payment terminal

Abstract

To provide a payment terminal capable of reducing the leakage of information requiring security. [Solution] The payment terminal comprises a housing having input keys for input, and a security sheet, a key board, and a shielding case arranged inside the housing in this order from the input key side. The security sheet has a main body portion corresponding to at least the input keys, and connector terminals arranged to extend from both sides of the main body portion. Key input contacts that become conductive in response to input to the input keys, opening detection contacts that detect opening of the housing, and a tamper-resistant signal line are arranged at least in the main body portion. The main body portion is located on the first surface side of the key board that is on the input key side, and at least the ends of the connector terminals are located on the second surface side that is opposite the first surface of the key board. The ends of the connector terminals are connected to the connectors arranged on the second surface of the key board, and at least the ends of the connector terminals are covered by the key board and the shielding case.

Description

[Technical Field]

[0001] The present disclosure relates to payment terminals. [Background technology]

[0002] A payment terminal is a device that is installed, for example, at a store counter and is used to make payments. With the recent diversification of transactions, payment locations are expanding beyond store counters to various other locations. For example, payments for parcel deliveries are now made at the delivery destination. For this reason, portable payment terminals are becoming increasingly important.

[0003] Information that requires a high level of security is input into payment terminals, and the information is recorded in electronic components installed inside. Therefore, payment terminals must be tamper-resistant to protect the internal electronic components.

[0004] Patent Document 1 discloses a PIN pad used by users of payment terminals such as ATMs to input passwords (for example, personal identification numbers). The PIN pad is configured to include a keypad wiring board with a switch, a memory unit that stores an encryption program that encrypts an input signal that flows when the switch is pressed, an output unit that outputs the encrypted input signal to the outside, and an erasure unit that erases the encryption program. The PIN pad also includes a control device connected to the switch via a signal line, and a flexible cable sheet that covers the keypad wiring board and the signal line and has a tamper line formed in a position facing at least the switch and the signal line. The erasure unit erases the encryption program when it detects a voltage drop in the tamper line. [Prior art documents] [Patent documents]

[0005] [Patent Document 1] Japanese Patent Application Publication No. 2018-10365 Summary of the Invention [Problem to be solved by the invention]

[0006] The pin pad of Patent Document 1 has room for improvement in terms of how to deal with leaks of information requiring security, such as personal identification numbers.

[0007] The present disclosure provides a payment terminal that can reduce the leakage of information that requires security. [Means for solving the problem]

[0008] One aspect of the present disclosure is a payment terminal comprising: a housing having input keys for input; and a security sheet, a key board, and a shielding case arranged inside the housing in this order from the input keys, wherein the security sheet has a main body portion corresponding to at least the input keys and connector terminals arranged to extend from both sides of the main body portion; key input contacts that are conductive in response to input to the input keys, opening detection contacts that detect opening of the housing, and a tamper-resistant signal line are arranged at least in the main body portion; the main body portion is located on the side of a first surface of the key board that is on the side of the input keys; at least ends of the connector terminals are located on the side of a second surface of the key board that is opposite to the first surface; the ends of the connector terminals are connected to a connector arranged on the second surface of the key board; and at least the ends of the connector terminals are covered by the key board and the shielding case. [Effects of the Invention]

[0009] According to the present disclosure, it is possible to reduce the leakage of information that requires security. [Brief explanation of the drawings]

[0010] [Figure 1] FIG. 1 is an exploded perspective view of a payment terminal according to an embodiment of the present disclosure, viewed from above; [Figure 2] 1 is an exploded perspective view of a payment terminal according to an embodiment, viewed from below; [Figure 3A] A top view of the module that combines the security sheet, key board, shield case, and main board. [Figure 3B] A bottom view of the module that combines the security sheet, key board, shield case, and main board. [Figure 4] Plan view of security sheet [Figure 5A] FIG. 1 is a plan view of a payment terminal according to an embodiment, seen from above; [Figure 5B] A cross-sectional view taken along line II in FIG. 5A. [Figure 6] Enlarged view of region X in Figure 5B [Figure 7] FIG. 1 is a plan view of the payment terminal according to the embodiment, seen from below with the second housing removed; [Figure 8] FIG. 1 is a diagram showing a module that combines a security sheet, a key board, a shield case, and a main board, and particularly showing a spring disposed between the key board and the shield case. [Figure 9A] Cross-sectional view taken along line II-II in Figure 8. [Figure 9B] Cross-sectional view taken along line III-III in Figure 8. [Figure 9C] Cross-sectional view taken along line IV-IV in Figure 8. DETAILED DESCRIPTION OF THE INVENTION

