Payment terminal
The payment terminal's tamper-resistant unit with variable wiring pattern widths addresses the challenge of maintaining security and compact size by prioritizing strength in non-security-facing areas, ensuring effective tamper resistance and impact resistance.
Patent Information
- Application Number
- JP2024047216
- Authority / Receiving Office
- JP · JP
- Patent Type
- Applications
- Current Assignee / Owner
- Filing Date
- 2024-03-22
- Publication Date
- 2025-10-03
- Estimated Expiration
- 2044-03-22
AI Technical Summary
Existing payment terminals face challenges in achieving tamper resistance without compromising security or size, as wider wiring patterns increase gap sizes, making them susceptible to damage, while thinner patterns are vulnerable to external forces, and strengthening components to prevent bending complicates miniaturization.
A payment terminal design with a tamper-resistant unit (LDS) having varying wiring pattern widths based on proximity to security components, ensuring high security in facing areas and strength in non-facing areas, preventing breakage and maintaining compact size.
The design effectively prevents wiring pattern breakage and security breaches while allowing for miniaturization, enhancing tamper resistance and impact resistance.
Smart Images

Figure 2025146445000001_ABST
Abstract
Description
[Technical Field]
[0001] The present disclosure relates to payment terminals. [Background technology]
[0002] A payment terminal is a device that is installed, for example, at a store counter and is used to make payments. With the recent diversification of transactions, payment locations are expanding beyond store counters to various other locations. For example, payments for parcel deliveries are now made at the delivery destination. For this reason, portable payment terminals that can be carried around are becoming increasingly important.
[0003] Information that requires a high level of security is input into a payment terminal, and the information is recorded in electronic components installed inside. Therefore, payment terminals are required to be tamper-resistant to protect the internal electronic components. Patent Document 1 discloses an information processing device that can be applied to payment terminals and has a wiring pattern to ensure tamper resistance. This wiring pattern has a uniform thickness. [Prior art documents] [Patent documents]
[0004] [Patent Document 1] Japanese Patent Application Publication No. 2018-185588 Summary of the Invention [Problem to be solved by the invention]
[0005] In wiring patterns designed to ensure tamper resistance, gaps between patterns must generally be spaced approximately the same as the pattern width of the metal wiring portion. Therefore, if the wiring pattern width is increased, the gaps between the patterns also become larger. Therefore, even if a third party attempts to destroy the payment terminal, the damage may occur only in the gaps and not affect the wiring pattern. In this case, the wiring pattern does not break, which may prevent the detection of the third party's attack and result in a decrease in security. On the other hand, if the wiring pattern designed to ensure tamper resistance is thin, it may be vulnerable to drops, bending, impacts, etc., making the wiring pattern more susceptible to breakage, making it difficult to detect tamper attacks. Furthermore, increasing the strength of the component holding the wiring pattern itself to prevent bending makes it difficult to make the payment terminal thinner and lighter.
[0006] The present disclosure provides a payment terminal that can be miniaturized while preventing breakage of wiring patterns to ensure tamper resistance and a decrease in security. [Means for solving the problem]
[0007] One aspect of the present disclosure is a payment terminal comprising: a substrate on which a security component requiring security is mounted; and a tamper-resistant unit arranged opposite the substrate, covering the security component mounted on the substrate, and having a wiring pattern, wherein the pattern width of the wiring pattern of the tamper-resistant unit is determined based on whether or not the area is opposite the security component. [Effects of the Invention]
[0008] According to the present disclosure, it is possible to prevent breakage of wiring patterns that ensure tamper resistance and a decrease in security, and also to reduce the size of payment terminals. [Brief explanation of the drawings]
[0009] [Figure 1] FIG. 1 is a front view of a payment terminal according to an embodiment of the present disclosure. [Figure 2] Exploded perspective view of the payment terminal from the front [Figure 3] Exploded perspective view of the payment terminal from the back side [Figure 4] Front view showing an example of LDS configuration [Figure 5] A perspective view showing an example of the configuration of an LDS [Figure 6] Schematic diagram showing an example of a wiring pattern in LDS DETAILED DESCRIPTION OF THE INVENTION
[0010] Hereinafter, embodiments will be described in detail with reference to the drawings as appropriate. However, more detailed description than necessary may be omitted. For example, detailed description of well-known matters or redundant description of substantially identical configurations may be omitted. This is to avoid unnecessary redundancy in the following description and to facilitate understanding by those skilled in the art. Note that the accompanying drawings and the following description are provided to enable those skilled in the art to fully understand the present disclosure, and are not intended to limit the subject matter described in the claims.
