Systems and methods for skimming device detection using RF radiation fields

Abstract

A payment terminal comprising a controller is provided. The controller is configured to: (1) generate, via a transceiver electrically coupled to an antenna, an RF radiation field; (2) capture, via the transceiver, a plurality of samples of the RF radiation field; (3) determine sample characteristics based on the plurality of samples; (4) determine comparison metrics by comparing the sample characteristics to one or more baseline characteristics; and (5) set a skimming detection flag based on the one or more comparison metrics. The controller is configured to operate in a payment processing state or an idle state. In some examples, the samples of the RF radiation field are only captured if the payment terminal is in the idle state.

Description

SYSTEMS AND METHODS FOR SKIMMING DEVICE DETECTION USING RF RADIATION FIELDSField of the Disclosure

[0001] The present disclosure generally relates to payment terminals, and more particularly to systems and methods for payment terminals to detect skimming devices using radio frequency (RF) radiation fields.Background

[0002] A common method of stealing payment card information is surreptitiously installing a skimming device onto a payment terminal. The skimming device may appear to be part of the payment terminal and can be difficult for a layperson to detect. In fact, the skimming device may mimic a number of characteristics of the payment terminal, such as look, feel, color, materials, and / or others. When a user wishes to use a payment terminal to process a card-based (credit card, debit card, etc.) transaction, they may unknowingly insert their card into the skimming device, allowing the skimming device to extract the payment card information and provide it to a malicious third party. Accordingly, there is a need for systems and methods to detect a skimming device installed on a payment terminal.Summary of the Disclosure

[0003] The present disclosure is directed to systems and methods for skimming device detection using radio frequency (RF) radiation. In particular, the systems and methods are used to determine if a skimming device has been installed on a payment terminal configured to process card-based transactions. The payment terminal includes a controller having a transceiver with an antenna. The controller uses the transceiver and the antenna to generate an RF radiation field encompassing at least a portion of the payment terminal. Skimming devices typically include metal or metal-containing components such as integrated circuit (IC) chips, metal wires, circuit board traces, antennas, metal housings, etc. The metal components will impact the characteristics of the RF radiation field. Accordingly, the controller then uses the transceiver and the antenna to capture samples of the RF radiation field, and then analyze the samples to evaluate one or more characteristics of the sample. The sample characteristics may include load factor, phase, and / or amplitude. The sample characteristics are then compared to one or more baseline characteristics retrieved from a memory of the skimming device. The baseline characteristics are determined during a calibration process when no skimming devicesTitle: SYSTEMS AND METHODS FOR SKIMMING DEVICE DETECTION USING RF RADIATIONFIELDSDocket No.: VFI-1060-WO are installed on the payment terminal. The comparison of the sample characteristics to the baseline characteristics results in one or more comparison metrics. The controller then evaluates the comparison metrics (such as by comparing the comparison metrics to one or more thresholds) to determine if a skimming device has been installed on the payment terminal. If so, a skimming device flag is set. The controller may then also transmit an alert signal corresponding to the skimming device flag to an external device, such as a cash register.

[0004] In some examples, the payment terminal is configured to operate in at least two states including a payment processing state and an idle state. In a payment processing state, the payment terminal is actively processing a transaction. Actively processing the transaction may include receiving payment information from a card reader (such as a magnetic strip reader, a chip reader, a contactless card reader, etc.), receiving transaction information from a point-of- sale device, or receiving user input via a keypad or touch screen. The aforementioned transceiver and antenna may be used during the payment processing state, such as for capturing contactless capture payment information from the payment card via near field communication (NFC) or other wireless protocols. If the payment terminal is not in a payment processing state, the payment terminal may be considered to be in an idle state. In some examples, the controller may only capture samples if the payment terminal is in the idle state. In further examples, the controller may only generate the RF radiation field if the payment terminal is in the idle state. In even further examples, the payment terminal may be configured for additional states beyond the payment processing state and the idle state.

[0005] In some examples, the transceiver may be coupled to two antennas, a first antenna and a second antenna. The first and second antennas may be positioned in different locations about the payment terminal. The first antenna may be used to generate a first RF radiation field covering a first portion of the payment terminal, while the second antenna may be used to generate a second RF radiation field covering a second portion of the payment terminal. In these examples, only one of the first or second antennas are active at one point in time. Further, the calibration process may generate different sets of baseline characteristics corresponding to each radiation field. One or both of the antennas may have a center frequency of approximately 13.56 megahertz. The first and second RF radiation fields may have a transmission range less than or equal to 20 centimeters.

[0006] In some examples, the samples of the RF radiation field are captured according to a sample rate and a sample period. The sample rate represents the frequency at which theTitle: SYSTEMS AND METHODS FOR SKIMMING DEVICE DETECTION USING RF RADIATIONFIELDSDocket No.: VFI-1060-WO controller captures the sample of the RF radiation field. In some examples, the sample rate is approximately 24 hours, such that one sample is captured every day. The sample period represents the length of time the RF radiation field is sampled. In some examples, the sample period may be greater than or equal to 100 milliseconds.