[0011] Hereinafter, embodiments will be described in detail with reference to the drawings as appropriate. However, more detailed description than necessary may be omitted. For example, detailed description of well-known matters or redundant description of substantially identical configurations may be omitted. This is to avoid unnecessary redundancy in the following description and to facilitate understanding by those skilled in the art. Note that the accompanying drawings and the following description are provided to enable those skilled in the art to fully understand the present disclosure, and are not intended to limit the subject matter described in the claims.

[0012] (How the embodiments of the present disclosure were achieved) In the pin pad of Patent Document 1, a flexible cable sheet is folded in two, forming an upper portion and a lower portion. The upper portion and the lower portion are attached to both sides of a keypad printed wiring board via an adhesive layer. However, a malicious third party may peel off the flexible cable sheet and the keypad printed wiring board together. Therefore, if such a pin pad is applied to a payment terminal, information such as a personal identification number stored in electronic components mounted on the keypad printed wiring board may be leaked.

[0013] In the following embodiment, a payment terminal that can reduce the leakage of information that requires security will be described.

[0014] (Embodiment) FIG. 1 is an exploded perspective view of a payment terminal 1 according to an embodiment of the present disclosure, as viewed from above. FIG. 2 is an exploded perspective view of the payment terminal 1, as viewed from below. The payment terminal 1 is a hybrid type that allows a purchaser of, for example, a product to select from multiple payment methods. The multiple payment methods include, for example, credit card payment, electronic money payment, code (e.g., QR Code (registered trademark)) payment, and cash payment. Credit card payment includes, for example, magnetic card payment, contact IC card payment, and contactless IC card payment. There may be multiple types of electronic money. Electronic money payment and contactless IC card payment are performed using contactless communication (e.g., near field communication: NFC), and are therefore collectively referred to herein as contactless payment. Note that the payment terminal 1 may also be a payment terminal using a method other than those described above.

[0015] The payment terminal 1 includes a housing 10, a security sheet 20, a key board 30, a shield case 40, and a main board 50. The housing 10 is combined with a first housing 11 on the upper side and a second housing 12 on the lower side to form the exterior of the payment terminal 1. The first housing 11 and the second housing 12 are formed of, for example, resin. The housing 10, and particularly the first housing 11, has input keys 13 that allow a user (such as a store staff member or a product purchaser) to input predetermined information. The input keys 13 are physical keys. The first housing 11 is also equipped with a touch panel 14 that can input various types of information and a display 15 that can display various types of information. The touch panel 14 does not necessarily have to be provided.

[0016] The first housing 11 and the second housing 12 define the internal space of the housing 10. Figures 3A and 3 are diagrams showing a module that combines the security sheet 20, key board 30, shield case 40, and main board 50, excluding the housing 10. Figure 3A is a plan view of this combined module as seen from above. Figure 3B is a plan view of this combined module as seen from below. Inside the housing 10, the security sheet 20, key board 30, shield case 40, and main board 50 are arranged so as to be stacked in this order from the input key 13 side (positive side of the Z axis).

[0017] 4 is a plan view of the security sheet 20. The security sheet 20 has a flat main body 21 provided to correspond to at least the input keys 13, and strip-shaped connector terminals 22 arranged to extend from both sides of the main body 21. At least the main body 21 is provided with key input contacts 23, opening detection contacts 24, and tamper-resistant signal lines 25.

