INPUT DEVICE, ATM AND PROCEDURES

Description

[0001] The invention relates to an input device, an ATM and a method.

[0002] In general, self-service terminals can be used to provide a user with various goods in an automated manner, for example, when the user requests them at the terminal. For instance, a self-service terminal might include an ATM where the user can independently deposit or withdraw banknotes and conduct other banking transactions.

[0003] The goods (e.g., banknotes) can be stored in a hopper of the self-service terminal. Due to its contents, this hopper can be of particular interest to criminals seeking to steal its contents. The risk of the device being targeted for unauthorized access increases with the value of its contents. However, because such a self-service terminal is intended to be accessible to the user (i.e., exposed), it is difficult to protect it against external access.

[0004] Traditionally, such self-service terminals are secured with special security measures. They are typically connected to a variety of sensors that detect vibrations, temperature, or other environmental conditions. This increases costs and effort. Alternatively or additionally, a video surveillance system is used to investigate unauthorized access. However, this is incapable of preventing unauthorized access altogether.

[0005] For a similar reason, the input device of a self-service terminal, where the user enters their request, can be the target of manipulation, for example, to intercept data entered by the user. This data can then be used to gain access to the user's account. Traditionally, such an input device is additionally equipped with hardware-based security to detect and / or prevent manipulation. However, this in turn increases costs and effort.

[0006] US Patent 8 556 168 B1 describes a banking system machine in which an oscillator is used to detect fraudulent manipulation of the card reader.

[0007] US Patent 2013 / 127755 A1 describes a device that enables the generation of a localized vibration on a surface. Furthermore, the location of an input is to be determined by comparing a measurement signal stepwise with two reference signals 20, which vary in their level of detail.

[0008] US patent 2015 / 006380 A1 discloses an ATM in which sensors used for integrity monitoring can be embedded in a display module of a touchscreen.

[0009] US 2008 / 150902 A1 discloses a control function in a touchscreen by converting a mechanical action on a control area into an electrical output quantity by means of an electromechanical converter structure.

[0010] According to various embodiments, an input device, an ATM and a method are provided which, with low cost and low effort, make it possible to capture user input and simultaneously monitor the exposed object or parts thereof.

[0011] The sensors of the input device are used to simultaneously monitor (also known as integrity monitoring) the self-service terminal. For example, in sensory mode, the sensors can detect input at the input device, and in actuator mode, they can trigger a mechanical impulse at the self-service terminal, the response of which allows conclusions to be drawn about the state of the self-service terminal or the input device. Similarly, the input device can be used to monitor the state of another object connected to it.

[0012] According to various embodiments, an input device may comprise: a carrier which has an operating area and which has a coupling area for coupling an object to be monitored to the input device; an electromechanical transducer structure which is coupled to both the operating area and the coupling area; a control device which (e.g. in a first operating mode) implements an operating function of the operating area by means of the electromechanical transducer structure and (e.g. in a second operating mode) further implements a mechanical integrity monitoring of the object to be monitored and / or the carrier.

[0013] According to various embodiments, the control device (e.g., a measuring circuit of the control device) can be configured to provide data by means of the electromechanical transducer structure; wherein the provided data (e.g., in the first operating mode) is used to implement the operating function and (e.g., in the second operating mode) to implement integrity monitoring.

[0014] According to various embodiments, the control device (e.g., an excitation circuit of the control device) can be configured to mechanically excite the object to be monitored and / or the carrier (e.g., in the second operating mode); wherein the integrity monitoring is based on a response to the mechanical excitation; wherein the control device (e.g., the measuring circuit of the control device) is configured to detect the response by means of the transducer structure and / or (e.g., the excitation circuit of the control device) to mechanically excite the carrier by means of the transducer structure.

[0015] According to various embodiments, the control device (e.g., an evaluation circuit of the control device) can be configured to form a monitoring variable, which represents a result of integrity monitoring, based on data provided by means of the electromechanical converter structure according to a formula (e.g., according to a summation).

[0016] According to various embodiments, the data can represent a multitude of measurements (e.g., measured values) from a predefined period, e.g., a multitude of responses.

[0017] According to various embodiments, the control device can be configured to detect damage and / or manipulation of the object to be monitored and / or the carrier if a result of the integrity monitoring meets a predefined criterion.

[0018] According to various embodiments, the control device (e.g., an alarm circuit of the control device) can be configured to issue an alarm signal when damage and / or manipulation of the object to be monitored and / or the carrier is detected by means of the integrity monitoring.

[0019] According to various embodiments, the control device can have a data storage device which is configured to store a profile which has at least one variable parameter; wherein integrity monitoring is carried out according to the profile.

[0020] According to various embodiments, the control device (e.g., the evaluation circuit of the control device) can be configured (e.g., in the first operating mode) to detect an input at the operating area by means of the electromechanical converter structure and to provide data that represent the input.

[0021] According to various embodiments, the converter structure can be configured to convert an external influence on the operating area into an electrical output quantity (e.g., into an electrical signal in the time domain); wherein the control device is configured to determine a spatial and / or temporal characteristic (e.g., the time and / or an input area) of the external influence based on (e.g., a temporal characteristic) of the electrical output quantity.

[0022] According to various embodiments, the control device can be configured to detect the input, an effect on the operating area (e.g., a touch or a mechanical force) and / or its spatial characteristics (e.g., its position) and / or its temporal characteristics (e.g., its speed) in the operating area by means of the transducer structure.

[0023] According to various embodiments, the input device may further comprise: a card reader; and a processing circuit; wherein the processing circuit is configured to provide encrypted processing of the data representing the input and to correlate it with data provided by the card reader.

[0024] According to various embodiments, the electromechanical transducer structure can comprise one or more electromechanical transducers. The multiple electromechanical transducers can, for example, provide a sensor array.

[0025] According to various embodiments, the electromechanical transducer structure can have an electromechanically active material; wherein the electromechanically active material is integrated into the support (e.g. monolithically) and / or coupled to it (e.g. glued or printed on).

[0026] According to various embodiments, the electromechanically active material can be piezoelectric.

[0027] According to various embodiments, the carrier can comprise at least one of the following: glass, plexiglass, silicon dioxide, metal and / or plastic, for example polymethyl methacrylate.

[0028] According to various embodiments, an ATM can comprise the following: a storage container for holding (in other words, receiving or storing) a means of payment (for example, banknotes, coins, checks, or the like); a transfer unit for transferring a means of payment into or out of the storage container; and an input device according to various embodiments, wherein the storage container is coupled to the coupling area of ​​the input device. Optionally, the input device can be configured to communicate with the transfer unit, e.g., to control it.

[0029] According to various embodiments, an ATM may comprise the following: a storage container for holding (in other words, receiving or storing) means of payment (for example, banknotes, coins, checks, or the like); a transfer unit for transferring means of payment into or out of the storage container; a user interface; an electromechanical converter structure coupled to both the storage container and the user interface; a control device which (e.g., in a first operating mode) implements an operating function of the user interface by means of the electromechanical converter structure and (e.g., in a second operating mode) implements a mechanical integrity monitoring of the storage container and / or the user interface.

[0030] The user interface can include an operating area and optionally a display area.

[0031] According to various embodiments, the input device may further comprise: a carrier into which at least a part of the user interface is integrated; wherein the carrier covers one side of the object to be monitored and / or is coupled to it.

[0032] According to various embodiments, a method for operating an electromechanical transducer structure, which is coupled to both an operating area and an object to be monitored, can comprise the following: Controlling the electromechanical transducer structure (e.g., in a first operating mode), wherein an operating function of the operating area is implemented by means of the electromechanical transducer structure; controlling the electromechanical transducer structure (e.g., in a second operating mode), wherein integrity monitoring of an object to be monitored is implemented by means of the electromechanical transducer structure. Optionally, switching between the first and second operating modes can be performed.

