first contact is located at the central position; the second contact and the third contact are arranged diagonally; the fourth contact and the fifth contact are arranged diagonally; the signals of the second contact and the third contact are anti-phase signals with the signals of the fourth contact and the fifth contact.

2. An anti-tamper switch as claimed in claim 1, characterized in that: it further includes a circular contact, and the circular contact is located outside the second contact, the third contact, the fourth contact and the fifth contact.

3. An anti-tamper structure, characterized in that: it includes at least two anti-tamper switches as claimed in claim 1; each of the anti-tamper switches includes a first contact; the first contacts of the respective anti-tamper switches are connected in series.

4. An anti-tamper structure as claimed in claim 3, characterized in that: each of the anti-tamper switches further includes a circular contact, and the circular contact is located outside the second contact, the third contact, the fourth contact and the fifth contact.

5. An anti-tamper structure as claimed in claim 3, characterized in that: the signals of the second contact and the third contact are anti-phase signals with the signals of the fourth contact and the fifth contact; or the signals of the second contact and the third contact are dynamically changing signals; or the signals of the fourth contact and the fifth contact are dynamically changing signals; or the signal of the first contact is a dynamically changing signal.

6. A POS, including a housing, a grid network protective film and a security processor, characterized in that: it further includes the anti-tamper structure as claimed in claim 4, connection lines are provided on the grid network protective film, and the first contacts of the respective anti-tamper switches of the anti-tamper structure are connected in series through the connection lines of the grid network protective film and then connected to the security processor to form a closed loop; the second contact and the third contact of each anti-tamper switch are connected to the security processor through the connection lines of the grid network protective film to form a closed loop; the fourth contact and the fifth contact of each anti-tamper switch are connected to the security processor through the connection lines of the grid network protective film to form a closed loop; the circular contact of each anti-tamper switch is connected to the ground terminal or the high-level terminal of the security processor through the connection lines of the grid network protective film.

7. A POS as claimed in claim 6, characterized in that: the signals of the second contact and the third contact are anti-phase signals with the signals of the fourth contact and the fifth contact; or the signals of the second contact and the third contact are dynamically changing signals; or the signals of the fourth contact and the fifth contact are dynamically changing signals; or the signal of the first contact is a dynamically changing signal.

Images