[0018] The key input contact 23 becomes conductive in response to a user's input to the input keys 13. The opening detection contact 24 is maintained in a conductive state by default when the security sheet 20 is pressed from the input key 13 side. Therefore, if the first housing 11 is opened by a malicious third party, for example, the payment terminal 1 can detect the opening by the opening detection contact 24 being disconnected. The tamper-resistant signal line 25 is arranged in the area shown by diagonal lines in FIG. 4, i.e., most of the area of ​​the security sheet 20. If even a part of this area is cut or damaged and the electrical continuity is interrupted, the payment terminal 1 can detect the destruction of the security sheet 20, i.e., the payment terminal 1. In other words, the area shown by diagonal lines in FIG. 4 constitutes a tamper-resistant section that ensures tamper resistance.

[0019] The security sheet 20 may be formed, for example, by printing silver paste on a PET (Polyethylene Terephthalate) sheet.

[0020] The key board 30 is a board on which various electronic components are mounted. The electronic components here include security components that require security, such as a processor and memory that store information such as a PIN number entered using the input keys 13. Information that requires a high level of security, such as personal information, is entered into the payment terminal 1, and since such information is at least temporarily recorded in the security components, the security components must be highly tamper-resistant. The key board 30 has a first surface 30a (see FIG. 3A) on the input key 13 side and a second surface 30b opposite the first surface 30a. The security components are generally located on the second surface 30b side and are covered by a shield case 40.

[0021] For example, if a malicious third party destroys the security sheet 20 in order to obtain information, at least one of the opening detection contacts 24 or the tamper-resistant signal line 25 of the security sheet 20 will be destroyed (disconnected), making it impossible to access the information recorded in the security component, thereby ensuring tamper resistance. Note that the key board 30 may also have a wiring pattern for a tamper-resistant signal line similar to the tamper-resistant signal line 25.

[0022] Making it impossible to access information recorded in a security component may include, for example, one of the processors prohibiting data transmission to or reception from the security component, or one of the processors erasing data held by the security component. For example, data held by a security component may include information such as a PIN number or electronic signature, or information on which input key 13 was pressed. Making it impossible to access data held by such a security component improves security.

[0023] The shield case 40 is a resin housing with circuits formed by three-dimensional wiring technology, for example, by LDS (Laser Direct Structuring), so as to form a tamper-resistant section similar to the security sheet 20. The shield case 40 is disposed opposite the key board 30 (for example, on the back side of the key board 30) and covers the security components mounted on the key board 30. The shield case 40 has a wiring pattern for a tamper-resistant signal line (the same as the tamper-resistant signal line 25). A signal is supplied to the wiring pattern for the tamper-resistant signal line from a predetermined component (for example, a processor, a main processor described below) included in the payment terminal 1. For example, if a malicious third party destroys the shield case 40 to obtain information, the wiring pattern for the tamper-resistant signal line of the shield case 40 is also destroyed (disconnected), making it impossible to access the information recorded in the security components, thereby ensuring tamper resistance.

[0024] The main board 50 is a board on which various electronic components for executing the functions of the payment terminal 1 are mounted. For example, a main processor, a main memory, and the like are mounted on the main board 50. As will be described later with reference to FIG. 7, the main board 50 also has a wiring pattern for tamper-resistant signal lines similar to the tamper-resistant signal line 25. If a malicious third party destroys the main board 50 in order to obtain information, the wiring pattern for the tamper-resistant signal lines on the main board 50 will also be destroyed (disconnected), making it impossible to access the information recorded in the security component, thereby ensuring tamper resistance.

[0025] The key board 30 has a first surface 30a located on the side of the input keys 13, and a second surface 30b located on the opposite side to the first surface 30a. As shown in Figures 1 and 3A, the main body 21 of the security sheet 20 is located on the side of the first surface 30a of the key board 30. On the other hand, the connector terminals 22 extending from both sides of the main body 21 are bent from the first surface 30a side toward the second surface 30b side, as shown in Figures 2, 3B, and 4, and reach the second surface 30b located on the opposite side of the first surface 30a, and at least the end portions 22a of the connector terminals 22 are located completely on the side of the second surface 30b.