[0033] According to various embodiments, a non-volatile data storage device can contain code segments which, when executed by a processor, perform a procedure according to various embodiments.

[0034] According to various embodiments, an electromechanical transducer structure can be used to implement an operating function and the same electromechanical transducer structure can be used to implement mechanical integrity monitoring.

[0035] According to various embodiments, a method for operating an electromechanical transducer structure, which is configured to convert an external action on a control area into an electrical output (e.g., an electrical signal in the time domain), can include the following: sensing the electrical output; determining features of the electrical output (e.g., in the time domain); comparing the features with features of a plurality of time-domain reference signals (e.g., with data sets, each of which assigns to the features of a time-domain reference signal an input area of ​​the control area, e.g., a spatial correspondence of the control area); and determining an input area on which the action occurred (e.g., determining input event data representing a position and / or time of the action on the control area) based on the comparison.

[0036] According to various embodiments, a method for operating an electromechanical transducer structure, which is configured to convert an external influence on an operating area into an electrical output quantity (e.g., an electrical signal in the time domain), can comprise the following: outputting information representing a reference input area (e.g., its position) at which the operating area is to be influenced (also referred to as reference input); acquiring the electrical output quantity in the time domain (e.g., its temporal profile); storing the electrical output quantity as a time-domain reference signal, wherein each time-domain reference signal represents a reference input into a respective assigned input area of ​​one or more input areas.

[0037] Optionally, the procedure can do the following: Determine characteristics of the time domain reference signal.

[0038] Optionally, the procedure can do the following: Save a data set which assigns the input range (e.g., a spatial correspondence of the operating range according to its position) to the characteristics of the time domain reference signal or to the signal itself.

[0039] According to various embodiments, an input device can comprise: an operating area; an electromechanical converter structure configured to convert an external influence on the operating area into an electrical output quantity; a control device configured to carry out a method according to various embodiments.

[0040] According to various embodiments, the electromechanically active material can be transparent.

[0041] According to various embodiments, the converter structure (e.g. in the first operating mode) can provide the operating area with a sensor field, e.g. a touch-sensitive sensor field (also called a touchpad).

[0042] According to various embodiments, the ATM may further include: a housing which has a transfer opening for dispensing and / or receiving a means of payment (e.g. cash, such as banknotes and / or coins, or other paper-based valuables).

[0043] According to various embodiments, the ATM may also have: a storage container in the housing for holding payment instruments.

[0044] According to various embodiments, the ATM may also include: a transfer unit for transferring payment instruments between the transfer opening and the storage container.

[0045] According to various embodiments, an input device can comprise: an operating area with one or more input areas; an electromechanical transducer structure configured to convert an external influence on the operating area into an electrical signal in the time domain (e.g., over time) (or vice versa); a detection device configured to determine an input area into which an input has been made by comparing the electrical signal with a plurality of time-domain reference signals, wherein each time-domain reference signal represents a reference input into a respective associated input area of ​​the one or more input areas.

[0046] According to various embodiments, a method for operating an input device may be provided, wherein the input device comprises: an operating area with one or more input areas; an electromechanical transducer structure configured to convert an external action on the operating area into an electrical signal in the time domain (or vice versa); wherein the method comprises: acquiring the electrical signal; comparing the electrical signal with a plurality of time-domain reference signals; determining an input area into which an input has been made by comparison, wherein each time-domain reference signal represents a reference input into a respective associated input area of ​​the one or more input areas.

[0047] The investigative device may include the control device and / or at least parts thereof, such as at least the measuring circuit and the evaluation circuit.

[0048] Exemplary embodiments of the invention are shown in the figures and are explained in more detail below.

[0049] They show Figure 1A, Figure 1B and Figure 2A each show an input device according to different embodiments in a schematic side view or cross-sectional view; Figure 2 shows an input device according to different embodiments in a schematic top view or cross-sectional view; Figure 3A, Figure 3B, Figure 3C and Figure 4 each show an input device according to different embodiments in a schematic circuit diagram; Figure 5A and Figure 5 show an input device according to different embodiments in a schematic side view or cross-sectional view; Figure 6 shows an ATM according to different embodiments in a schematic side view or cross-sectional view; Figure 7A shows an ATM according to different embodiments in a schematic top view or cross-sectional view; Figure 7B shows an ATM according to different embodiments in a schematic side view or cross-sectional view;Figure 8A and Figure 8B each show an input device according to different embodiments in a schematic top or cross-sectional view; Figure 8C shows a method according to different embodiments in a schematic flowchart; Figure 9 shows an ATM according to different embodiments in a schematic perspective view; Figure 10 shows the ATM made of… Figur 9 in different views. Figure 11 shows an input device according to different embodiments in a schematic side view or cross-sectional view; and Figure 12 shows a method according to different embodiments in a schematic flowchart.

[0050] The following detailed description refers to the accompanying drawings, which form part thereof and illustrate specific embodiments in which the invention can be implemented. In this context, directional terminology such as "top," "bottom," "front," "back," "anterior," "rear," etc., is used with reference to the orientation of the described figure(s). Since components of embodiments can be positioned in a number of different orientations, the directional terminology serves only for illustration and is in no way limiting. It is understood that other embodiments may be used and structural or logical modifications may be made without deviating from the scope of protection of the present invention.It is understood that the features of the various exemplary embodiments described herein can be combined with one another, unless specifically stated otherwise. The following detailed description is therefore not to be interpreted in a limiting sense, and the scope of protection of the present invention is defined by the appended claims.

[0051] Within the scope of this description, the terms "connected," "connected," and "coupled" are used to describe both direct and indirect connections (e.g., resistive and / or electrically conductive, e.g., an electrically conductive connection, e.g., a signal-transmitting connection), direct or indirect connections, and direct or indirect coupling. In the figures, identical or similar elements are designated with identical reference numerals where appropriate.

[0052] Depending on the specific embodiment, the term "coupled" or "coupling" can be understood as a connection and / or interaction (e.g., mechanical, hydrostatic, thermal, and / or electrical), whether direct or indirect. Several elements can be coupled together along an interaction chain. Depending on the specific embodiment, "coupled" can also be understood as a mechanical (e.g., physical) coupling, for example, by means of direct physical contact or by means of a coupling element in between. A coupling can be designed to transmit a mechanical interaction (e.g., force, torque, etc.).

[0053] According to various embodiments, an input device is provided. The input device can, for example, provide a user interface and / or be part of one. In addition to an operating area of ​​the input device through which user input can be made, the user interface can also include a display area (e.g., an electronic visualization system or a display surface) through which information can be provided (e.g., displayed) to the user.

[0054] The provision of information can be achieved, for example, by means of at least one (i.e., exactly one or more than one) light source (e.g., a lamp), at least one projector, at least one screen, at least one adjustable display board, at least one force feedback system, a sonification system, and / or by means of a software visualization system (e.g., controlling an electric screen or projector), which, for example, runs on a terminal.

[0055] Depending on its design, an ATM (Automated Teller Machine) can be called a cash dispenser, bank machine, or bankomat. An ATM can be understood as a technical device for self-service cash withdrawals (also called a cash withdrawal machine), for example, from a digital checking or credit card account, which is done, for instance, via a debit card system. Alternatively or additionally, the ATM can be set up for self-service cash deposits (also called a deposit machine), for example, into a digital checking or credit card account, which is done, for instance, via a debit card system. For example, the ATM can be set up for both cash withdrawals and cash transfers (more generally referred to as a transfer machine).

