ATM Security via E-Fuse Sensor Verification

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Automated teller machines (ATMs) are vulnerable to black box attacks and exit from kiosk mode attacks, which current security measures fail to adequately address, particularly due to vulnerabilities in physical authentication and manipulation of sensors.

Innovation Solution

Implementing e-fuse programming technology to monitor and prevent attacks by using a set of e-fuse chips on the ATM computing device and cash dispenser, which perform self-verification and automatically halt operations upon unauthorized external connections, ensuring that only matching counts from associated physical sensors allow the device to function.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If physical sensors are used for authentication in ATMs, then the ease of operation is improved, but the reliability is worsened due to vulnerability to sensor manipulation attacks

Engineering Contradiction:

Improveauthentication processVSAvoidsecurity against manipulation

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The patent introduces e-fuse chips as intermediary components between the physical sensors and the authentication system. These e-fuse chips verify the integrity of sensor readings by checking cryptographic signatures, thereby mediating the trust between physical inputs and system authentication decisions without requiring direct trust in the sensors themselves

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent replaces reliance on physical sensor integrity with a cryptographic verification system. Instead of trusting the physical state of sensors, the system uses e-fuse chips to verify authentication through cryptographic signatures, substituting mechanical/physical trust with mathematical verification

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

2Reliability

If security measures are enhanced to prevent attacks, then the reliability is improved, but the device complexity increases

Engineering Contradiction:

Improvesecurity protectionVSAvoidsystem structure

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments the authentication system into distinct functional components: physical sensors for input, e-fuse chips for verification, and authentication logic for decision-making. This segmentation allows each component to be optimized independently and simplifies the overall system architecture by clearly defining boundaries and responsibilities

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The e-fuse chips perform preliminary verification of sensor readings before authentication decisions are made. By pre-verifying the integrity of physical inputs through cryptographic checks, the system prevents unauthorized operations from proceeding, thereby enhancing security without requiring complex real-time monitoring mechanisms

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS11151847B2Securing external communication ports in automated teller machines

Publication Date: 2021.10.19 KYNDRYL INC

AI summary

Embodiments of the present invention provide a computer system, a computer program product, and a method that comprises identifying at least a first physical sensor and a second physical sensor within a computing device, wherein each physical sensor is associated with a respective count; performing a predetermined operation within the computing device; authenticating the received command of at least the first physical sensor and the second physical sensor identified within the computing device; and automatically halting the operation of the computing device.