[0026] 2 and 3B, the shield case 40 is located on the second surface 30b side of the key board 30. The end 22a of the connector terminal 22 is connected to the connector 31 arranged on the second surface 30b of the key board 30. As a result, at least the end 22a is sandwiched between the key board 30 and the shield case 40 and covered by both.

[0027] The payment terminal 1 of this embodiment enables key input to the input keys 13, while also detecting damage to the key board 30 or security sheet 20 by a malicious third party and detecting opening of the payment terminal 1. Furthermore, the connector terminals 22 extend from the first surface 30a of the key board 30 toward the second surface 30b, with the ends 22a connected to the connector 31 on the second surface 30b. Therefore, it is difficult for a third party attempting to destroy the payment terminal 1 to peel off the security sheet 20 alone, and they must peel off the security sheet 20 and the key board 30 together. Furthermore, because at least a portion of the connector terminals 22, including the ends 22a, are covered by the key board 30 and the shield case 40, it is difficult to identify the position of the connector terminals 22 and to remove the connector terminals 22 from the connector 31. Therefore, the payment terminal 1 can reduce the leakage of security-required information, such as a personal identification number, implemented on the key board 30.

[0028] The end 22a of the connector terminal 22 may be connected to the connector 31 not only mechanically but also electrically. This allows the connector terminal 22 to not only mechanically connect the security sheet 20 to the key board 30, but also to supply power from the key board 30 to the security sheet 20 via the connector 31 and the connector terminal 22. Therefore, the connector terminal 22 can also serve as a power supply section for the tamper-resistant signal line 25, for example.

[0029] Fig. 5A is a plan view of payment terminal 1 as seen from above. Fig. 5B is a cross-sectional view taken along line II in Fig. 5A. Fig. 6 is an enlarged view of area X in Fig. 5B.

[0030] 6, the connector terminal 22 is bent, for example, to wrap around the first surface 30a of the key board 30, the end surface 30c connecting the first surface 30a and the second surface 30b of the key board 30, and the second surface 30b. This allows the payment terminal 1 to extend the connector terminal 22 from the first surface 30a to the second surface 30b of the key board, and connect the end 22a of the connector terminal 22 to the connector 31 arranged on the second surface 30b of the key board 30.

[0031] 3B, a portion of connector terminal 22, end 22a, and connector 31 in region Y are depicted by dashed lines below main board 50 and shielding case 40. On the other hand, a portion of connector terminal 22, end 22a, and connector 31 in region Z are depicted by dashed lines below shielding case 40.

[0032] That is, inside the housing 10, a main board 50 is provided that is positioned farther away than the shield case 40 when viewed from the input keys 13 side of the housing 10. Furthermore, at least two connector terminals 22 of the security sheet 20 extend from both sides of the main body 21, and at least one connector terminal 22, in this example, the connector terminal 22 in area Y, is covered by the main board 50 and the shield case 40 when viewed from the main board 50 side. As a result, the connector terminal 22 in area Y is covered by the main board 50 and the shield case 40 on the main board 50 side. This makes it difficult for a third party to identify the position of the connector terminal 22 from the main board 50 side.

[0033] Fig. 7 is a plan view of the payment terminal 1 seen from below with the second housing 12 removed. Fig. 8, like Fig. 3B, is a diagram showing a module combining the security sheet 20, key board 30, shield case 40, and main board 50. Fig. 9A is a cross-sectional view taken along line II-II in Fig. 8. Fig. 9B is a cross-sectional view taken along line III-III in Fig. 8. Fig. 9C is a cross-sectional view taken along line IV-IV in Fig. 8. The hatched areas in Figs. 7 and 8 indicate areas on the main board 50 where the wiring pattern for the tamper-resistant signal line exists.