[0007] Generally, in one aspect, a payment terminal is provided. The payment terminal comprises a controller. The controller is configured to generate, via a transceiver electrically coupled to an antenna, an RF radiation field.

[0008] The controller is further configured to capture, via the transceiver, a plurality of samples of the RF radiation field.

[0009] The controller is further configured to determine one or more sample characteristics based on the plurality of samples.

[0010] The controller is further configured to determine one or more comparison metrics by comparing the one or more sample characteristics to one or more baseline characteristics.

[0011] The controller is further configured to set a skimming detection flag based on the one or more comparison metrics.

[0012] According to an example, the one or more sample characteristics include a sample load factor, a sample phase, and / or a sample amplitude.

[0013] According to an example, the one or more baseline characteristics include a baseline load factor, a baseline phase, and / or a baseline amplitude.

[0014] According to an example, the controller is configured to operate in a payment processing state or an idle state. In some further examples, the samples of the RF radiation field are only captured if the payment terminal is in the idle state.

[0015] According to an example, the RF radiation field is omnidirectional relative to the antenna.

[0016] According to an example, the controller is further configured to transmit an alert signal corresponding to the skimming detection flag to an external device.

[0017] According to an example, the payment terminal further comprises a memory storing the one or more baseline characteristics.

[0018] According to an example, the controller is further configured to: (1) generate, via the transceiver, a calibration RF radiation field; (2) capture, via the transceiver, a calibration sample of the calibration RF radiation field; (3) determine the one or more baselineTitle: SYSTEMS AND METHODS FOR SKIMMING DEVICE DETECTION USING RF RADIATIONFIELDSDocket No.: VFI-1060-WO characteristics based on the calibration sample; and (4) store the baseline characteristics in a memory of the payment terminal.

[0019] According to an example, the transceiver is further electrically coupled to a second antenna. The transceiver may use only one of the antenna and the second antenna to generate the RF radiation field.

[0020] According to an example, the plurality of samples are captured according to a sample rate and a sample period.

[0021] According to an example, the sample rate is greater than or equal to 24 hours.

[0022] According to an example, the sample period is greater than or equal to 100 milliseconds.

[0023] According to an example, the antenna has a center frequency of approximately 13.56 MHz.

[0024] According to an example, the RF radiation field has a transmission range of less than or equal to 20 centimeters.

[0025] Generally, in another aspect, a method for detecting a skimming device installed on a payment terminal is provided. The method comprises: (1) generating, via a transceiver electrically coupled to an antenna, an RF radiation field; (2) capturing, via the transceiver, a plurality of samples of the RF radiation field; (3) determining one or more sample characteristics based on the plurality of samples; (4) determining one or more comparison metrics by comparing the one or more sample characteristics to one or more baseline characteristics; and (5) setting a skimming detection flag based on the one or more comparison metrics.

[0026] According to an example, the method may further comprise: (1) generating, via the transceiver, a calibration RF radiation field; (2) capturing, via the transceiver, a calibration sample of the calibration RF radiation field; (3) determining the one or more baseline characteristics based on the calibration sample; and (4) storing the baseline characteristics in a memory of the payment terminal.

[0027] According to an example, the method may further comprise transmitting an alert signal corresponding to the skimming detection flag to an external device.

[0028] According to an example, the payment terminal is configured to operate in a payment processing state or an idle state. The samples of the RF radiation field are only captured if the payment terminal is in the idle state.Title: SYSTEMS AND METHODS FOR SKIMMING DEVICE DETECTION USING RF RADIATIONFIELDSDocket No.: VFI-1060-WO

[0029] It should be appreciated that all combinations of the foregoing concepts and additional concepts discussed in greater detail below (provided such concepts are not mutually inconsistent) are contemplated as being part of the inventive subject matter disclosed herein. In particular, all combinations of claimed subject matter appearing at the end of this disclosure are contemplated as being part of the inventive subject matter disclosed herein. It should also be appreciated that terminology explicitly employed herein that also may appear in any disclosure incorporated by reference should be accorded a meaning most consistent with the particular concepts disclosed herein.

[0030] These and other aspects of the various embodiments will be apparent from and elucidated with reference to the embodiment(s) described hereinafter.Brief Description of the Drawings

[0031] In the drawings, like reference characters generally refer to the same parts throughout the different views. Also, the drawings are not necessarily to scale, emphasis instead generally being placed upon illustrating the principles of the various embodiments.

[0032] FIG. 1 is an isometric view of a payment terminal, according to aspects of the present disclosure.

[0033] FIG. 2 is a functional block diagram of aspects of a payment terminal in sample capture mode, according to aspects of the present disclosure.

[0034] FIG. 3 is a functional block diagram of aspects of a payment terminal in calibration mode, according to aspects of the present disclosure.

[0035] FIG. 4 is an isometric view of a payment terminal having two antennas, according to aspects of the present disclosure.

[0036] FIG. 5 is a simplified functional block diagram of aspects of a payment terminal with two antennas in sample capture mode, according to aspects of the present disclosure.

[0037] FIG. 6 is a flowchart of a method for detection of a skimming device installed on a payment terminal, according to aspects of the present disclosure.