[0011] FIG. 1 is a top view of a payment terminal 1 according to an embodiment of the present disclosure. FIG. 2 is an exploded perspective view of the payment terminal 1 as viewed from the front side. FIG. 3 is an exploded perspective view of the payment terminal 1 as viewed from the back side. In each drawing, the X-axis direction is a direction along the touch panel surface (e.g., the short side direction), the Y-axis direction is a direction along the touch panel surface and perpendicular to the X-direction (e.g., the long side direction). The Z-axis direction is a direction perpendicular to the touch panel surface (e.g., the thickness direction or height direction). The payment terminal 1 is, for example, a portable payment terminal that can be carried around.
[0012] The payment terminal 1 is a hybrid type that allows a purchaser of a product or the like to select from multiple payment methods. The multiple payment methods include, for example, credit card payment, electronic money payment, code (e.g., QR Code (registered trademark)) payment, and cash payment. Credit card payment includes, for example, magnetic card payment, contact IC card payment, and contactless IC card payment. There may be multiple types of electronic money. Electronic money payment and contactless IC card payment are performed using contactless communication (e.g., near field communication: NFC), and are therefore collectively referred to here as contactless payment.
[0013] The payment terminal 1 includes a housing 10, a substrate 20, an LDS (Laser Direct Structuring) 30 that constitutes a tamper-resistant section, a touch panel 41, and a display 42. As shown in Figures 2 and 3, the housing 10 is configured by combining a first exterior case 11 on the front side and a second exterior case 12 on the back side in the Z-axis direction. The first exterior case 11 and the second exterior case 12 are formed from, for example, resin.
[0014] The board 20 is disposed in the internal space of the housing 10, and various electronic components are mounted on it. The electronic components include security components that require security. Information that requires a high level of security, such as personal information, is input into the payment terminal 1, and since this information is recorded at least temporarily in the security components, the security components must be highly tamper-resistant.
[0015] The LDS30 that constitutes the tamper-resistant section is a resin housing with a circuit formed using three-dimensional wiring technology. The LDS30 is disposed opposite the substrate 20 (for example, on the back side of the substrate 20) and covers the security component mounted on the substrate 20. The LDS30 has a wiring pattern to which signals are supplied from a predetermined component (for example, a processor (e.g., a CPU)) provided in the payment terminal 1. For example, if a malicious third party destroys the LDS30 in order to obtain information, the wiring pattern of the LDS30 is also destroyed (disconnected), making it impossible to access the information recorded in the security component, thereby ensuring tamper resistance.
[0016] The touch panel 41 receives and detects input of various data and information related to payment processing (such as selection of payment method, personal identification number, PIN (Personal Identification Number), or electronic signature) by a store clerk or customer.
[0017] The display 42 is, for example, a liquid crystal display, an organic EL display, or other display. The display 42 displays, for example, various data and information related to the payment process.
[0018] Furthermore, the touch panel 41 and the display 42 are attached to the first exterior case 11 and electrically connected to the substrate 20 .
[0019] LDS30 generally requires gaps between patterns that are approximately the same width as the pattern width of the metal wiring. Therefore, if the wiring pattern width is increased, the gaps between the patterns also become larger, so even if a third party attempts a tamper attack, the damage to the LDS30 may only occur in the gaps and not affect the wiring pattern. In this case, because no breaks occur in the wiring pattern, the attack by a third party cannot be detected, which may result in a decrease in security.
[0020] On the other hand, if the wiring pattern is made thinner to prevent a decrease in security, it will become vulnerable to external forces such as dropping, bending, or impact, which may lead to the wiring pattern being broken, making it impossible to detect anti-tamper attacks. If the strength of the LDS30 itself is increased so that it does not bend in order to increase resistance to external forces, it will be difficult to make the payment terminal 1 thinner and lighter.
[0021] Therefore, the inventors focused on the relationship between LDS30 and substrate 20. The inventors noticed that although LDS30 is disposed facing substrate 20, the entire surface (XY plane) facing substrate 20 does not necessarily face the security component, but rather some areas face but some areas do not. The inventors then discovered that by determining the pattern width of the wiring pattern of LDS30 based on whether or not the area faces the security component on substrate 20, it is possible to prevent breaks in the wiring pattern of LDS30 and also to prevent a decrease in security.