[0034] FIG. 8 is basically the same as FIG. 3B, but particularly shows a spring 60 disposed between the key board 30 and the shielding case 40. That is, a first electrode 32 is provided on the second surface 30b of the key board 30, and a second electrode 43 is provided on the shielding case 40. The spring 60 connects the first electrode 32 and the second electrode 43 and conducts electricity between them. The first electrode 32 is connected to a spring contact at one end of the spring 60. The second electrode 43 is connected to a spring contact at the other end of the spring 60. Furthermore, in FIGS. 9A to 9C, the spring 60 is sandwiched between the key board 30 and the shielding case 40, in other words, between the key board 30 and the main board 50 (via the shielding case 40) and covered by both. That is, the spring 60 is sandwiched between the key board 30 and the main board 50 via the shielding case 40 (via the shielding case 40) and covered by both. 7 and 8, the spring 60 is shown with diagonal lines because it is covered by the shielding case 40 and the main board 50 (via the shielding case 40). The spring 60 is an example of an elastic member. The spring 60 may be conductive.

[0035] As a result, the first electrode 32 is connected to, for example, the wiring pattern of the tamper-resistant signal line of the key board 30, and the second electrode 43 is connected to, for example, the wiring pattern of the tamper-resistant signal line of the shield case 40. Therefore, the wiring pattern of the tamper-resistant signal line of the key board 30 and the wiring pattern of the tamper-resistant signal line of the shield case 40 are electrically connected via the first electrode 32, the second electrode 43, and the spring 60. Therefore, the payment terminal 1 uses the spring 60 to improve its ability to detect vandalism by a third party and to enhance security. If the spring 60 is attacked, its detection ability may decrease, but because the spring 60 is sandwiched and covered between the key board 30 and the main board 50, it becomes difficult for a third party to confirm the position of the spring 60 from the outside, making it less susceptible to attack. Therefore, the payment terminal 1 can prevent a decrease in security.

[0036] 1 and 2, the shielding case 40 has a flat portion 41 and a hole 42 that exists within the plane of the flat portion 41 and penetrates the flat portion 41. The second electrode 43 is provided on the flat portion 41.

[0037] The payment terminal 1 has a hole 42 in the shield case 40, which allows the key board 30 and main board 50, which are located on both sides of the shield case 40, to be connected over a short distance. For example, a connector 53 (see FIG. 1) of the main board 50 and a connector 33 (see FIG. 2) of the key board 30 are disposed as a Board To Board (B2B) connector, passing through the hole 42, and are electrically connected. The payment terminal 1 can supply power to the wiring pattern of the tamper-resistant signal line of the key board 30 and the wiring pattern of the tamper-resistant signal line of the main board 50 via the B2B connector, and electrically connects these wiring patterns of the tamper-resistant signal lines.

[0038] In this configuration, the spring 60 is disposed between the flat surface 41 of the shield case 40 and the key board 30. This makes the spring 60 easily visible through the hole 42 of the shield case 40, making it vulnerable to attack. However, the spring 60 is disposed on the flat surface 41 of the shield case 40, which is between the key board 30 and the main board 50, and is covered by the key board 30 and the main board 50. This makes it difficult for a third party to confirm the position of the spring 60 from the outside. This makes the payment terminal 1 less vulnerable to attack, thereby preventing a decrease in security.

[0039] Furthermore, the size (land size) of the first electrode 32 and the second electrode 54 that come into contact with the spring contacts on both sides of the spring 60 may be set larger than necessary to account for manufacturing variations. In this case, the first electrode 32, the second electrode 54, and the spring 60 that connects them become more vulnerable to attack. In response to this, the payment terminal 1 is sandwiched between the key board 30 and the main board 50, which allows the first electrode 32, the second electrode 54, and the spring 60 to be hidden and the spring contacts to be protected.

[0040] Next, the configuration of the payment terminal 1 will be described in more detail.

[0041] Payment terminal 1 includes touch panel 14, display 15, an NFC antenna, a magnetic card reader, a contact IC card reader, a camera, and a processor. Payment terminal 1 may also include other components. Payment terminal 1 is a type of electronic device that performs payment processing.

[0042] The NFC antenna is a communication antenna for contactless communication, which detects a communication medium such as a contactless IC card or a high-frequency identification device tag and communicates wirelessly with the detected communication medium. The NFC antenna communicates with a contactless IC card (e.g., a contactless credit card or an electronic money card), reads information stored in the contactless IC card, and writes information to the contactless IC card. The NFC antenna is disposed, for example, near the touch panel 14.