[0056] Alternatively or in addition to cash, the ATM can also be set up to dispense and / or accept other means of payment (transferable, uniform and countable securities), such as securities, checks, transfer slips, etc.

[0057] According to various embodiments, an ATM and / or an input device for an ATM are provided, which, for example, has a planar head unit mounted on a safe. This head unit can have a low profile (e.g., be plate-shaped). The head unit (illustratively referred to as a cover) can have a glass pane that optionally extends only over and / or is arranged within a user area (e.g., in the area of ​​operating elements). Alternatively, other materials can be used for the head unit, such as tempered acrylic glass or metal (e.g., steel or aluminum) or plastic. An electromechanical transducer structure, for example, implemented as one or more piezoelectric sensors and / or as one or more strain gauges, can be arranged and / or attached to the glass pane. For example, the piezoelectric sensors can be in the form of patches (e.g.,The piezoelectric sensors can be applied as stickers or printed. They can be connected to an evaluation and an excitation circuit. This sensor circuit arrangement can, for example, monitor the integrity of the head module and the safe. Furthermore, the sensor circuit arrangement can provide touch functionality for a screen or PIN entry.

[0058] The display of a keypad (also called a keyboard field) and function symbols (e.g. in selection fields) can optionally be done by means of a screen or by means of printed corresponding operating information (e.g. numbers, letters, symbols or the like) as well as alternatively by means of a projection method.

[0059] Integrity testing can be performed using a summation method over defined time periods, which can optionally be parameterized depending on the safe's configuration and installation location. Alternatively, active integrity testing can be performed by actuating a piezoelectric sensor, followed by data analysis.

[0060] The same piezoelectric sensors can be used by the user to operate the ATM (e.g., to record their input). Optionally, PIN evaluation and decryption can be performed, whereby the decryption of the sensor signals, derivation of stochastic features, and definition of corresponding filters can take place in the bank's backend. Hardware-based additive security for the EPP unit may not be strictly necessary, for example, at the input device. The piezoelectric sensors, for instance, detect any tampering with the input device itself.

[0061] Fig.1A Figure 1 illustrates an input device 100a according to various embodiments in a schematic side view or cross-sectional view (e.g. with a viewing direction along a surface of a support 102).

[0062] The input device 100a can comprise the carrier 102, an electromechanical transducer structure 104 and a control device 106.

[0063] The carrier 102 can have a first area 102a (also referred to as operating area 102a) and a second area 102b (also referred to as coupling area 102b). The operating area 102a and the coupling area 102b can, for example, be arranged at a distance from each other, e.g., on opposite sides of the carrier 102 and / or each have a surface section of the carrier 102. The coupling area 102b can, for example, have a fastening structure, e.g., having positive locking elements (such as bores, tabs, or threads) and / or having a material locking element (e.g., an adhesive surface).

[0064] The control area 102a can, for example, include an input device (e.g., a keypad and / or at least one selection field). Optionally, the appearance of the input device (e.g., some or all keys of the keypad and / or selection fields) can be modified, as will be described in more detail later.

[0065] The converter structure 104 can be coupled to both the operating area 102a and the coupling area 102b, e.g., in direct physical contact with them. For example, a force acting on the operating area 102a and / or on the coupling area 102b can be transmitted to the converter structure 104.

[0066] The control device 106 can implement an operating function of the control area 102 by means of the converter structure 104 (e.g., in a first operating mode, e.g., a sensor-based operating mode). In general, an operation can refer to an action (e.g., mechanical) that is transmitted from a user to the control area 102a. For example, the mechanical action (figuratively, an actuation) can consist of a force acting on the control area 102a, a contact with the control area 102a, and / or a change in the force or contact (e.g., temporal and / or spatial).

[0067] Providing the operating function can be understood as the control device 106 detecting and / or interpreting (i.e., determining) the underlying input information when the user operates the operating area 102a. Optionally, a response to the operation may be provided, for example, by changing the appearance of the operating area 102a and / or by means of a display area (see, for example, [reference to example]). Fig.7A ).

[0068] According to various embodiments, the transducer structure 104 can have exactly one electromechanical transducer (e.g. sensor) or several electromechanical transducers.

[0069] Each transducer in transducer structure 104 can include or be formed from a measuring transducer (e.g., a force-signal transducer). A transducer can be understood as a device that converts an input quantity into an output quantity according to a fixed ratio. The input quantity can be of an electrical energy type, for example, and the output quantity can be of a mechanical energy type, or vice versa (i.e., they can differ in their energy type). For example, each transducer can be configured for bidirectional conversion, i.e., it can operate as both a sensor and an actuator.

[0070] The transducer structure 104, e.g., each electromechanical transducer of the transducer structure 104, can be configured to convert a mechanical signal S, e.g., an external influence (such as a force), into an electrical signal S or to transfer it to an electrical signal S (e.g., to modulate the electrical signal S). For example, the transducer structure 104 can be configured to generate or modify an electrical signal S in response to an operator (the electrical signal S can figuratively represent the influence). Alternatively or additionally, the transducer structure 104 (e.g., its current state) can be determined by the control device 106, e.g., by means of an electrical signal S (figuratively, a test signal) applied to the transducer structure 104 (also referred to as reading). The electrical signal S generated or modified by the transducer structure 104 (also referred to as sensor signal S) can have a signal characteristic (e.g.,exhibit an amplitude-time curve (e.g., a voltage-time curve) which represents the effect.

[0071] According to various embodiments, the control device 106 can be configured to determine a spatial and / or temporal characteristic of the effect, as will be described in more detail later, e.g., based on the signal characteristic. The control device 106 can, for example, be configured to determine and / or process the signal characteristic of each transducer of the transducer structure 104. To illustrate, touching the operating area 102a at a specific position (x, y) can generate a sensor signal S characteristic of the position (x, y), which can be detected and optionally interpreted by the control device 106.

[0072] In addition to the operating function, the control device 106 can implement mechanical integrity monitoring of the object to be monitored and / or the carrier, e.g. in a second operating mode (e.g. an actuator operating mode).

[0073] Integrity monitoring (also referred to as integrity monitoring) can be understood as the control device 106 checking whether the object being monitored and / or the carrier 102 has been damaged and / or tampered with. In other words, the control device 106 can be configured to detect damage and / or tampering with the object being monitored and / or the carrier 102. The monitoring can, for example, involve targeted observation and information gathering about the condition and / or any changes to the object being monitored and / or the carrier 102, and / or the interpretation thereof.

[0074] Unlike the operating function, integrity monitoring allows for a clear determination of whether an impact on the support structure or the monitored object has led to a permanent (e.g., irreversible) change. For example, it can be clearly identified whether the support structure has developed a crack or the monitored object has a dent. Optionally, the change can be classified as damage and / or tampering if it meets a predefined criterion, as will be described in more detail later.

[0075] The first operating mode and the second operating mode can optionally be performed sequentially and / or it is possible to switch between them.

[0076] Fig.1B An input device 100b according to various embodiments is illustrated in a schematic side view or cross-sectional view (e.g. with a viewing direction along a main surface of a support 102).

[0077] According to various embodiments, the object 108 to be monitored can be coupled to the coupling area 102b, e.g., attached to it. For example, these can be coupled to each other by means of a positive connection (e.g., screwed) or a material connection (e.g., glued).

[0078] For example, the object 108 to be monitored can be coupled to the support 102 by means of the transducer structure 104. The transducer structure 104 can then be arranged, at least partially, between the object 108 to be monitored and the support 102, and may be attached to the support.

[0079] Object 108 can be, figuratively speaking, a self-contained device or be composed of one whose integrity is to be monitored. For example, object 108 can be a storage container for holding one or more items.

