Safety signal protection device and POS machine

Abstract

The utility model relates to a safety signal protection device and a POS machine. The safety signal protection device (10) comprises an application module (12), a Mesh wire (13) formed by winding at least one signal wire (17) is arranged in the application module (12), and safety-related pins (15) of the application module (12) are arranged on the bottom face of the application module (12) and located in the projection area of the Mesh wire (13). The application module has stronger protection capability, not only provides physical protection for safety-related pins, safety-related devices, chips, signal lines and the like below the application module, but also provides safety mechanism protection, that is, when the Mesh routing is broken due to attack, a safety protection program is triggered, sensitive information is automatically erased, and the safety of the Mesh routing is improved. And the security of the user data is ensured.

Description

Technical Field

[0001] The present application relates to the field of POS machines, and in particular to a safety signal protection device and a POS machine. Background Art

[0002] POS (point of sale) is a multifunctional terminal. When it is installed in the authorized merchants and acceptance outlets of credit cards and connected to the computer network, it can realize the automatic transfer of electronic funds. It supports consumption, pre-authorization, balance inquiry and transfer, and is safe, fast and reliable to use. However, during the use of POS, the user's financial data and other information may be involved. Once this information is stolen, it may cause serious consequences and cause serious losses to the user. Therefore, the security performance of POS has always been highly valued.

[0003] At present, POS machines on the market usually use the following methods to protect security signals: 1. Protect the security signals below the projection area by setting Mesh routing inside the motherboard. 2. Protect the security signals below the projection area of ​​the patch board through a patch board with Mesh routing. 3. Protect the security signals below the projection area through an AP module. However, all these methods have disadvantages. In the first method, since the security signal needs to be covered by two layers of Mesh, two layers of routing on the motherboard need to be wasted, resulting in poor stacking of the motherboard, poor signal integrity, and performance. In the second method, the patch board is welded on the motherboard, wasting the layout space under the patch board, resulting in a smaller device placement area. Moreover, signals outside the patch board require other protection. In addition, the patch board increases the cost, and the welding of the patch board increases the product failure rate. In the third method, the AP module can only provide pure physical protection, with weak security protection capabilities, and the security-related pins around the AP module also require additional protection, which will increase costs and increase the thickness of the machine. Utility Model Content

[0004] One of the objectives of this application is to solve at least one of the above technical problems.

[0005] To this end, the present application relates to a security signal protection device for a POS machine, the security signal protection device comprising an application module, the application module being provided with a Mesh routing formed by winding at least one signal routing, the security-related pins of the application module being arranged on the bottom surface of the application module and being located within the projection area of ​​the Mesh routing. Since the Mesh routing is arranged internally and the security-related pins are arranged on the bottom surface of the application module and within the projection area of ​​the Mesh routing, the application module has a stronger protection capability, not only providing physical protection for the security-related pins and security-related devices, chips, signal lines, etc. below it, but also providing security mechanism protection, that is, when the Mesh routing is attacked and disconnected, the security protection program is triggered, and sensitive information is automatically erased to ensure the security of user data.

[0006] According to some embodiments of the present application, the safety signal protection device further includes at least one first pad and at least one second pad disposed on the bottom surface of the application module, one end of each signal trace in the Mesh trace is electrically connected to a first pad, and the other end is electrically connected to a second pad, and when the safety signal protection device is applied to a POS machine, the application module is connected to the mainboard of the POS machine through the at least one first pad and the at least one second pad. In this solution, not only can the application module be firmly welded to the mainboard through the pads, but the Mesh traces in the application module can also be connected to the safety chip on the mainboard through the pads, forming a safety circuit, which is simple and reliable.