[0043] The magnetic card reader reads information stored on a magnetic card swiped through a magnetic card slot. The contact IC card reader reads information stored on a contact IC card inserted into a contact IC card slot and writes information to the contact IC card. The camera captures an image of a code (e.g., a barcode or a two-dimensional code (e.g., a QR code (registered trademark)) displayed on an external terminal, for example.

[0044] The processor controls each component of the payment terminal 1, realizes various functions (e.g., payment functions), and performs various processes. The processor may be, for example, a processor mounted on the key board 30, a main processor mounted on the main board 50, or another processor. For example, the processor recognizes a code captured by a camera and reads the code information. The processor performs payment-related processing based on information read from various cards and codes. The processor may also control contactless communication using an NFC antenna. Note that multiple processors may be provided, with different processors used for each function, or multiple functions may be realized by a single processor.

[0045] As described above, the payment terminal 1 includes a key board 30. A security component is mounted on the key board 30. The highly confidential information stored in the security component includes, for example, important information related to payment. This highly confidential information includes identification information of a card used for payment (for example, a credit card or electronic money card), a personal identification number, a PIN (Personal Identification Number), a password, an electronic signature, etc.

[0046] The security component may include, but is not limited to, the following components: For example, the security component may include an ICC (IC Card) connector electrically connected to an IC card inserted into a contact IC card slot of the payment terminal 1. The security component may include a TS (Touch Screen) connector electrically connected to the touch panel 14. The security component may include a display connector such as an LCD (Liquid Crystal Display) connector electrically connected to the display 15. The security component may include an MSR (Magnetic Stripe Reader) connector electrically connected to a magnetic reader (magnetic card reader) of the payment terminal 1. The security component may include a processor that performs processing related to payment. The security component may include a processor that performs processing related to contactless communication. The security component may include a memory that records information.

[0047] The processor that performs the payment processing and the processor that performs the contactless communication processing may be one processor or different processors. Furthermore, the memory may be provided independently of the processor or may be built into the processor.

[0048] As a result, the payment terminal 1 treats components that may at least temporarily store important information related to payment as security components, and can efficiently protect such security components using the configuration of the payment terminal 1 described above.

[0049] The security component may also include a conductive member (e.g., spring 60) as a contact point that connects key board 30 and shield case 40. Spring 60 is electrically connected to the wiring pattern, and electrically connects key board 30 and shield case 40. As a result, payment terminal 1 treats spring 60, which is electrically connected to the wiring pattern for detecting cuts or breakage of at least one of key board 30 and shield case 40, as a security component, and can efficiently protect such security component by the configuration of payment terminal 1 described above.

[0050] As described above, the payment terminal 1 of this embodiment allows key input to the input keys 13, while also detecting damage to the key board 30 or security sheet 20 by a malicious third party and detecting the opening of the payment terminal 1. Furthermore, the connector terminal 22 extends from the first surface 30a of the key board 30 toward the second surface 30b, and the end 22a is connected to the connector 31 on the second surface 30b side. Therefore, it is difficult for a third party attempting to destroy the payment terminal 1 to peel off the security sheet 20 alone; instead, they must peel off the security sheet 20 and the key board 30 together. Peeling them off together increases the likelihood of disconnecting one of the tamper signal lines. Furthermore, at least a portion of the connector terminal 22, including the end 22a, is covered by the key board 30 and the shield case 40. Therefore, the payment terminal 1 makes it difficult to identify the position of the connector terminal 22 and to remove the connector terminal 22 from the connector 31. Therefore, the payment terminal 1 can reduce leakage of information requiring security, such as a personal identification number mounted on the key board 30.

[0051] As a comparative example, it is assumed that the security sheet 20 receives power from one of the opening detection contacts 24, passes through the tamper-resistant signal line 25 inside the security sheet 20, and outputs power from another opening detection contact 24. In this case, if a third party attacks the opening detection contact 24 on the payment terminal 1, it is possible that the function of the tamper-resistant signal line 25 inside the security sheet will be disabled. For example, it is conceivable that the opening detection contacts 24 could be disabled by connecting them together.