[0080] Optionally, the object 108 to be monitored can have an electrical component 108a (e.g., an electrical circuit, motor, or similar) which is electrically coupled to the control device 106. For example, the control device 106 can be configured to communicate with the electrical component 108a, e.g., to control it. For example, the object to be monitored can have an electrical device or be formed from one.

[0081] Fig.2A Figure 1 illustrates an input device 200a according to various embodiments in a schematic side view or cross-sectional view (e.g. with a view along a main surface of a support 102 or of the object 102).

[0082] According to various embodiments, the control device 106 can have an excitation circuit 106a. The excitation circuit 106a can be configured to mechanically excite the object 108 to be monitored and / or the carrier 102 by means of the transducer structure 104 201a.

[0083] For excitation, the excitation circuit 106a can transmit an electrical signal S (also referred to as excitation signal S) to the converter structure 104, e.g. a sine wave signal or another suitable signal type.

[0084] For example, a mechanical vibration 201a can be transmitted to the object 108 to be monitored and / or the support 102 by means of the transducer structure 104. In this case, the transducer structure 104 can be operated as an actuator. The excitation circuit 106a can, for example, include a digital-to-analog converter and / or an amplifier.

[0085] In other words, the converter structure 104, in its actuator operating mode, can convert an electrical input quantity (e.g., an electrical signal) into a mechanical output quantity (e.g., a time-varying force, figuratively speaking, an oscillation or vibration) according to a fixed relationship. For example, the converter structure 104 can be set to vibrating operation to excite 201a.

[0086] Integrity monitoring can be based on a response 201r (also referred to as excitation response 201r, e.g., an echo oscillation) to the mechanical excitation 201a. In other words, the control device 106 can be configured, e.g., after excitation 201a, to detect the response 201r by means of the transducer structure 104, e.g., by means of a measuring circuit 106b, and / or to process it, e.g., by means of an evaluation circuit 106c, as will be described in more detail later.

[0087] Response 201r can be detected, for example, using the sensor signal S (e.g., in a sensory operating mode), as described above. Alternatively or additionally, the control device 106 can use an additional sensor (e.g., a vibration sensor, a strain gauge) to detect response 104a.

[0088] The excitation response 201r can exhibit a characteristic (also called response characteristic) that depends on the state of the object 108 being monitored and / or the carrier 102. The response characteristic can, for example, correlate with a signal characteristic of the sensor signal S.

[0089] If the monitored object 108 and / or the carrier 102 are altered, e.g., by damage and / or tampering, the response characteristics may change. Based on the change in the response characteristics (e.g., compared to one or more previous responses 201r), conclusions can be drawn about the alteration of the monitored object 108 and / or the carrier 102. For example, a significant change in the response characteristics may indicate significant damage and / or tampering of the monitored object 108 and / or the carrier 102.

[0090] For example, the object 108 to be monitored and / or the carrier 102 can be excited 201a with one or more frequencies (e.g., according to an excitation spectrum). For example, the multiple frequencies can be tuned. The acquisition of the excitation response 201r can involve capturing an amplitude of the excitation response 201r for each frequency and / or assigning a value to the amplitude so that a response spectrum can be generated.

[0091] According to various embodiments, a change in the response characteristic can be attributed to the object 108 being monitored and the carrier 102 (as the origin). For example, the object 108 being monitored and the carrier 102 can differ from each other in their resonance frequency and / or their resonance spectrum, so that it can be distinguished based on the spectral components and / or their changes, i.e., whether the carrier 102 or the object 108 is affected.

[0092] Fig.2B An input device 200b according to various embodiments is illustrated in a schematic top view or cross-sectional view (e.g. with a view towards the operating area 102a).

[0093] A user interaction with the control area 102a can, for example, consist of a single event (e.g., a key press) representing a simple input (e.g., confirmation). Alternatively or additionally, the interaction can consist of a sequence of events (which may be related to one another) representing a complex input (e.g., a multi-digit number). Each event can have spatial and / or temporal characteristics, such as a position and / or duration of the interaction. The interaction can be understood as an interaction for inputting information and / or for control purposes and may, for example, not have a destructive effect.

[0094] According to various embodiments, the control device 106 can include a measuring circuit 106b. The transducer structure 104 can be configured to generate or modify an electrical signal S (sensor signal S) in response to one or more events of the external influence E(x, y, t) on the operating area 102a. The influence E(x, y, t) can have a spatial characteristic (x, y) and / or a temporal characteristic (t) (generally also referred to as a characteristic).

[0095] Spatial characteristics, as well as calculations and / or mappings, can be based on one or more coordinates of a coordinate system (e.g., a spherical coordinate system, a cylindrical coordinate system, or a Cartesian coordinate system), whereby the coordinates can be converted between different coordinate systems (also known as coordinate transformation). For example, a coordinate (e.g., an angle, a time duration, and / or a length) can be stretched or compressed. It is therefore understood that what is described here is not limited to rectangular Cartesian coordinates, since any other suitable coordinate system can be used in an equivalent or similar manner, such as one resulting from a coordinate transformation or a similarity transformation.For the sake of clarity, the familiar and easily understandable Cartesian coordinates will be used in the following text.

[0096] The spatial characteristic (x,y) can be described by a first coordinate x, which references a position of the action E(x,y,t) on the control area 102a along a first spatial direction 101, and / or a second coordinate y, which references a position of the action E(x,y,t) on the control area 102a along a second spatial direction 103. The first direction 101 and the second direction 103 can be perpendicular to each other. The temporal characteristic (t) can be defined by a temporal coordinate (e.g., a timestamp) that represents the time and / or duration of the action E(x, y, t).

[0097] In a visual sense, a time-space resolution (x,y,t) of the action E(x,y,t) can be provided or made available, which allows one to identify where, for example, a key press takes place, e.g., based on a characteristic time behavior of the converter structure 104 (e.g., of sensor 104a or sensors 104a, 104b).

[0098] The measuring circuit 106b can be configured to acquire the sensor signal S of the transducer structure 104 and, based on the electrical sensor signal S, provide data D(x,y,t) representing the characteristic (x,y,t) of the influence E(x,y,t), e.g., position data D(x,y), which optionally includes a timestamp (t), also referred to as input event data D(x,y,t). For example, the signal characteristic of the sensor signal S can be acquired, and based on this signal characteristic, conclusions can be drawn about the spatial characteristic (x, y) and / or the temporal characteristic (t) of the influence E(x, y, t), e.g., its frequency, position, and / or duration, e.g., by comparison with reference data.

[0099] For example, the control device 106 can be configured to determine a signal characteristic (characteristic of the sensor signal S) provided by the converter structure 104, e.g., by means of signal processing. The signal processing can be carried out, for example, by means of a transformation (e.g., a Fourier transform), a filter, a pattern comparison, autocorrelation, or similar methods, and provide characteristic information such as pattern recognition, multiple features, a spectral distribution, or similar information.

[0100] The comparison can be performed, for example, by comparing the temporal signal characteristic (i.e., the time course) of the sensor signal S with reference signals (also referred to as time-domain reference signals), whose temporal characteristics and / or characteristic information are stored, for example, together with input event data D(x,y,t), or linked to them. The linking can assign the input event data D(x, y, t) to each reference signal (or its temporal signal characteristic), which represents one or more spatial coordinates (x, y) and / or a spatial area (e.g., an input area of ​​the control area 102a), for example, according to a position grid.