[0007] The present application also relates to a POS machine, including a mainboard and a security chip arranged on the mainboard, the POS machine also including the above-mentioned security signal protection device, the security signal protection device covers the security signal to be protected on the mainboard. The present application forms a security signal protection device by modifying the necessary components (i.e., application modules) in the POS machine, which not only ensures the protection effect, but also eliminates the need to set Mesh routing in the mainboard, thereby reducing the number of layers of the mainboard, optimizing the internal stacking of the mainboard, improving the stability of the mainboard, and eliminating the need to add additional protection devices (such as patch boards), thereby saving costs, increasing the layout area of ​​the mainboard, reducing the failure rate of the mainboard, and reducing the thickness of the product.

[0008] According to some embodiments of the present application, the mainboard includes a third pad and a fourth pad arranged corresponding to the first pad and the second pad on the bottom surface of the application module, the first pad is welded to the third pad, the second pad is welded to the fourth pad, and the third pad and the fourth pad are both electrically connected to the security chip through a signal trace. In this way, the signal trace coming out of a pin of the security chip is electrically connected to the signal trace in the application module through the pad, and then connected to another pin of the security chip, thereby forming a loop. Once the Mesh trace breaks and the loop is disconnected, the security chip will trigger an attack alarm and delete important data stored in the chip to prevent theft.

[0009] According to some embodiments of the present application, the mainboard includes a third pad and a fourth pad corresponding to the first pad and the second pad on the bottom surface of the application module, the first pad is welded to the third pad, the second pad is welded to the fourth pad, and the third pad is electrically connected to the security chip through a signal line, and the fourth pad is electrically connected to a high level or a low level through a signal line. In this way, once the Mesh line is disconnected, the pull-up resistor or pull-down resistor inside the security chip will pull the Mesh level to the opposite level, so that the security chip reads the opposite level, thereby triggering an attack alarm and deleting important data stored inside the chip to prevent theft.

[0010] In this application, the term "application module" or "AP module" refers to a circuit board composed of an application processor, memory and other devices, which is usually used to process applications not related to payment and is an indispensable component in a POS machine.

[0011] In the present application, the term "Mesh routing" refers to a routing having a mesh shape, a disc coil shape, etc. formed by winding a Tamper signal line alone, or two or more Tamper signal lines are wound around each other.

[0012] It should be understood that the above general description and the following detailed description are only exemplary and explanatory and cannot limit the present invention. Other features, purposes and advantages of the present invention will become apparent from the specification, drawings and claims. BRIEF DESCRIPTION OF THE DRAWINGS

[0013] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the following briefly introduces the drawings required for the description of the embodiments. It is easy for those skilled in the art to understand that these drawings are only for illustrative purposes and are not intended to limit the scope of protection of the present utility model. For the purpose of illustration, these drawings may not be drawn completely to scale.

[0014] Figure 1It is a schematic plan view of a safety signal protection device according to some embodiments of the present application.

[0015] Figure 2 It is a schematic diagram of the working principle of the safety signal protection device according to some embodiments of the present application.

[0016] Figure 3 It is a schematic diagram of the working principle of the safety signal protection device according to other embodiments of the present application.

[0017] Reference numerals list

[0018] 10 Safety signal protection device; 12 Application module / AP module; 13 Mesh routing; 14 Pins not related to safety; 15 First pad; 16 Pins related to safety; 17 Signal routing; 18 Second pad; 20 Safety chip; 35 Third pad; 38 Fourth pad; 40 High level; 50 Low level DETAILED DESCRIPTION

[0019] Exemplary embodiments will be described in detail herein, examples of which are shown in the accompanying drawings. When the following description refers to the drawings, unless otherwise indicated, the same numbers in different drawings represent the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments according to the present application. Instead, they are merely examples of devices consistent with some aspects of the present application as detailed in the appended claims.