[0052] In contrast, in the payment terminal 1 of this embodiment, the opening detection contact 24 and the tamper-resistant signal line 25 may be separated and electrically independent. Therefore, even if either the opening detection contact 24 or the tamper-resistant signal line 25 is attacked, the unattacked one of the opening detection contact 24 and the tamper-resistant signal line 25 will function effectively, making it impossible to access the data held by the security component.

[0053] <Outline of this embodiment> As a result, the present disclosure describes at least the following: Note that, in parentheses, examples of components corresponding to the above-described embodiments are given, but the present disclosure is not limited to these.

[0054] (Item 1) a housing (housing 10) having input keys (input keys 13) for input; The housing includes a security sheet (security sheet 20), a key board (key board 30), and a shield case (shield case 40), which are arranged in this order from the input key side, inside the housing, The security sheet has at least a main body portion (main body portion 21) corresponding to the input keys, and connector terminals (connector terminals 22) arranged to extend from both sides of the main body portion, a key input contact (key input contact 23) that is conductive in response to an input to the input key, an opening detection contact (opening detection contact 24) that detects opening of the housing, and a tamper-resistant signal line (tamper-resistant signal line 25) are arranged at least in the main body; the main body is located on a first surface (first surface 30a) of the key board that is located on the input key side, and at least an end (end 22a) of the connector terminal is located on a second surface (second surface 30b) of the key board that is located on the opposite side to the first surface, An end of the connector terminal is connected to a connector (connector 31) arranged on the second surface of the key board, and at least the end of the connector terminal is covered by the key board and the shield case. Payment terminal (Payment terminal 1).

[0055] This allows the payment terminal to allow key input to the input keys while also detecting damage to the key board or security sheet by a malicious third party and the opening of the payment terminal. Furthermore, because the connector terminal extends from the first surface side of the key board toward the second surface side and its end is connected to the connector on the second surface side, it is difficult for a third party attempting to destroy the payment terminal to peel off the security sheet alone, and they must peel off the security sheet and key board together. Furthermore, because at least a portion of the connector terminal, including its end, is covered by the key board and the shielding case, it is difficult to identify the position of the connector terminal and to remove the connector terminal from the connector. Therefore, the payment terminal can reduce the leakage of security-required information, such as a PIN number, implemented on the key board.

[0056] (Item 2) The end of the connector terminal is electrically connected to the connector. Item 1. A payment terminal as described in item 1.

[0057] This allows the payment terminal to supply power from the key board to the security sheet via the connector and connector terminal, so the connector terminal can also serve as a power supply for the tamper-resistant signal line, for example.

[0058] (Item 3) The connector terminal is bent so as to follow the first surface of the key board, the end surface (end surface 30c) of the key board, and the second surface of the key board. Item 1. A payment terminal as described in item 1.

[0059] This allows the payment terminal to extend the connector terminal from the first surface to the second surface of the key board, and the end of the connector terminal can be connected to the connector arranged on the second surface of the key board.

[0060] (Item 4) The device further includes a main board (main board 50) disposed inside the housing farther away from the shield case when viewed from the input key side of the housing, At least two of the connector terminals extend from opposite sides of the body portion; At least one of the connector terminals is covered by the main board and the shield case when viewed from the main board side. Item 1. A payment terminal as described in item 1.

[0061] As a result, the connector terminals on the main board side are covered by the main board and the shield case, making it difficult for a third party to identify the positions of the connector terminals from the main board side.

[0062] (Item 5) an elastic member (spring 60) that electrically connects a first electrode (first electrode 32) provided on the second surface of the key substrate and a second electrode (second electrode 43) provided on the shield case; a main board (main board 50) disposed inside the housing farther away than the shield case when viewed from the input key side of the housing, The elastic member is sandwiched and covered by the key board and, via the shield case, the main board. Item 1. A payment terminal as described in item 1.

[0063] The first electrode is connected to the wiring pattern of the tamper-resistant signal line on the key board, for example. The second electrode is connected to the wiring pattern of the tamper-resistant signal line on the shield case, for example. The payment terminal enables power supply using an elastic member, improving its ability to detect acts of vandalism by third parties and enhancing security. If the elastic member is attacked, its detection ability may decrease, but because the elastic member is sandwiched and covered between the key board and the main board, it becomes difficult for third parties to confirm the position of the elastic member from the outside. Therefore, by making the payment terminal less susceptible to attacks, a decrease in security can be suppressed.