[0101] Optionally, the mapping of input event data D(x, y, t) (e.g., location data and an optional timestamp) can be trained. For example, the input device 200b can implement a training process in which the user is prompted to interact with a specific reference position of the operating area 102a (e.g., an input area thereof). A corresponding sensor signal S, triggered by the user interaction, is then recorded, and the characteristic information of the sensor signal S is linked to input event data D(x, y, t), which represents the reference position. This can, for example, improve the functionality and / or accuracy of the operating function without requiring knowledge of specific characteristics of the operating area 102a. The operating function can be implemented using the sensor signal S from just one transducer. Using multiple transducers can further improve the accuracy of the operating function.

[0102] For example, the measuring circuit 106b may include an analog-to-digital converter and / or a signal processing processor.

[0103] Using the input event data D(x, y, t), for example, the operating function of the control area 102a can be implemented; for example, the operating function can have the ability to determine the input information (entered information or instructions) of the user.

[0104] Optionally, the measuring circuit 106 (e.g., in the second operating mode) can be configured to acquire the excitation response 201r. Analogously to the excitation, the measuring circuit 106b can be configured to acquire the electrical sensor signal S of the transducer structure 104 and, based on the electrical sensor signal S, to provide data D(201r) (also referred to as response data) which represent the response characteristic 201r.

[0105] Optionally, the control device 106 can have an evaluation circuit 106c, which is described in more detail below, to which the data D (the response data D(201r) and / or the input event data D(x, y, t)) are supplied.

[0106] Fig.3A An input device 300a according to various embodiments is illustrated in a schematic circuit diagram.

[0107] According to various embodiments, the control device 106 can include the evaluation circuit 106c. The data D provided by the measuring circuit 106b can be transmitted to the evaluation circuit 106c. The evaluation circuit 106c can be configured to implement the operating function using the data D (e.g., in the first operating mode) and / or to implement integrity monitoring (e.g., in the second operating mode), e.g., sequentially or simultaneously.

[0108] To implement integrity monitoring, the evaluation circuit 106c can generate a monitoring variable G from the supplied response data D(201r), e.g., according to a formula. The monitoring variable G can intuitively represent a result of the integrity monitoring. For example, if the monitoring variable G has a larger value, the probability of damage and / or manipulation of the carrier 102 and / or the object 108 may be higher. For example, the response data D(201r) can be mapped to the monitoring variable G using the formula.

[0109] For example, the response data D(201r) can represent a large number of measurements from a predefined measurement period. The formula can combine the multiple measured values ​​to obtain the value of the monitored variable G, for example by summing, averaging, or similar methods.

[0110] Optionally, the evaluation circuit 106c can have a memory on which the monitored variable G, e.g. its temporal course and / or its temporal change, is stored.

[0111] The predefined period, the formation rule and / or the number of measured values ​​used to form the monitoring variable G can be defined and / or changed, for example, by means of a profile, as will be described in more detail later.

[0112] Fig.3B An input device 300b according to various embodiments is illustrated in a schematic circuit diagram.

[0113] According to various embodiments, the control device can have an alarm circuit 106d.

[0114] The alarm circuit 106d can be configured to output an alarm signal A if damage and / or tampering with the monitored object 108 and / or the carrier 102 is detected by the integrity monitoring. For example, it can detect if external access to the interior of object 108 is gained and / or if the operating area 102a is tampered with (with the aim of intercepting data).

[0115] A change to the monitored object 108 and / or the support 102 can, for example, be categorized as damage and / or tampering if the monitored parameter G meets a predefined criterion. Alternatively or additionally, other measured parameters (e.g., temperature, vibration, etc.) can be used to detect damage and / or tampering.

[0116] The criterion can represent a threshold, a range of values, and / or a frequency. For example, alarm signal A can be triggered if the monitored variable G (e.g., its value) exceeds a predefined threshold and / or leaves a predefined range of values. Alternatively or additionally, alarm signal A can be triggered if the monitored variable G (e.g., its value) exceeds a predefined threshold and / or leaves a predefined range of values ​​with a predefined frequency.

[0117] The criterion (e.g., the threshold, the range of values ​​and / or the frequency) can be defined, for example, by means of a profile, as will be described in more detail later.

[0118] The alarm signal A can be an acoustic alarm signal and / or a digital alarm signal, or it can be a combination of both. For example, a digital alarm signal A can be transmitted to a monitoring device (e.g., a security service), which, in response to the digital alarm signal A, might perform a physical inspection of the input device 300b. Alternatively or additionally, an alarm siren A can be activated, intended to deter the person responsible for the damage and / or tampering, or at least to inform them that their actions have been discovered.

[0119] Optionally, alarm signal A can trigger further actions designed to secure the input device 300b. For example, alarm signal A can trigger the locking of the storage container (e.g., its door).

[0120] Optionally, the alarm signal A can transmit information about the result of the integrity monitoring, e.g. the condition of the object 108 to be monitored and / or the carrier 102, and / or about the environment (e.g. temperature data, video data, etc.).

[0121] Fig.3C An input device 300c according to various embodiments is illustrated in a schematic circuit diagram.

[0122] According to various embodiments, the control device 106 can include a computer-readable data storage device 106e, e.g., a non-volatile data storage device 106e such as a hard drive, a flash drive, an optical data storage device, or the like. Optionally, the data storage device 106e can have multiple segments which can be interconnected via a network. For example, computer-readable code can be stored and executed in the data storage device 106e according to a distributed scheme (e.g., a decentralized scheme).

[0123] The 106e data storage device can, for example, include or be composed of a hard drive and / or at least one semiconductor memory (such as read-only memory, random access memory, and / or flash memory). The read-only memory can, for example, be a erasable programmable read-only memory (also known as EPROM). The random access memory can be non-volatile random access memory (also known as NVRAM).

[0124] A profile 106p can be stored on the data storage device 106e, which has at least one (i.e., exactly one or more than one) parameter. The at least one parameter can, for example, define the predefined period, the number of measurements, the formula (and / or parameters used therein), and / or the criterion.

[0125] According to various embodiments, the control device 106 can have a processor 106f (implemented, for example, by means of one of the circuits 106a to 106d or separately) which is configured to modify one or more parameters of the profile 106p, e.g., according to user input (e.g., in a configuration process) at the operating area 102a or according to data transmission from an external source. For example, the processor 106f can initiate a configuration process and / or the training process in which the input device 300c is ready for configuration or training, e.g., based on administrator authentication.

[0126] This may allow the parameters of the profile according to which integrity monitoring is performed to be adjusted, e.g. to a location of the input device 300c.

[0127] Optionally, data D, code segments and / or the monitoring variable G can be stored on the data storage device 106e, e.g. their temporal progression.

[0128] Fig.4 An input device 400 according to various embodiments is illustrated in a schematic circuit diagram.

[0129] The control device 106 can include: an excitation circuit 106a, a measuring circuit 106b, an evaluation circuit 106c and an optional processor 106f.

[0130] The evaluation circuit 106c can include a response evaluation module 116c and an input evaluation module 126c. The response evaluation module 116c can be configured to convert the response data D(201r), which represents the excitation response 201r, into the monitored variable G. The input evaluation module 126c can be configured to convert input event data D(x, y, t), which represents the position of an action E(x, y, t) on the control area 102a, into input information E (also referred to as input data E), which represents the information or instructions entered at the control area 102a.

[0131] The input evaluation module 126c can access correlation data (which, for example, is stored in data storage 106e) that correlates the input event data D(x, y, t) with corresponding input information E, e.g., according to a menu navigation. For example, the correlation data can define the position of a button (e.g., of an encrypted PIN keypad) or a selection field within the control area 102a and, depending on an action at that position, provide corresponding input information E. Converting the input event data D(x, y, t) into the input information E can also be described as interpreting the input. The input information E can, for example, represent a sequence of numbers entered on the keypad (e.g., numeric keypad).