[0022] FIG. 4 is a front view showing an example of the configuration of the LDS 30. FIG. 5 is a perspective view showing an example of the configuration of the LDS 30. The LDS 30 is, for example, a flat-plate-shaped member and includes a planar portion 35 and a frame portion 36 provided around the planar portion 35. The planar portion 35 includes a first region 31 and a second region 32 in which the pattern widths of the wiring pattern are different from each other. The LDS 30 also includes a region 33 without a wiring pattern. However, the LDS 30 does not necessarily have to have the region 33 without a wiring pattern. A wiring pattern may also be arranged in the frame portion 36, and the first region 31 and the second region 32 may be arranged therein.
[0023] The first region 31 faces the security component mounted on the substrate 20 in the Z-axis direction. On the other hand, the second region 32 does not face the security component in the Z-axis direction. The second region 32 may face only the substrate 20, or may face electronic components other than the security component that do not require security.
[0024] In the first region 31, the pattern width of the wiring pattern is a first width. In the second region 32, the pattern width of the wiring pattern is a second width, which is wider than the first width of the first region 31. The first width is set to, for example, 0.3 mm. The second width is set to, for example, 0.5 mm.
[0025] 6 is a schematic diagram showing an example of a wiring pattern in the LDS 30. In the first wiring pattern 311, which is a wiring pattern corresponding to the first region 31, there are a first wiring pattern row 312 and a second wiring pattern row 313 that are independent of each other, with a gap 314 provided between the two rows. In this way, providing two rows of wiring patterns enhances security. The width of the first wiring pattern row 312, the width of the second wiring pattern row 313, and the size of the gap 314 are all, for example, 0.3 mm. Note that the width of the wiring pattern row and the size of the gap may be different values.
[0026] In the second wiring pattern 321, which is a wiring pattern corresponding to the second region 32, there are a first wiring pattern row 322 and a second wiring pattern row 323 that are independent of each other, with a gap 324 provided between the two rows. Thus, providing two rows of wiring patterns enhances security. The width of the first wiring pattern row 322, the width of the second wiring pattern row 323, and the size of the gap 324 are, for example, 0.5 mm. The width of the wiring pattern row and the size of the gap may be different values.
[0027] In the payment terminal 1 of this embodiment, the pattern width of the wiring pattern can be determined based on whether or not it faces a security component on the substrate 20. For example, in the area facing the security component (first area 31), priority is given to ensuring a high level of security, while in the area not facing the security component (second area 32), emphasis is placed on the strength of the wiring pattern to prevent breakage.
[0028] Furthermore, the presence of the second region 32, which emphasizes the strength of the wiring pattern, can prevent the member that holds the wiring pattern (the main body of the LDS 30 in this embodiment) from becoming larger. Therefore, the payment terminal 1 can prevent breaks in the wiring pattern of the LDS 30 and a decrease in security, and can also be made smaller.
[0029] Here, the configuration of the payment terminal 1 will be further explained.
[0030] In addition to the touch panel 41 and the display 42, the payment terminal 1 includes, for example, an NFC antenna, a magnetic card reader, a contact IC card reader, a camera, and a processor. The payment terminal 1 may also include other components. The payment terminal 1 is a type of electronic device that performs payment processing.
[0031] The NFC antenna is a communication antenna for contactless communication, which detects a communication medium such as a contactless IC card or a high-frequency identification device tag, and communicates wirelessly with the detected communication medium. The NFC antenna communicates with a contactless IC card (e.g., a contactless credit card or an electronic money card), reads information stored in the contactless IC card, and writes information to the contactless IC card. The NFC antenna is disposed, for example, near the touch panel 41.
[0032] The magnetic card reader reads information stored on a magnetic card swiped through a magnetic card slot. The contact IC card reader reads information stored on a contact IC card inserted into a contact IC card slot and writes information to the contact IC card. The camera captures, for example, a code (e.g., a barcode or a two-dimensional code (e.g., a QR code (registered trademark)) displayed on the terminal.
[0033] The processor controls each component of the payment terminal 1, realizes various functions (for example, a payment function), and performs various processes. For example, the processor recognizes a code captured by a camera and reads the code information. The processor performs payment-related processes based on the information read from various cards and codes. The processor may also control contactless communication using an NFC antenna. Note that multiple processors may be provided, with different processors used for each function, or multiple functions may be realized by a single processor.
[0034] As described above, the payment terminal 1 includes a board 20. A security component is mounted on the board 20. The highly confidential information stored in the security component includes, for example, important information related to payment. This highly confidential information includes identification information of a card used for payment (for example, a credit card or electronic money card), a personal identification number, a PIN (Personal Identification Number), a password, an electronic signature, etc.