[0038] FIG. 7 is a flowchart of further steps of the method for detection of a skimming device installed on a payment terminal, according to aspects of the present disclosure.Title: SYSTEMS AND METHODS FOR SKIMMING DEVICE DETECTION USING RF RADIATIONFIELDSDocket No.: VFI-1060-WODetailed Description

[0039] The present disclosure is directed to systems and methods for skimming device detection using radio frequency (RF) radiation. In particular, the systems and methods are used to determine if a skimming device has been installed on a payment terminal configured to process card-based transactions. The payment terminal includes a controller having a transceiver with an antenna. The controller uses the transceiver and the antenna to generate an RF radiation field encompassing at least a portion of the payment terminal. Skimming devices typically include metal or metal -containing components that will impact the characteristics of the RF radiation field. Accordingly, the controller then uses the transceiver and the antenna to capture samples of the RF radiation field, and then analyze the samples to evaluate one or more characteristics of the samples. The sample characteristics are then compared to baseline characteristics retrieved from a memory of the skimming device. The baseline characteristics are determined during a calibration process when no skimming devices are installed on the payment terminal. The comparison of the sample characteristics to the baseline characteristics results in comparison metrics. The controller then evaluates the comparison metrics (such as by comparing the comparison metrics to one or more thresholds) to determine if a skimming device has been installed on the payment terminal. If so, the skimming device flag is set, indicating the presence of a skimming device. The controller may then also transmit an alert signal corresponding to the skimming device flag to an external device.

[0040] FIG. 1 illustrates an isometric view of a payment terminal 10. As shown in FIG. 1, the payment terminal 10 may be an electronic device configured to facilitate transactions via payment cards, such as credit cards and / or debit cards. The payment terminal 10 of FIG. 1 includes a smart card reader 21 to receive information from a Europay Mastercard Visa (EMV) chip of the payment card when the payment card is inserted into a slot of the smart card reader 21. The payment terminal 10 also includes a magnetic card reader 23 to receive information from a magnetic stripe of the payment card when the payment card is swiped through the magnetic card reader 23. However, in other examples, the payment terminal 10 may include only one of the smart card reader 21 or the magnetic card reader 23. The payment terminal 10 of FIG. 1 also includes a number of other features including a physical keypad, a display screen (which may be a touch screen), and a series of four indicator light emitting diodes (LEDs).

[0041] As discussed above, a common method of stealing payment card information is surreptitiously installing a skimming device onto the payment terminal 10. Specifically, theTitle: SYSTEMS AND METHODS FOR SKIMMING DEVICE DETECTION USING RF RADIATIONFIELDSDocket No.: VFI-1060-WO skimming device may be configured to fit over the smart card reader 21 or the magnetic card reader 23 to capture payment card information. The skimming device may appear to be part of the payment terminal and can be difficult for a layperson to detect. In fact, the skimming device may mimic a number of characteristics of the payment terminal, such as look, feel, color, materials, and / or other characteristics.

[0042] In order to detect the skimming device, an antenna 135 is used. As shown in FIG. 1, the antenna 135 generates an omnidirectional RF radiation field. The skimming devices typically include metal components to capture, process, store, and / or transmit information from a payment card. Accordingly, these metal components will interfere with the RF radiation field 11 generated by the antenna 135, and allow the payment terminal 10 to detect the presence of the skimming device by measuring the impact the skimming device has on the payment terminal 10. The details regarding this detection are depicted in FIGS. 2 and 3.

[0043] FIG. 2 is a functional block diagram of aspects of the payment terminal 10. As shown in FIG. 2, the payment terminal 10 includes a controller 100 and the antenna 135. The controller 100 includes number of subcomponents which may be executed by one or more processors, such as a sample analyzer 111, a comparator 113, a flag setter 115, an alert subsystem 117, and a transceiver 125. Each of these subcomponents may process information or data stored in and / or retrieved from a memory 150 (as shown in FIG. 3).

[0044] As shown in FIG. 2, the transceiver 125 is coupled to the antenna 135 to produce the RF radiation field 11 used to detect the presence of skimming devices. The RF radiation field 11 is generated according to one or more sample field parameters 140. The sample field parameters 140 may include a number of parameters, such as transmission power. In some examples, the transmission power may result in the RF radiation field 11 having a transmission range of less than or equal to 20 centimeters from the antenna 135. Further, the characteristics of the RF radiation field 11 may also be determined by the center frequency of the antenna 11. If the antenna 135 is also used to facilitate near field communication (NFC) payment transactions, the antenna 135 may have a center frequency of approximately 13.56 MHz.