[0132] The input information E can be transmitted, for example, to processor 116f. In general, the processor can communicate with any of the circuits 106a to 106c (i.e., exchange data and / or instructions). Alternatively or additionally, the input information E can be transmitted to an optional processing circuit 504, which is described in more detail below.

[0133] Fig.5A Figure 500a illustrates an input device according to various embodiments in a schematic side view or cross-sectional view.

[0134] The input device 500 may include: a card reader 502 and a cryptographic processing circuit 504.

[0135] The card reader 502 (e.g., a smart card reader) can be configured to control a smart card inserted into it, for example, to read data stored on the smart card or to provide information to it. Control can be achieved by means of a contact with the smart card, through which electrical signals are transmitted to it, and / or by means of near-field communication (NFC). For example, the card reader 502 can include a transmitter-receiver system for near-field communication (also referred to as a near-field communication transponder). The card reader 502 can, for example, provide data K (also referred to as card data K), which represents information stored on the smart card. Using the smart card, a user can, for example, authenticate themselves (e.g., in conjunction with entering a personal identification number).

[0136] The processing circuit 504 can be configured to provide encrypted (cryptographic) processing of the input data E and to correlate (e.g., compare) it with card data K provided by the card reader 502. The processing circuit 504 can provide basic functions for secure data communication, such as cryptography, authentication, and cryptographic key management.

[0137] For example, the 504 processing circuit can compare the entered digit sequence with the card data K and, if there is a match, provide a release signal F. The release signal F can, for example, indicate that the user has successfully authenticated.

[0138] Fig.5B An input device 500b according to various embodiments is illustrated in a schematic side view or cross-sectional view.

[0139] The electromechanical transducer structure 104 can have at least one electromechanical transducer 104a, 104b, e.g. exactly one electromechanical transducer 104a or several electromechanical transducers 104a, 104b.

[0140] The at least one electromechanical transducer 104a, 104b can (e.g. in the first operating mode) provide a sensor field to the operating area 102a, by means of which a spatial characteristic and / or temporal characteristic of an effect on the operating area 102a can be determined.

[0141] The at least one electromechanical transducer 104a, 104b can incorporate an electromechanically active material (also referred to as active material), e.g., a piezoelectric material. The electromechanically active material can have the property of responding to deformation by generating an electric field and / or vice versa (e.g., both). For example, a change in the electrical polarization, and thus the appearance of an electrical voltage, can occur in the active material when it is elastically deformed (e.g., direct piezoelectric effect). Conversely, the active material can deform when an electrical voltage is applied (e.g., inverse piezoelectric effect).

[0142] The active material may, for example, have a crystal structure that does not possess an inversion center.

[0143] According to various embodiments, the carrier 102, or at least the operating area 102a, can be plate-shaped and / or have or be made of a transparent material.

[0144] The transparent material, e.g., a transparent substrate, can be an oxide (such as quartz glass (SiO₂), titanium oxide (TiO₂), or sapphire (Al₂O₃)), a glass mixture (such as optical glass, aluminosilicate glass, alkali silicate glass, lead glass, phosphate glass, borate glass, crown glass, or flint glass), a transparent fluoride (such as calcium fluoride (CaF₂) or magnesium fluoride (MgF₂)), a metallic glass (such as amorphous metal or an amorphous metal alloy), or a transparent plastic (such as polycarbonate, polymethyl methacrylate, or cycloolefin (co)polymer). A transparent material can also be a highly transparent glass or an alkali-free glass.

[0145] Optionally, the transparent material (e.g. glass) of the carrier 102, or at least of the operating area 102a, can be electromechanically active, e.g. piezoelectrically.

[0146] Fig.6 Figure 600 illustrates an ATM according to various embodiments in a schematic side view or cross-sectional view.

[0147] The ATM 600 may have a storage container 602, e.g., a security container 602. The means of payment stored in the ATM 600 (e.g., the deposited or withdrawn funds) may be arranged and / or held in the storage container 602. The storage container 602 may, for example, include or be formed from a safe (also referred to as a vault).

[0148] Depending on the security level, the 602 storage container can have a body and a lockable door, which can be single- or multi-walled, e.g., up to 20 centimeters thick. The body walls can be made of steel (e.g., one or more steel plates) and, depending on the required protection, can additionally contain an insulating material, particles, plastic, concrete, or a combination thereof (e.g., filled between two steel plates of a body wall). The body walls can be constructed in a way that hinders or disables burglary tools, for example, by means of a concrete filling in which carborundum particles are embedded, or in which hardened steel tubes filled with steel balls are embedded. Optionally, the body can be made of a flame-retardant material.

[0149] According to various embodiments, the storage container 602 can have several cassettes 602k, in each of which a means of payment of a type assigned to the cassette 602k is or will be arranged, e.g. banknotes of a certain value.

[0150] Furthermore, the ATM 600 can have a transfer unit 604 for transferring payment instruments into or out of the storage container 602. The transfer unit 604 can also extend at least partially into the storage container 602.

[0151] The transfer unit 604 may, for example, include a deposit / deposit module, which is configured, for instance, to separate and present the means of payment (e.g., banknotes or other paper-based media). The transfer unit 604 may also include, for example, a transport device, which is configured to transport the means of payment within the ATM 600 (e.g., the storage container 602). Furthermore, the transfer unit 604 may include, for example, a sorting device, which is configured to sort the means of payment based on their type, e.g., into individual cassettes 602k and / or into stacks.

[0152] Furthermore, the ATM 600 can have a user interface 606, as will be described in more detail later, and an electromechanical converter structure 104, which is coupled to both the storage container 602 (e.g. its body) and the user interface 606.

[0153] Furthermore, the ATM 600 can have a control device 106 (not shown), as described above. The control device 106 can implement an operating function of the user interface 606 by means of the electromechanical converter structure 104 and implement mechanical integrity monitoring of the storage container 602 and / or the user interface 606.

[0154] The storage container 602 can optionally be arranged in a housing 612 and / or be supported on a base by means of a frame 612.

[0155] Fig.7A illustrates an ATM 700a according to various embodiments in a schematic top view or cross-sectional view (e.g. looking towards the operating area 102a).

[0156] The ATM 700a can have an input device according to various embodiments as described above, for example an input device 100a to 500b, the operating area 102a of which provides at least part of the user interface 606.

[0157] The user interface 606 can have the operating area 102a and optionally at least one display area 102c. Each or all display areas 102c can have or be formed from an electronic screen for displaying information, e.g., a liquid crystal display and / or a light-emitting diode display.

[0158] For example, a first display area 102c can be located at a distance from the operating area 102a. Alternatively or additionally, the operating area 102a can have at least one indicator lamp and / or at least one electronic screen, which can implement a second display area 102a. For example, the appearance of the operating area 102a can be adjustable by means of the second display area, so that information can be provided to the user via the appearance (e.g., a keypad) and / or the arrangement, labeling, and / or number of selection fields can be changed. For example, the appearance of the operating area 102a can be set according to a menu navigation.

[0159] The user interface 606, e.g., the first and / or second display area 102a, 102c, can be controlled by the processor 106f. For example, the user interface 606 can include a graphics driver by means of which the screen can be controlled. Alternatively or additionally, the user interface 606 can include a force feedback system by means of which a mechanical vibration can be transmitted to the operating area 102a, for example, by means of the transducer structure 104, in order to signal to the user, for example, the recognition of their input.

[0160] According to various embodiments, the input device 700a can have a carrier 102 in which at least part of the user interface 606 is integrated. The carrier 1020 can, for example, have a glass plate or a tempered plexiglass plate, on the underside of which at least one screen is mounted.

