Abnormality Detection in Automatic Transaction Apparatus

The automatic transaction apparatus is divided into distinct functional modules: a control unit that generates commands, a deposit/payout processing unit that executes transactions, and an abnormality detecting device that monitors for malware. This segmentation allows each component to have specialized security functions without requiring the entire system to be redesigned, thereby improving security while managing complexity through modular architecture.

The abnormality detecting device acts as an intermediary between the control unit and the deposit/payout processing unit. It monitors commands generated by the control unit for signs of malware infection before allowing execution by the processing unit. This intermediary layer maintains the automated command-flow architecture while introducing security verification to prevent malware-controlled transactions.

The abnormality detecting device performs partial monitoring by focusing on specific critical parameters in commands rather than analyzing every aspect of each command in detail. It detects key indicators such as unauthorized command patterns or anomalies in command sequences that are most likely to indicate malware presence. This selective monitoring approach maintains high detection accuracy for critical threats while minimizing the time overhead compared to comprehensive command analysis.