[0035] The security component may include, but is not limited to, the following components: For example, the security component may include an ICC (IC Card) connector (an example of a first connector) electrically connected to an IC card inserted into a contact IC card slot of the payment terminal 1; the security component may include a TS (Touch Screen) connector (an example of a second connector) electrically connected to the touch panel 41; the security component may include a display connector (an example of a third connector) such as an LCD (Liquid Crystal Display) connector electrically connected to the display 42; the security component may include an MSR (Magnetic Stripe Reader) connector (an example of a fourth connector) electrically connected to a magnetic reader (magnetic card reader) of the payment terminal 1; the security component may include a processor (an example of a first processor) that performs processing related to payment; the security component may include a processor (an example of a second processor) that performs processing related to contactless communication; and the security component may include a memory that records information.
[0036] The processor that performs the payment processing and the processor that performs the contactless communication processing may be one processor or different processors. Furthermore, the memory may be provided independently of the processor or may be built into the processor.
[0037] As a result, the payment terminal 1 can treat components that may at least temporarily store important information related to payment as security components, and can protect such security components efficiently with the LDS 30.
[0038] The security component also includes a connector (an example of a fifth connector) having a conductive member (for example, a spring) as a contact point that connects the substrate 20 and the LDS 30. The spring is electrically connected to the wiring pattern, electrically connecting the substrate 20 and the LDS 30. As a result, a connector electrically connected to the wiring pattern for detecting disconnection or destruction of the LDS 30 can be treated as a security component, and such a security component can be efficiently protected by the LDS 30.
[0039] For example, if payment terminal 1 is a portable payment terminal, it is preferable to make the resin thinner and smaller in order to make payment terminal 1 thinner and smaller. However, in this case, if payment terminal 1 is dropped or an external force is applied to payment terminal 1, payment terminal 1 becomes more susceptible to bending and impact. In this case, the wiring pattern of LDS 30 is more likely to break. In contrast, the strength of payment terminal 1 can be maintained at an appropriate level, improving the impact resistance of payment terminal 1.
[0040] In contrast, the payment terminal 1 of this embodiment can determine the pattern width of the wiring pattern based on whether or not it faces a security component on the board. For example, the payment terminal 1 can prioritize ensuring a high level of security in areas facing the security component, while emphasizing the strength of the wiring pattern in areas not facing the security component to prevent breakage. Furthermore, the payment terminal 1 can prevent the member (LDS 30) that holds the wiring pattern from becoming larger. Therefore, the payment terminal 1 can prevent breakage of the wiring pattern and a decrease in security, which are necessary to ensure tamper resistance, while also enabling miniaturization.
[0041] In this embodiment, two rows (two types) of wiring patterns are provided, but this is not limiting. For example, only one row (one type) of wiring pattern may be provided in the first area 31 and the second area 32. Even in this case, the payment terminal 1 can detect fraud by breaks in the wiring pattern, ensuring tamper resistance.
[0042] When the LDS30 has two rows of wiring patterns, each wiring pattern can transmit a different signal. In this case, the LDS30 can detect tampering when one of the wiring patterns is broken, and can also detect electrical abnormalities (e.g., short circuits) caused by electrical contact between multiple types of wiring patterns, improving security. For example, if a third party attempts to attack the LDS30 by drilling a hole in it with a metal drill, the LDS30 can detect tampering by detecting electrical contact between nearby wiring patterns (signal lines).
[0043] Furthermore, while the LDS 30 has been exemplified as having two rows (two types) of wiring patterns, this is not limiting. The LDS 30 may have three or more rows (three types) of wiring patterns. Furthermore, while the LDS 30 has been exemplified as having two regions (for example, a first region 31 and a second region 32) in which wiring patterns are arranged, this is not limiting. There may be three or more regions in which wiring patterns are arranged, and the wiring patterns may have three or more types of thickness.
[0044] <Outline of this embodiment> As a result, the present disclosure describes at least the following: Note that, in parentheses, examples of components corresponding to those in the above-described embodiments are given, but the present disclosure is not limited to these.
[0045] (Item 1) a substrate (substrate 20) on which security components requiring security are mounted; a tamper-resistant section (LDS30) that is disposed opposite the substrate, covers the security component mounted on the substrate, and has wiring patterns (a first wiring pattern 311, a second wiring pattern 321); Equipped with the thickness of the pattern width of the wiring pattern of the tamper-resistant section is determined based on whether the area is opposite to the security component; Payment terminal (Payment terminal 1).
[0046] This allows the payment terminal to determine the pattern width of the wiring pattern based on whether it faces a security component on the board. For example, the payment terminal can prioritize ensuring a high level of security in areas facing security components, and emphasize the strength of the wiring pattern in areas not facing security components to prevent breakage. The payment terminal also prevents the components that hold the wiring pattern from becoming larger. Therefore, the payment terminal can prevent breakage and a decrease in security in the wiring pattern of the LDS30, which is used to ensure tamper resistance, while also enabling miniaturization.