[0161] Fig.7B Figure 700b illustrates an ATM according to various embodiments in a schematic side view or cross-sectional view.

[0162] The converter structure 104 can be coupled to a bottom of the carrier 102 and a top of the storage container 602. For example, the storage container 602 can be the object to be monitored 108 (compare Fig.1B ).

[0163] Fig.8A Figure 800a illustrates an input device according to various embodiments in a schematic side view or cross-sectional view.

[0164] Each transducer 104a, 104b of the transducer structure 104 can have the active material 104p (e.g., a piezoelectric material 104p) and two electrodes 104 by means of which an electrical activity (e.g., an electrical voltage) of the active material 104p can be detected (e.g., in the sensory operating mode) and / or an electrical voltage can be applied to the active material 104p (e.g., in the actuator operating mode). The electrical voltage can be transmitted by means of the signal S (e.g., correlated to its amplitude).

[0165] Each transducer 104a, 104b of the transducer structure 104 can be or be arranged on a bottom side of the support 102.

[0166] Optionally, a multi-pixel screen 802 can be arranged on the underside of the carrier 102 or used to display information at the operating area 102a.

[0167] Fig.8B Figure 800b illustrates an input device according to various embodiments in a schematic side view or cross-sectional view.

[0168] Each transducer 104a, 104b of the transducer structure 104 can be configured as in 800a, with the difference that the active material 104p is integrated into the carrier 102, e.g., monolithically. In this case, the active material 104p can, for example, be glass (e.g., quartz glass) or be formed from it. Thus, the carrier 102 itself can be configured to implement the operating function and integrity monitoring. If the carrier 102 is damaged and / or tampered with, the functionality of the active material 104p can be disrupted, which can be detected.

[0169] Fig.8C A process 800c according to various embodiments is illustrated in a schematic flowchart.

[0170] According to various embodiments, the method 800c in 801 can include: controlling the electromechanical converter structure, wherein (e.g. in a first operating mode) an operating function of the operating area is implemented by means of the electromechanical converter structure.

[0171] According to various embodiments, the method 800c in 803 can include: controlling the electromechanical transducer structure, wherein (e.g. in a second operating mode) an integrity monitoring of an object to be monitored (e.g. the storage container 602) is implemented by means of the electromechanical transducer structure.

[0172] Fig.9 illustrates an ATM 900 according to various embodiments in a schematic perspective view and Fig.10 The ATM 900 is illustrated in detail in various embodiments in a schematic perspective top view 1000a and a perspective cross-sectional view 1000b.

[0173] According to various embodiments, a keyboard and / or function symbols can be displayed in the operating area 102a and / or each display area 102c by means of a screen (also referred to as a display) or alternatively or additionally by means of direct printing. Alternatively or additionally, a projection method can be used to display the keyboard and / or function symbols in the operating area 102a and / or each display area 102c.

[0174] According to various embodiments, the operating area 102a may have a keypad, e.g. an encrypting PIN keypad (also referred to as an EPP unit).

[0175] Integrity monitoring (also referred to as integrity testing) can be performed, for example, using a summation method over a defined period, which can optionally be parameterized depending on the safe's configuration and installation location (e.g., using a profile). For example, active integrity monitoring can be performed in an actuator operating mode (also referred to as a second operating mode) of at least one piezoelectric sensor 104, followed by evaluation.

[0176] The same piezoelectric sensor 104 can also be used in a sensory operating mode (also referred to as the first operating mode) to implement the operating function. In other words, the piezoelectric sensor 104 can be used for operation by the device user. The operating function can include: evaluation and / or decryption of an input (e.g., a personal identification number, PIN, for authentication). For example, the decryption of the sensor signals S, derivation of stochastic features, and / or definition of corresponding filters can take place in the backend of an operator of the ATM 1000 (e.g., a bank).

[0177] In other words, not all circuits of the control device 106 necessarily need to be integrated into the ATM 1000. Therefore, hardware-based additive security for the EPP unit on the machine may not be strictly necessary, thus reducing its cost.

[0178] Furthermore, manipulation of the ATM 1000 can be detected by means of at least one piezo sensor 104, e.g. if access to the safe is to be gained, the ATM 1000 is to be stolen as a whole or if data theft is to take place on the ATM 1000.

[0179] In various embodiments, an ATM architecture can be provided or implemented which uses one and the same converter structure 104 for different functions on the ATM 900. For example, the integrity monitoring of the ATM 900 as well as touch and / or EPP functionality can be implemented using common piezoelectric sensors 104a, 104b.

[0180] For example, the converter structure 104 (e.g., a sensor array) can be used for various functions such as EPP, safe monitoring, and monitoring of the head unit 102. Furthermore, it can be used to decrypt the input (e.g., the PIN).

[0181] Optionally, the input device of the ATM 900 can have a near field communication interface 1002 and / or a biometric sensor 1004 (e.g. a fingerprint scanner) which transmit data to the control device 106.

[0182] Fig.11 Figure 1 illustrates an input device 1100 according to various embodiments in a schematic side view or cross-sectional view.

[0183] The input device 1100 can have an electromechanical transducer structure 104, which has at least one electromechanical transducer 104a, 104b, 104c, 104d, e.g. four electromechanical transducers 104a, 104b, 104c, 104d, as in Fig.11 This illustrates the number of electromechanical transducers 104a, 104b, 104c, 104d, e.g., exactly one, two, three electromechanical transducers 104a, 104b, 104c, 104d, or more than four electromechanical transducers 104a, 104b, 104c, 104d. The number of electromechanical transducers 104a, 104b, 104c, 104d can be adjusted to meet specific requirements.

[0184] The control area 102a can have multiple input areas, e.g., multiple first input areas 1102a to 1102l and / or multiple second input areas 1104a to 1104b. For example, the multiple first input areas 1102a to 1102l can form a keypad 1102 or at least be part of one. Alternatively or additionally, the multiple second input areas 1104a to 1104b can form a selection field 1104 or at least be part of one. The keypad 1102 can, for example, include or be formed from an encrypted PIN keypad. Each input area of ​​the multiple first input areas 1102a to 1102l can be assigned to a key of the keypad 1102, e.g., with a number (e.g., from 1 to 9). Optionally, input areas for special characters, such as hashtag or asterisk, can be provided. Each input area 1104a to 1104b of the selection field 1104 of the control area 102a can be assigned to a selection (e.g.a payment value) which the user can choose, e.g. according to a menu navigation.

[0185] According to various embodiments, the control device 106 can be configured to detect the sensor signal S provided by each electromechanical transducer 104a, 104b, 104c, 104d of the transducer structure 104.

[0186] Furthermore, the control device 106 can be configured to compare the provided electrical sensor signal S (e.g. its temporal characteristic) with several reference signals and, based on this, to determine an input range of the several input ranges 1102a to 1102l and 1104a to 1104c in which an input has occurred.

[0187] Optionally, the sensor signal S can be compared with several reference signals, and their characteristics compared with one another. In this case, the control device 106 can be configured to determine characteristics of the electrical sensor signal S (also referred to as signal characteristics) and / or the several reference signals. Characteristic determination can be carried out, for example, by means of at least one of the following: a transformation, an autocorrelation, a filter, a convolution, and / or a moment calculation (such as expected value and / or variance).

[0188] An exemplary temporal characteristic of the sensor signal S (also referred to as the electrical signal S in the time domain t) is illustrated in Diagram 1150, which shows its amplitude A (e.g., electrical voltage or electrical current) in a time domain t (also referred to as the amplitude-time curve). The features can be determined, for example, based on such a temporal characteristic of the sensor signal S. When the input device is trained, at least one temporal characteristic of the sensor signal S can be stored as a reference signal and / or linked to a reference input (e.g., its input event data D(x,y,t)).