[0045] The transceiver 125 may be controlled according to one or more states 124 of the payment terminal 10, such as a payment processing state 126 or an idle state 128. The state 124 of the payment terminal 10 may be retrieved by the transceiver 125 from one or more other aspects of the payment terminal 10, such as the memory 150. The payment processing state 126 represents a state 124 wherein the payment terminal 10 is being actively used to execute aTitle: SYSTEMS AND METHODS FOR SKIMMING DEVICE DETECTION USING RF RADIATIONFIELDSDocket No.: VFI-1060-WO transaction. Actively processing the transaction may include a variety of actions, such as receiving payment information from a card reader (such as a magnetic strip reader, a chip reader, a contactless card reader, etc.), receiving transaction information from a point-of-sale device, or receiving user input via a keypad or touch screen. The transceiver 125 and the antenna 135 may be used during the payment processing state, such as for capturing contactless payment information from the payment card via NFC or other wireless protocols. If the payment terminal is not in a payment processing state, the payment terminal may be considered to be in an idle state 128. The idle state 128 represents a state 124 where the payment terminal10 is not being actively used for a payment transaction. In some embodiments, the transceiver 125 may only generate the RF radiation field 11 when the state 124 is set to the idle state 128. In other examples, the RF radiation field 11 may be generated continuously, but the RF radiation field 11 is analyzed for skimming device detection purposes only when the state 124 is set to the idle state 128. Other types of states 124 may be used to control the generation and / or evaluation of the RF radiation field 11. Limiting the generation of the RF radiation field11 and / or the capturing of samples 102 to the idle state 124 may reduce false detections of skimming devices and save power and computing resources.

[0046] As shown in FIG. 2, the transceiver 125 is configured to capture one or more samples 102 of the RF radiation field 11. The samples 102 of the RF radiation field 11 may be captured according to a variety of parameters, including a sample rate 134 and a sample period 136. The sample rate 134 represents the frequency at which the controller 100 captures the individual samples 102 of the RF radiation field. In some examples, the sample rate 134 is approximately 24 hours, such that one sample 102 is captured every day. In other examples, the sample rate 134 could be every 12 hours, every 6 hours, every one hour, every 30 minutes, etc. The timing of the sample 102 captures may be synchronized to correspond to anticipated idle states 128, such as after business hours or during slow periods. The sample period 136 represents the length of time of each sample. In some examples, the sample period 136 may be greater than or equal to 100 milliseconds. In some examples, the sample period 136 could be 250 milliseconds, 500 milliseconds, 1.0 second, 5.0 seconds, etc. The sample rate 134 and the sample period 136 may be stored in and retrieved from the memory 150.

[0047] The capture samples 102 are provided to the sample analyzer 111. The sample analyzer 111 is configured to determine one or more sample characteristics 104 from the samples 102. The sample characteristics 104 represent parameters of the RF radiation field 11Title: SYSTEMS AND METHODS FOR SKIMMING DEVICE DETECTION USING RF RADIATIONFIELDSDocket No.: VFI-1060-WO as impacted (or not impacted) by a skimming device surreptitiously attached to the payment terminal 10. The sample characteristics 104 may include sample load factor 112, sample phase 114, and / or sample amplitude 116. The sample load factor 112 represents the load applied to the RF radiation field 11 by RF reflecting or absorbing materials, such as materials of the payment terminal 10 or a skimming device. The sample phase 114 and the sample amplitude 116 represents the phase and the amplitude of the RF waves comprising the RF radiation field 11.

[0048] These sample characteristics 104 are then provided to a comparator 113. The comparator 113 compares the sample characteristics 104 against one or more baseline characteristics 108 to generate one or more comparison metrics 106 representing the differences between the sample characteristics 104 and the baseline characteristics 108. The baseline characteristics 108 represent characteristics of the RF radiation field 11 when no skimming devices are present, as the materials and components of the payment terminal 10 itself will likely impact the RF radiation field 11. Accordingly, simply evaluating sample characteristics 104 without comparison to a baseline will be unlikely to yield reliable indications of the presence of a skimming device. As will be described with respect to FIG. 3, the baseline characteristics 108 may be generated during a calibration process. The baseline characteristics 108 may include characteristics corresponding to each of the determined sample characteristics 104, such as baseline load factor 118, baseline phase 120, and / or baseline amplitude 122. Individual comparison metrics 106 may be determined for each parameter type. For example, a load factor comparison metric may represent the difference between the baseline load factor 118 and the sample load factor 112, a phase comparison metric represent the difference between the baseline phase 120 and the sample phase 114, and an amplitude comparison metric may represent the difference between the baseline amplitude 122 and the sample amplitude 116. In some embodiments, the one or more comparison metrics 106 may include an aggregated comparison metric combining or synthesizing one or more of the aforementioned comparison metrics 106.

[0049] The comparison metrics 106 are then provided to a flag setter 115. The flag setter 115 is configured to compare the comparison metrics 106 to one or more thresholds to determine if a skimming detection flag 110 should be generated. The thresholds may define how different the sample characteristics 104 must be from the baseline characteristics 108 to be representative of a skimming device mounted to the payment terminal 10. One or moreTitle: SYSTEMS AND METHODS FOR SKIMMING DEVICE DETECTION USING RF RADIATIONFIELDSDocket No.: VFI-1060-WO thresholds may be used for one or more types of characteristics, such as a load factor threshold, a phase threshold, and / or an amplitude threshold, as well an aggregated threshold combining one or more of the characteristics. If one or more of the aforementioned thresholds is exceeded by one of the comparison metrics 106, the flag setter 115 will generate the skimming detection flag 110. Accordingly, by using the thresholds, only significant deviations from the baseline characteristics 108 should result in the setting of the skimming detection flag 110.

