ATM Session Security via Presence Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Self-service terminals, such as ATMs, face challenges in determining when a customer has prematurely left the terminal during a transaction, leading to potential unauthorized continuation of sessions by subsequent users.
Innovation Solution
Incorporating a sensor system, including customer identification devices like card readers or biometric sensors, and a controller that tracks customer presence and creates a session template, allowing the terminal to discriminate between the customer and others, and automatically closes the session when predefined absence criteria are met.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a dip card reader is used instead of a motorized card reader, then the customer does not need to yield control of the card to the ATM and the ATM does not need to capture the customer's card, but the ATM cannot detect when the customer has left the terminal
Solution Approach 1:
A sensor system acts as an intermediary between the customer and the ATM system. The sensor detects the customer's presence or absence and transmits this information to the controller, which then determines whether to close the session. This mediator resolves the contradiction by enabling session security monitoring without requiring physical card capture or control.
2Ease of operation
If the ATM does not capture the customer's card, then the customer retains control of the card, but the ATM cannot ascertain that the customer has prematurely left
Solution Approach 1:
The mechanical card capture system is replaced with an optical or electromagnetic sensor system. Instead of physically capturing the card to detect customer absence, the system uses sensors (such as cameras, weight sensors, or presence detection devices) to monitor whether the customer is still at the terminal. This substitution maintains customer control of the card while providing accurate presence detection.
3Device complexity
If no presence detection system is used, then the terminal structure remains simple, but subsequent customers can continue transactions initiated by previous customers
Solution Approach 1:
The system performs preliminary detection of customer presence before allowing transaction continuation. The sensor continuously monitors for the customer's presence, and the controller is pre-programmed with absence criteria (such as time thresholds or detection failures). When criteria are met, the session is automatically closed before any unauthorized continuation can occur, preventing security issues rather than reacting to them.
Data Source
AI summary
A terminal, such as an automated teller machine, comprises: a customer identification device; a sensor for detecting presence of a customer at the terminal; and a controller coupled to the customer identification device and the sensor. The controller is programmed to (i) track the customer's location, (ii) create a session on identification of a customer, and (iii) close the created session when a customer absence criterion is fulfilled. The functions of the customer identification device and the sensor may be performed by a single unit. The customer absence criterion may comprise a time period during which the customer is not detected at the terminal.