[0189] For example, the temporal characteristics of the sensor signal S can be transformed into a feature space, e.g., a frequency space and / or using a Fourier transform. To obtain as few features as possible, but all the more meaningful ones, relationships such as the covariance and the correlation coefficient between several features can optionally be considered. For example, the time points t of several (e.g., four) of the highest amplitude peaks 1151 of the sensor signal S can be considered as features. Alternatively or additionally, several (e.g., four) of the most frequently occurring frequencies of the sensor signal S can be considered as features.

[0190] Based on the characteristics, the relevant input area of ​​the multiple input areas 1102a to 1102l and 1104a to 1104c (e.g., determined based on the position of the impact) can be identified. According to various embodiments, the feature comparison can be omitted.

[0191] Each operable input area (e.g., each button and / or selection field) of control area 102a can be assigned input event data D(x, y, t) that represent a position of the input area. The input event data D(x, y, t) can include at least spatial coordinates (x, y) of the input area's position and / or specify a spatial region within which the input area is located.

[0192] A user's operation of control area 102a can, for example, involve a single input (e.g., a key press) representing simple input information. Alternatively or additionally, the operation can involve a sequence of inputs (which may be linked to one another) representing complex input information (e.g., a multi-digit number).

[0193] In a visual representation, the control device 106 can be set up to infer the underlying input information E from the amplitude-time characteristic of the sensor signal S of each input.

[0194] For example, a user can authenticate themselves by entering information (e.g., a personal identification number). The control device 106 can be configured to verify whether the authentication was successful and, if so, initiate the dispensing of a requested payment method and / or the receipt of a payment method to be deposited, e.g., using the transfer unit 604.

[0195] Fig.12 A method 1200 is illustrated according to various embodiments in a schematic flowchart, e.g. for operating an input device.

[0196] According to various embodiments, the method 1200 in 1201 can include: capturing the electrical signal.

[0197] This can further include method 1200 in 1203: comparing the electrical signal with a plurality of time domain reference signals.

[0198] This can also include procedure 1200 in 1205: Determining an input area into which an input has been made, by means of comparison.

[0199] For example, virtual keyboard areas can be defined or created to correspond to the input areas. The input area where the input occurs can be determined by analyzing the timing of the electrical signal. For instance, the control area might consist of a metallic plate or be part of one on which the virtual keyboard areas are arranged and / or marked.

Claims

1. Input device (100a to 500b) having: • a support (102) that has a user control area (102a) and that has a coupling area (102b) for coupling an object to be monitored to the input device (100a to 500b); • an electromechanical transducer structure (104) that is coupled both to the user control area (102a) and to the coupling area (102b); • a control apparatus (106) that uses the electromechanical transducer structure (104) to implement a user control function of the user control area (102a) in a first operating mode and further to implement mechanical integrity monitoring of the object to be monitored and / or the support (102) in a second operating mode; • wherein the first operating mode and the second operating mode are performed in succession and / or are toggled; • wherein the control apparatus (106) is configured to mechanically excite (201a) the object to be monitored and / or the support (102); and • wherein the integrity monitoring is effected on the basis of a response (201r) to the mechanical excitation (201a); • wherein the control apparatus is configured to capture the response (201r) by means of the transducer structure and / or to mechanically excite the support (102) by means of the transducer structure; • wherein the transducer structure (104) is configured to convert an external influence on the user control area (102a) into an electrical output variable (S); and • wherein the control apparatus (106) is configured to ascertain a spatial and / or temporal characteristic (x, y, t) of the external influence on the basis of the electrical output variable (S).

2. Input device (100a to 500b) according to Claim 1, • wherein the control apparatus (106) is configured to capture data by means of the electromechanical transducer structure (104), and • wherein the captured data are used to implement the user control function and to implement the integrity monitoring.

3. Input device (100a to 500b) according to one of Claims 1 to 2, wherein the control apparatus (106) is configured to detect damage to and / or manipulation of the object to be monitored and / or the support (102), if a result of the integrity monitoring satisfies a predefined criterion.

4. Input device (100a to 500b) according to one of Claims 1 to 3, • wherein the electromechanical transducer structure (104) features an electromechanically active material (104p), • wherein the electromechanically active material is integrated in the support (102) and / or coupled thereto.

5. Input device (100a to 500b) according to Claim 4, wherein the electromechanically active material (104p) is piezoelectric.

6. Input device (100a to 500b) according to one of Claims 1 to 5, wherein the support (102) features at least one from silicon oxide, metal and / or polymethylmethacrylate.

7. Automated teller machine (600, 700a, 700b) having: • a storage container (602) for holding a means of payment; • a transfer unit (604) for transferring a means of payment to the storage container (602) or from the latter; • an input device (100a to 500b) according to one of Claims 1 to 6, wherein the storage container (602) is coupled to the coupling area (102b) of the input device (100a to 500b).

8. Automated teller machine (600, 700a, 700b) having: • a storage container (602) for holding means of payment; • a transfer unit (604) for transferring means of payment to the storage container (602) or from the latter; • a user interface (606), • an electromechanical transducer structure (104) that is coupled both to the storage container (602) and to the user interface (606); • a control apparatus (106) that uses the electromechanical transducer structure (104) to implement a user control function of the user interface (606) and to implement mechanical integrity monitoring of the storage container (602) and / or the user interface (606); • wherein the control apparatus (106) is configured to mechanically excite (201a) the storage container (602) and / or the user interface (606); and • wherein the integrity monitoring is effected on the basis of a response (201r) to the mechanical excitation (201a); • wherein the control apparatus is configured to use the transducer structure to capture the response (201r); • wherein the transducer structure (104) is configured to convert an external influence on a user control area (102a) of the user interface (606) into an electrical output variable (S); and • wherein the control apparatus (106) is configured to ascertain a spatial and / or temporal characteristic (x, y, t) of the external influence on the basis of the electrical output variable (S).

9. Method (800c) for operating an electromechanical transducer structure (104) that is coupled both to a user control area (102a) and to an object to be monitored, involving: • actuating (801) the electromechanical transducer structure (104) in a first operating mode, wherein the electromechanical transducer structure (104) is used to implement a user control function of the user control area (102a); • actuating (803) the electromechanical transducer structure (104) in a second operating mode, wherein the electromechanical transducer structure (104) is used to implement integrity monitoring of an object to be monitored; • wherein the first operating mode and the second operating mode are performed in succession and / or are toggled; • capturing a response (201r) by means of the transducer structure (104), wherein the integrity monitoring is effected on the basis of the response (201r) to a mechanical excitation (201a) of the object to be monitored; converting an external influence on the user control area into an electrical output variable (S) by mean of the transducer structure (104), from which electrical output variable (S) a spatial and / or temporal characteristic (x, y, t) of the external influence can be ascertained.

10. Non-volatile data memory (106e) that has code segments that, when executed by a processor (106f), carry out the method according to Claim 9.

11. Use of an electromechanical transducer structure (104) to implement a user control function in a first operating mode and of the same electromechanical transducer structure (104) to implement mechanical integrity monitoring in a second operating mode, wherein the first operating mode and the second operating mode are performed in succession and / or are toggled, wherein a response (201r) is captured by means of the transducer structure (104); wherein the integrity monitoring is effected on the basis of the response (201r) to a mechanical excitation (201a) of an object to be monitored and / or of a support that has a user control area; wherein an external influence on the user control area is converted into an electrical output variable (S) by means of the transducer structure, from which electrical output variable (S) a spatial and / or temporal characteristic (x, y, t) of the external influence can be ascertained.