[0050] The skimming detection flag 110 indicates that a skimming device has been detected by the payment terminal 10. In the example of FIG. 2, the skimming detection flag 110 is then provided to an alert subsystem 117. Upon receiving the skimming detection flag, the alert subsystem 117 may take a variety of protective measures. In some cases, the alert subsystem 117 could use the display screen or indicator LEDs to show that a skimming device has been detected. In other examples, the alert subsystem 117 could disable various aspects of the payment terminal 10. In even further examples, the alert subsystem 117 could transmit a wireless alert signal 130 to be received by an external device 20 corresponding to the payment terminal 10, such as a cash register in a mobile point of sale (MPOS) arrangement. In further examples, the external device 20 could be a gas pump or a countertop terminal. The external device 20 may be in communication with a centralized suite of software tools providing services such as data collection, remote diagnostics, and content management. As shown in FIG. 2, the alert subsystem 117 generates the alert signal 130. The alert signal 130 is conveyed to the external device 20 via any appropriate type of wired or wireless connection, such as WiFi, Ethernet, cellular, serial, etc. In some examples, the alert signal 130 could contain additional information, such as information identifying the payment terminal 10.

[0051] FIG. 3 is a functional block diagram of aspects of a payment terminal 10 in calibration mode. Calibration mode is required to generate the baseline characteristics 108 used for comparison with the sample characteristics 104. The calibration procedure should be performed with the payment terminal 10 arranged as it will be during use. The calibration mode requires the use of the controller 100 and the antenna 135. As shown in FIG. 3, the transceiver 125 and the antenna 135 generate a calibration RF radiation field 13 corresponding to one or more calibration field parameters 142. Like the sample field parameters 140 shown in FIG. 3, the calibration field parameters 142 may include a number of parameters, such as transmission power. In a preferred example, the calibration field parameters 142 are equal to the sample field parameters 140, such that the RF radiation field 11 and the calibration RF radiation fieldTitle: SYSTEMS AND METHODS FOR SKIMMING DEVICE DETECTION USING RF RADIATIONFIELDSDocket No.: VFI-1060-WO13 are also equal. As shown in FIG. 3, the transceiver 125 then captures one or more calibration samples 132 of the calibration RF radiation field 13. The calibration samples 132 may be captured according to a calibration sample rate and a calibration sample period which may or may not be equal to the sample rate 134 and sample period 136 described with reference to FIG. 2. The calibrations samples 132 are then provided to a calibration analyzer 119. Similar to the sample analyzer 111 in FIG. 2, the calibration analyzer 119 processes the calibration samples 132 into the one or more baseline parameters 108, such as the baseline load factor 118, the baseline phase 120, and / or the baseline amplitude 122. The baseline parameters 108 are then stored in the memory 150 for retrieval during sample capture mode.

[0052] FIG. 4 is an isometric view of an embodiment of the payment terminal 10 having two antennas 135, 145. Similarly, FIG. 5 is a simplified functional block diagram of aspects of the payment terminal 10 with two antennas 135, 145. In the example of FIG. 5, the controller 100 is in sample capture (rather than calibration) mode. As demonstrated in FIG. 4, the payment terminal 10 includes multiple antennas 135, 145 to increase skimming device detection coverage. For example, the first antenna 135 may be unable to detect a skimming device placed over the magnetic card reader 23. If so, the transceiver 145 may instead use the second antenna 145 to generate a second RF radiation field 15, and then capture one or more second samples 144 to determine if a skimming device is present in much the same manner as illustrated in FIG. 2. The second samples 144 are then processed by the sample analyzer 111 to generate one or more second sample characteristics 146. As shown in FIG. 5, in this embodiment the comparator 113 uses a second set of baseline characteristics 148 corresponding to a calibration process implementing the second antenna 145 and the second RF radiation field 15, as opposed to the first antenna 135 and the first RF radiation field 11 shown in FIG. 3. Based on the second sample characteristics 146 and the second baseline characteristics 148, the comparator 113 generates a set of second comparison metrics 152. The flag setter 115 then processes the second comparison metrics 152 to determine if a skimming detection flag 110 should be set. In some embodiments, when the payment terminal 10 is in the idle state 28, the transceiver 125 alternates between generating the first RF radiation field 11 and the second RF radiation field 15 to for broader coverage of the payment terminal 10. Notably, the transceiver 125 is not configured to generate both the first and second RF radiation fields 11, 15 simultaneously, as this could lead to the two RF radiation fields 11, 15 interfering with each other.Title: SYSTEMS AND METHODS FOR SKIMMING DEVICE DETECTION USING RF RADIATIONFIELDSDocket No.: VFI-1060-WO

[0053] FIG. 6 is a flowchart of a method 900 for detection of a skimming device installed on a payment terminal 10. FIG. 7 is flowchart of further steps of the method 900. With reference to FIGS. 1-7, the method 900 includes, in step 902, generating, via a transceiver 125 electrically coupled to an antenna 135, an RF radiation field 11.

[0054] FIG. 6 illustrates a series of steps for detecting a skimming device. As shown in FIG. 6, The method 900 further includes, in step 904, capturing, via the transceiver 125, a plurality of samples 102 of the RF radiation field 11.