[0020] Figure 1 The schematic diagram shows a security signal protection device 10 according to some embodiments of the present application. The security signal protection device is usually used in financial payment equipment, such as POS machines. In addition to being able to perform its own functions, it can also effectively protect the security-related devices, chips, signal lines, etc. (collectively referred to as security signals in this article) covered by it from attacks. Figure 1 As shown, the safety signal protection device 10 includes an application module 12, and a mesh wiring 13 formed by winding two signal wirings 17 is arranged in the application module 12. In other embodiments not shown, the signal wirings 17 are more or less than two. It should be understood that the signal wirings 17 can be wound into a mesh wiring having a mesh shape, a disc coil shape, etc., and those skilled in the art can design it according to needs. Figure 1In the illustrated embodiment, the application module 12 includes pins 14 not related to security and pins 15 related to security located around it, wherein the pins 15 related to security are all arranged on the bottom surface of the application module 12 and are located within the projection area of ​​the Mesh wiring 13. In this way, the pins 15 related to security are not only physically protected by the application module 12, so that attackers cannot detect security signals from all around the application module 12, but also do not need to perform additional protection on the pins 15 related to security as in the prior art, thereby reducing costs and the thickness of the POS machine. In addition, the pins 15 are also protected by the security mechanism of the Mesh wiring 13, that is, when an attacker attempts to remove the application module 10 or attempts to damage the application module 10 by grinding and cutting, the Mesh wiring 13 will be disconnected, thereby triggering a security protection program, automatically erasing sensitive information, and ensuring the security of user data.

[0021] exist Figure 1 In the illustrated embodiment, the safety signal protection device 10 further includes two first pads 15 and two second pads 18 disposed on the bottom surface of the application module 12 (i.e., the side facing the main board when installed on the POS machine main board), and one end of each signal line 17 in the Mesh line 13 is electrically connected to a first pad 15, and the other end is electrically connected to a second pad 18. It should be understood that the number of the first pads and the second pads corresponds to the number of the signal lines 17. For example, when there are three signal lines 17, three first pads and three second pads are disposed on the bottom surface of the application module 12, which are respectively connected to the two ends of the three signal lines. When the safety signal protection device 10 is applied to the POS machine, the application module 12 is connected (e.g., by welding) to the main board of the POS machine through the first pad 15 and the second pad 18 and covers the safety signal on the main board that needs to be protected. Preferably, the Mesh line 13 in the application module 12 covers the safety signal on the main board that needs to be protected, thereby providing the safety mechanism protection as described above for these safety signals.

[0022] The present application also relates to a POS machine, which includes a mainboard (not shown), a security chip 20 disposed on the mainboard, and the security signal protection device 10 as described above. According to some embodiments of the present application, Figure 2As shown, the main board of the POS machine includes a third pad 35 and a fourth pad 38 corresponding to the first pad 15 and the second pad 18 on the bottom surface of the application module 12, the first pad 15 is welded to the third pad 35, the second pad 18 is welded to the fourth pad 38, and the third pad 35 and the fourth pad 38 are both electrically connected to the security chip 20 through the signal line. In this way, the signal line comes out from a Mesh pin (i.e., output pin) of the security chip 20, is electrically connected to the signal line 17 in the application module 12 through the pad, and then connected to another Mesh pin (i.e., input pin) of the security chip 20, thereby forming a loop. The output pin sends high and low level signals randomly by default, and the input pin receives electrical signals in real time. If the security chip 20 detects that the output signal is consistent with the input signal, it proves that the Mesh line connection is intact. On the contrary, if the Mesh line is disconnected (for example, when attacked), the input pin will not receive the signal, which will trigger an attack alarm and delete the important data stored in the chip to prevent theft.

[0023] According to other embodiments of the present application, Figure 3 As shown, the main board also includes a third pad 35 and a fourth pad 38 corresponding to the first pad 15 and the second pad 18 on the bottom surface of the application module 12. The first pad 15 is welded to the third pad 35, and the second pad 18 is welded to the fourth pad 38. However, the difference is that the third pad 35 is electrically connected to the security chip 20 through a signal line, and the fourth pad 38 is electrically connected to the high level 40 or the low level 50 through a signal line. When the Mesh line is disconnected (for example, when attacked), the pull-up resistor or pull-down resistor inside the security chip 20 will pull the Mesh level to the opposite level, so that the security chip 20 reads the opposite level, thereby triggering an attack alarm and deleting important data stored in the chip to prevent theft.