[0064] (Item 6) The shield case has a flat surface portion (flat surface portion 41) and a hole portion (hole portion 42) that exists within the plane of the flat surface portion and penetrates the flat surface portion, The second electrode is provided on the planar portion. Item 5. A payment terminal as described in item 5.

[0065] This allows the shield case to have a hole, allowing the key board and main board on both sides of the shield case to be connected over a short distance through the hole. In this case, an elastic member is disposed between the flat portion of the shield case and the key board, making the elastic member easily visible through the hole in the shield case and increasing the likelihood of an attack. However, in the payment terminal, the elastic member is disposed on the flat portion between the key board and the main board, and is covered by the key board and the main board. This makes it difficult for a third party to confirm the location of the elastic member from the outside, making the payment terminal less susceptible to attacks and reducing security compromises. Furthermore, a wiring pattern for tamper-resistant signal lines may also be disposed on the main board. In this case, a third party would need to attack the main board to attack the elastic member, which would increase the time required for the attack. Therefore, the payment terminal makes it even more difficult for a third party to obtain information requiring security.

[0066] Although various embodiments have been described above with reference to the drawings, it goes without saying that the present disclosure is not limited to such examples. It is clear that a person skilled in the art can conceive of various modifications or alterations within the scope of the claims, and it is understood that these also naturally fall within the technical scope of the present disclosure. Furthermore, the components of the above-described embodiments may be combined in any manner without departing from the spirit of the invention. [Industrial Applicability]

[0067] The present disclosure is useful for payment terminals and the like that can reduce the leakage of information requiring security, such as personal identification numbers. [Explanation of symbols]

[0068] 10. Cabinet 11 First cabinet 12 Second enclosure 13 input keys 14 Touch Panel 15 Display 20 Security Sheet 21 Main body 22 Connector terminal 22a end 23 Key input contact 24 Contact for detecting opening 25 Anti-tamper signal line 30 key board 30a 1st page 30b 2nd side 30c end face 31 Connector 32 1st electrode 40 Shield Case 41 Plane part 42 Hole 43 2nd electrode 50 Main board 60 spring

Claims

1. a housing having input keys for input; The housing includes a security sheet, a key board, and a shield case, which are arranged in this order from the input key side, the security sheet has at least a main body portion corresponding to the input keys and connector terminals arranged to extend from both sides of the main body portion, a key input contact that is made conductive in response to an input to the input key, an opening detection contact that detects opening of the housing, and a tamper-resistant signal line are disposed at least in the main body; the main body is located on a first surface of the key board that is located on the input key side, and at least an end of the connector terminal is located on a second surface of the key board that is located on the opposite side to the first surface, an end of the connector terminal is connected to a connector arranged on the second surface of the key board, and at least the end of the connector terminal is covered by the key board and the shield case; Payment terminal.

2. The end of the connector terminal is electrically connected to the connector. The payment terminal of claim 1 .

3. the connector terminal is bent so as to follow the first surface of the key board, the end surface of the key board, and the second surface of the key board; The payment terminal of claim 1 .

4. a main board disposed inside the housing farther from the shield case when viewed from the input key side of the housing, At least two of the connector terminals extend from opposite sides of the body portion; At least one of the connector terminals is covered by the main board and the shield case when viewed from the main board side. The payment terminal of claim 1 .

5. an elastic member that electrically connects a first electrode provided on the second surface of the key substrate and a second electrode provided on the shield case; a main board disposed inside the housing and farther away than the shield case when viewed from the input key side of the housing, The elastic member is sandwiched and covered by the key board and, via the shield case, the main board. The payment terminal of claim 1 .

6. the shield case has a flat surface portion and a hole portion that exists within the plane of the flat surface portion and penetrates the flat surface portion, The second electrode is provided on the planar portion. The payment terminal according to claim 5 .

Images