[0055] The method 900 further includes, in step 906, determining one or more sample characteristics 104 based on the plurality of samples 102.

[0056] The method 900 further includes, in step 908, determining one or more comparison metrics 106 by comparing the one or more sample characteristics 104 to one or more baseline characteristics 108.

[0057] The method 900 further includes, in step 910, setting a skimming detection flag 110 based on the one or more comparison metrics 106.

[0058] In some examples, the method 900 shown in FIG. 6 may further include, in step 920, transmitting an alert signal 120 corresponding to the skimming detection flag 110 to an external device 20.

[0059] FIG. 7 illustrates a series of steps for calibrating the payment terminal to accurately detect a skimming device. The steps of the method 900 shown in FIG. 7 further include, in step 912, generating, via the transceiver 125, a calibration RF radiation field 13.

[0060] The method 900 further includes, in step 914, capturing, via the transceiver 125, a calibration sample 15 of the calibration RF radiation field 13.

[0061] The method 900 further includes, in step 916, determining the one or more baseline characteristics 108 based on the calibration sample 132.

[0062] The method 900 further includes, in step 918, storing the baseline characteristics in a memory of the payment terminal.

[0063] As described herein, the various computer systems may include one or more computer processors, machine-readable memory, interface buses, and / or system buses that contain conductive circuit pathways through which instructions (e.g., machine-readable signals) may travel to effectuate communication, tasks, storage and the like. Each of the one or more processors may include a high-speed data processor adequate to execute the operations described herein and / or various specialized processing units. In some examples, one or moreTitle: SYSTEMS AND METHODS FOR SKIMMING DEVICE DETECTION USING RF RADIATIONFIELDSDocket No.: VFI-1060-WO of the processors may be a single processor, multiple processors, or multiple processor cores on a single die. In some examples, an interface bus may include a network interface configured to connect one component or device to a communications network, which can include a direct interconnection, the Internet, a local area network (“LAN”), a metropolitan area network (“MAN”), a wide area network (“WAN”), a wired or Ethernet connection, a wireless connection, and similar types of communications networks, including combinations thereof. In certain examples, the memory described herein can be variously embodied in one or more forms of machine-accessible and machine-readable memory, and can include, but is not limited to, a non-transitory storage medium, a magnetic disk storage, an optical disk storage, an array of storage devices, a solid-state memory device, and the like, including combinations thereof. According to another embodiment, certain memory components can be distributed remotely, such as in various cloud computing applications, among other configurations.

[0064] All definitions, as defined and used herein, should be understood to control over dictionary definitions, definitions in documents incorporated by reference, and / or ordinary meanings of the defined terms.

[0065] The indefinite articles “a” and “an,” as used herein in the specification and in the claims, unless clearly indicated to the contrary, should be understood to mean “at least one.”

[0066] The phrase “and / or,” as used herein in the specification and in the claims, should be understood to mean “either or both” of the elements so conjoined, i.e., elements that are conjunctively present in some cases and disjunctively present in other cases. Multiple elements listed with “and / or” should be construed in the same fashion, i.e., “one or more” of the elements so conjoined. Other elements can optionally be present other than the elements specifically identified by the “and / or” clause, whether related or unrelated to those elements specifically identified.

[0067] As used herein in the specification and in the claims, “or” should be understood to have the same meaning as “and / or” as defined above. For example, when separating items in a list, “or” or “and / or” shall be interpreted as being inclusive, i.e., the inclusion of at least one, but also including more than one, of a number or list of elements, and, optionally, additional unlisted items. Only terms clearly indicated to the contrary, such as “only one of’ or “exactly one of,” or, when used in the claims, “consisting of,” will refer to the inclusion of exactly one element of a number or list of elements. In general, the term “or” as used herein shall only beTitle: SYSTEMS AND METHODS FOR SKIMMING DEVICE DETECTION USING RF RADIATIONFIELDSDocket No.: VFI-1060-WO interpreted as indicating exclusive alternatives (i.e. “one or the other but not both”) when preceded by terms of exclusivity, such as “either,” “one of,” “only one of,” or “exactly one of.”

[0068] As used herein in the specification and in the claims, the phrase “at least one,” in reference to a list of one or more elements, should be understood to mean at least one element selected from any one or more of the elements in the list of elements, but not necessarily including at least one of each and every element specifically listed within the list of elements and not excluding any combinations of elements in the list of elements. This definition also allows that elements can optionally be present other than the elements specifically identified within the list of elements to which the phrase “at least one” refers, whether related or unrelated to those elements specifically identified.

[0069] It should also be understood that, unless clearly indicated to the contrary, in any methods claimed herein that include more than one step or act, the order of the steps or acts of the method is not necessarily limited to the order in which the steps or acts of the method are recited.

[0070] In the claims, as well as in the specification above, all transitional phrases such as “comprising,” “including,” “carrying,” “having,” “containing,” “involving,” “holding,” “composed of,” and the like are to be understood to be open-ended, i.e., to mean including but not limited to. Only the transitional phrases “consisting of’ and “consisting essentially of’ shall be closed or semi -closed transitional phrases, respectively.