[0024] -Unless otherwise defined, the technical and scientific terms used herein have the same meaning as those generally understood by those skilled in the art of the present application. The terms used in this application are for the purpose of describing specific embodiments only and are not intended to limit the present invention. The singular forms of "a", "an" and "the" used in this application are also intended to include plural forms, unless the context clearly indicates other meanings. It should also be understood that the term "and / or" that may be used herein refers to and includes any or all possible combinations of one or more associated listed items.

[0025] Terms such as "upper", "lower", "left", "right", "front", "back", "thickness", "radial", "axial" and the like that may be used herein to indicate relative positions in space are for the purpose of convenience of description to describe the relationship of one feature relative to another feature as shown in the accompanying drawings, and are not limited to one position or one spatial orientation. It is understood that, depending on the placement of the product, the terms of relative positions in space may be intended to include different orientations in addition to the orientation shown in the drawings, and should not be understood as limiting. In addition, the descriptor "horizontal" that may be used herein is not completely equivalent to being along the direction perpendicular to the gravity, and a certain angle of inclination is allowed. The words "include" or "comprising" and the like used herein mean that the elements or objects appearing before "include" or "comprising" include the elements or objects listed after "include" or "comprising" and their equivalents, and do not exclude other elements or objects.

[0026] It should be understood that the terms “first”, “second” and similar terms used in the present application specification do not indicate any order, quantity or importance, but are only used to distinguish different components.

[0027] The above are only preferred implementation modes of the present invention and are not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention shall be included in the scope of protection of this application.

Claims

1. A safety signal protection device (10), used in a POS machine, characterized in that: The safety signal protection device (10) comprises an application module (12), wherein a mesh wiring (13) formed by winding at least one signal wiring (17) is arranged in the application module (12), and safety-related pins (15) of the application module (12) are all arranged on the bottom surface of the application module (12) and are located within the projection area of ​​the mesh wiring (13).

2. The safety signal protection device (10) according to claim 1, characterized in that: The safety signal protection device (10) further comprises at least one first solder pad (15) and at least one second solder pad (18) arranged on the bottom surface of the application module (12); one end of each signal trace (17) in the Mesh trace (13) is electrically connected to a first solder pad (15), and the other end is electrically connected to a second solder pad (18); and when the safety signal protection device (10) is applied to a POS machine, the application module (12) is connected to a mainboard of the POS machine via the at least one first solder pad (15) and the at least one second solder pad (18).

3. A POS machine, comprising a main board and a security chip (20) arranged on the main board, characterized in that: The POS machine further comprises a safety signal protection device (10) as claimed in any one of the above claims, wherein the safety signal protection device (10) covers the safety signal to be protected on the mainboard.

4. The POS machine according to claim 3, characterized in that: The mainboard comprises a third soldering pad (35) and a fourth soldering pad (38) arranged corresponding to the first soldering pad (15) and the second soldering pad (18) on the bottom surface of the application module (12), the first soldering pad (15) is soldered to the third soldering pad (35), the second soldering pad (18) is soldered to the fourth soldering pad (38), and the third soldering pad (35) and the fourth soldering pad (38) are both electrically connected to the security chip (20) via a signal trace.

5. The POS machine according to claim 3, characterized in that: The mainboard comprises a third pad (35) and a fourth pad (38) arranged corresponding to the first pad (15) and the second pad (18) on the bottom surface of the application module (12), the first pad (15) being welded to the third pad (35), the second pad (18) being welded to the fourth pad (38), and the third pad (35) being electrically connected to the security chip (20) via a signal trace, and the fourth pad (38) being electrically connected to a high level (40) or a low level (50) via a signal trace.

Images