[0047] (Item 2) the tamper-resistant unit includes a first area (first area 31) facing the security component and a second area (second area 32) not facing the security component, In the first region, the pattern width of the wiring pattern is a first width, and in the second region, the pattern width is a second width that is wider than the first width. Item 1. A payment terminal as described in item 1.
[0048] As a result, the payment terminal narrows the wiring pattern in the area facing the security component and arranges the wiring pattern densely, minimizing areas where there is no wiring pattern, thereby ensuring a high level of security. Meanwhile, in areas not facing the security component, there are no security components. Therefore, the wiring pattern is thick in this area, and even if this area is destroyed, the security level of the payment terminal is not significantly affected, and a decrease in security can be suppressed. Furthermore, areas with thick wiring patterns are more resistant to external forces such as impacts. Therefore, the payment terminal can suppress breakage of the wiring pattern and suppress an increase in the size of the component that holds the wiring pattern.
[0049] (Item 3) The security component is a first connector electrically connected to an IC card inserted into the payment terminal; A second connector electrically connected to the touch panel (touch panel 41) of the payment terminal; a third connector electrically connected to a display (display 42) of the payment terminal; a fourth connector electrically connected to the magnetic reader of the payment terminal; and a first processor for performing processing related to payment; a second processor that performs processing related to contactless communication; A memory for recording information; including at least one of Item 1 or 2. A payment terminal.
[0050] This allows components that may at least temporarily store important payment-related information (e.g., card identification information, PIN, password) to be treated as security components, and such security components can be efficiently protected by the tamper-resistant section.
[0051] (Item 4) a conductive member that connects the substrate and the tamper-resistant portion and is electrically connected to the wiring pattern, The security component includes the conductive member. Item 1 or 2. A payment terminal.
[0052] This allows the connector through which the wiring pattern for detecting cuts or damage to the tamper-resistant section passes to be treated as a security component, allowing for more efficient protection by the tamper-resistant section.
[0053] Although various embodiments have been described above with reference to the drawings, it goes without saying that the present disclosure is not limited to such examples. It is clear that a person skilled in the art can conceive of various modifications or alterations within the scope of the claims, and it is understood that these also naturally fall within the technical scope of the present disclosure. Furthermore, the components of the above-described embodiments may be combined in any manner without departing from the spirit of the invention. [Industrial Applicability]
[0054] The present disclosure is useful for payment terminals and the like that can be miniaturized and that can prevent breakage of wiring patterns to ensure tamper resistance and a decrease in security. [Explanation of symbols]
[0055] 1. Payment terminal 10. Cabinet 11 First outer case 12 Second outer case 20 PCB 30 LDS 31 First Area 32 Second Area 41 Touch Panel 42 Display 311 First wiring pattern 312 First wiring pattern row 313 Second wiring pattern row 314 Gap 321 Second wiring pattern 322 First wiring pattern row 323 Second wiring pattern row 324 Gap
Claims
1. a substrate on which security components that require security are mounted; a tamper-resistant unit that is disposed opposite the substrate, covers the security component mounted on the substrate, and has a wiring pattern; Equipped with the thickness of the pattern width of the wiring pattern of the tamper-resistant section is determined based on whether the area is opposite to the security component; Payment terminal.
2. the tamper-resistant unit includes a first area facing the security component and a second area not facing the security component, In the first region, the pattern width of the wiring pattern is a first width, and in the second region, the pattern width is a second width that is wider than the first width. The payment terminal of claim 1 .
3. The security component is a first connector electrically connected to an IC card inserted into the payment terminal; a second connector electrically connected to the touch panel of the payment terminal; a third connector electrically connected to a display of the payment terminal; a fourth connector electrically connected to a magnetic reader of the payment terminal; a first processor that performs processing related to payment; a second processor that performs processing related to contactless communication; A memory for recording information; including at least one of The payment terminal according to claim 1 or 2.
4. a conductive member that connects the substrate and the tamper-resistant portion and is electrically connected to the wiring pattern, The security component includes the conductive member. The payment terminal according to claim 1 or 2.
Citation Information
Patent Citations
Data storage device, data protection method and communication equipment
JP2008033593A
Tamper-resistant module
JP2010166422A
Method of manufacturing electronic circuit board, and information input device
JP2011086034A
External storage device and method of manufacturing the same
JP2011128719A
Data security case
JP2014041625A