[0071] The above-described examples of the described subject matter can be implemented in any of numerous ways. For example, some aspects can be implemented using hardware, software or a combination thereof. When any aspect is implemented at least in part in software, the software code can be executed on any suitable processor or collection of processors, whether provided in a single device or computer or distributed among multiple devices / computers.

[0072] The present disclosure can be implemented as a system, a method, and / or a computer program product at any possible technical detail level of integration. The computer program product can include a computer readable storage medium (or media) having computer readable program instructions thereon for causing a processor to carry out aspects of the present disclosure.

[0073] The computer readable storage medium can be a tangible device that can retain and store instructions for use by an instruction execution device. The computer readable storageTitle: SYSTEMS AND METHODS FOR SKIMMING DEVICE DETECTION USING RF RADIATIONFIELDSDocket No.: VFI-1060-WO medium can be, for example, but is not limited to, an electronic storage device, a magnetic storage device, an optical storage device, an electromagnetic storage device, a semiconductor storage device, or any suitable combination of the foregoing. A non-exhaustive list of more specific examples of the computer readable storage medium includes the following: a portable computer diskette, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or Flash memory), a static random access memory (SRAM), a portable compact disc read-only memory (CD-ROM), a digital versatile disk (DVD), a memory stick, a floppy disk, a mechanically encoded device such as punch-cards or raised structures in a groove having instructions recorded thereon, and any suitable combination of the foregoing. A computer readable storage medium, as used herein, is not to be construed as being transitory signals per se, such as radio waves or other freely propagating electromagnetic waves, electromagnetic waves propagating through a waveguide or other transmission media (e.g., light pulses passing through a fiber-optic cable), or electrical signals transmitted through a wire.

[0074] Computer readable program instructions described herein can be downloaded to respective computing / processing devices from a computer readable storage medium or to an external computer or external storage device via a network, for example, the Internet, a local area network, a wide area network and / or a wireless network. The network can comprise copper transmission cables, optical transmission fibers, wireless transmission, routers, firewalls, switches, gateway computers and / or edge servers. A network adapter card or network interface in each computing / processing device receives computer readable program instructions from the network and forwards the computer readable program instructions for storage in a computer readable storage medium within the respective computing / processing device.

[0075] Computer readable program instructions for carrying out operations of the present disclosure can be assembler instructions, instruction-set-architecture (ISA) instructions, machine instructions, machine dependent instructions, microcode, firmware instructions, statesetting data, configuration data for integrated circuitry, or either source code or object code written in any combination of one or more programming languages, including an object oriented programming language such as Smalltalk, C++, or the like, and procedural programming languages, such as the “C” programming language or similar programming languages. The computer readable program instructions can execute entirely on the user’s computer, partly on the user's computer, as a stand-alone software package, partly on the user’sTitle: SYSTEMS AND METHODS FOR SKIMMING DEVICE DETECTION USING RF RADIATIONFIELDSDocket No.: VFI-1060-WO computer and partly on a remote computer or entirely on the remote computer or server. In the latter scenario, the remote computer can be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or the connection can be made to an external computer (for example, through the Internet using an Internet Service Provider). In some examples, electronic circuitry including, for example, programmable logic circuitry, field-programmable gate arrays (FPGA), or programmable logic arrays (PLA) can execute the computer readable program instructions by utilizing state information of the computer readable program instructions to personalize the electronic circuitry, in order to perform aspects of the present disclosure.

[0076] Aspects of the present disclosure are described herein with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to examples of the disclosure. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer readable program instructions.

[0077] The computer readable program instructions can be provided to a processor of a, special purpose computer, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions / acts specified in the flowchart and / or block diagram block or blocks. These computer readable program instructions can also be stored in a computer readable storage medium that can direct a computer, a programmable data processing apparatus, and / or other devices to function in a particular manner, such that the computer readable storage medium having instructions stored therein comprises an article of manufacture including instructions which implement aspects of the function / act specified in the flowchart and / or block diagram or blocks.

[0078] The computer readable program instructions can also be loaded onto a computer, other programmable data processing apparatus, or other device to cause a series of operational steps to be performed on the computer, other programmable apparatus, or other device to produce a computer implemented process, such that the instructions which execute on the computer, other programmable apparatus, or other device implement the functions / acts specified in the flowchart and / or block diagram block or blocks.Title: SYSTEMS AND METHODS FOR SKIMMING DEVICE DETECTION USING RF RADIATIONFIELDSDocket No.: VFI-1060-WO

[0079] The flowchart and block diagrams in the Figures illustrate the architecture, functionality, and operation of possible implementations of systems, methods, and computer program products according to various examples of the present disclosure. In this regard, each block in the flowchart or block diagrams can represent a module, segment, or portion of instructions, which comprises one or more executable instructions for implementing the specified logical function(s). In some alternative implementations, the functions noted in the blocks can occur out of the order noted in the Figures. For example, two blocks shown in succession can, in fact, be executed substantially concurrently, or the blocks can sometimes be executed in the reverse order, depending upon the functionality involved. It will also be noted that each block of the block diagrams and / or flowchart illustration, and combinations of blocks in the block diagrams and / or flowchart illustration, can be implemented by special purpose hardware-based systems that perform the specified functions or acts or carry out combinations of special purpose hardware and computer instructions.

[0080] Other implementations are within the scope of the following claims and other claims to which the applicant can be entitled.

[0081] While various examples have been described and illustrated herein, those of ordinary skill in the art will readily envision a variety of other means and / or structures for performing the function and / or obtaining the results and / or one or more of the advantages described herein, and each of such variations and / or modifications is deemed to be within the scope of the examples described herein. More generally, those skilled in the art will readily appreciate that all parameters, dimensions, materials, and configurations described herein are meant to be exemplary and that the actual parameters, dimensions, materials, and / or configurations will depend upon the specific application or applications for which the teachings is / are used. Those skilled in the art will recognize or be able to ascertain using no more than routine experimentation, many equivalents to the specific examples described herein. It is, therefore, to be understood that the foregoing examples are presented by way of example only and that, within the scope of the appended claims and equivalents thereto, examples can be practiced otherwise than as specifically described and claimed. Examples of the present disclosure are directed to each individual feature, system, article, material, kit, and / or method described herein. In addition, any combination of two or more such features, systems, articles, materials, kits, and / or methods, if such features, systems, articles, materials, kits, and / or methods are not mutually inconsistent, is included within the scope of the present disclosure.

Claims

Title: SYSTEMS AND METHODS FOR SKIMMING DEVICE DETECTION USING RF RADIATIONFIELDSDocket No.: VFI-1060-WOCLAIMSWhat is claimed is:

1. A payment terminal comprising a controller configured to: generate, via a transceiver electrically coupled to an antenna, a radio frequency (RF) radiation field; capture, via the transceiver, a plurality of samples of the RF radiation field; determine one or more sample characteristics based on the plurality of samples; determine one or more comparison metrics by comparing the one or more sample characteristics to one or more baseline characteristics; and set a skimming detection flag based on the one or more comparison metrics.

2. The payment terminal of claim 1, wherein the one or more sample characteristics include a sample load factor, a sample phase, and / or a sample amplitude.

3. The payment terminal of claim 1, wherein the one or more baseline characteristics include a baseline load factor, a baseline phase, and / or a baseline amplitude.

4. The payment terminal of claim 1, wherein the controller is configured to operate in a payment processing state or an idle state.

5. The payment terminal of claim 4, wherein the samples of the RF radiation field are only captured if the payment terminal is in the idle state.

6. The payment terminal of claim 1, wherein the RF radiation field is omnidirectional relative to the antenna.

7. The payment terminal of claim 1, wherein the controller is further configured to transmit an alert signal corresponding to the skimming detection flag to an external device.

8. The payment terminal of claim 1, further comprising a memory storing the one or more baseline characteristics.Title: SYSTEMS AND METHODS FOR SKIMMING DEVICE DETECTION USING RF RADIATIONFIELDSDocket No.: VFI-1060-WO9. The payment terminal of claim 1, wherein the controller is further configured to: generate, via the transceiver, a calibration RF radiation field; capture, via the transceiver, a calibration sample of the calibration RF radiation field; determine the one or more baseline characteristics based on the calibration sample; and store the baseline characteristics in a memory of the payment terminal.

10. The payment terminal of claim 1, wherein the transceiver is further electrically coupled to a second antenna.

11. The payment terminal of claim 10, wherein the transceiver uses only one of the antenna and the second antenna to generate the RF radiation field.

12. The payment terminal of claim 1, wherein the plurality of samples are captured according to a sample rate and a sample period.

13. The payment terminal of claim 12, wherein the sample rate is greater than or equal to 24 hours.

14. The payment terminal of claim 12, wherein the sample period is greater than or equal to 100 milliseconds.

15. The payment terminal of claim 1, wherein the antenna has a center frequency of approximately 13.56 MHz.

16. The payment terminal of claim 1, wherein the RF radiation field has a transmission range of less than or equal to 20 centimeters.

17. A method for detecting a skimming device installed on a payment terminal, comprising: generating, via a transceiver electrically coupled to an antenna, a radio frequency (RF) radiation field;Title: SYSTEMS AND METHODS FOR SKIMMING DEVICE DETECTION USING RF RADIATIONFIELDSDocket No.: VFI-1060-WO capturing, via the transceiver, a plurality of samples of the RF radiation field; determining one or more sample characteristics based on the plurality of samples; determining one or more comparison metrics by comparing the one or more sample characteristics to one or more baseline characteristics; and setting a skimming detection flag based on the one or more comparison metrics.

18. The method of claim 17, comprising: generating, via the transceiver, a calibration RF radiation field; capturing, via the transceiver, a calibration sample of the RF radiation field; determining the one or more baseline characteristics based on the calibration sample; and storing the baseline characteristics in a memory of the payment terminal.

19. The method of claim 17, further comprising transmitting an alert signal corresponding to the skimming detection flag to an external device.

20. The method of claim 17, wherein the payment terminal is configured to operate in a payment processing state or an idle state, and wherein the samples of the RF radiation field are only captured if the payment terminal is in the idle state.

Images