ATM Card Reader Skimming Detection Using Capacitance Sensing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Unauthorized actors are proficient at installing skimming and shimming devices on card readers at ATMs and POS devices to capture card data, necessitating real-time detection and validation of payment cards and card readers to prevent unauthorized transactions.
Innovation Solution
Integration of mini-sensors in transaction processing cards and card readers to measure capacitance and magnetic fields, combined with machine learning models to detect discrepancies, and two-way communication for validation using dynamically generated codes to verify the authenticity of cards and card readers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Object-generated harmful factors
If skimming and shimming devices are installed on card readers to capture card data, then unauthorized transactions can be facilitated, but the security and reliability of the card reader is compromised
Solution Approach 1:
The system performs preliminary detection of skimming and shimming devices by measuring capacitance and magnetic field values before any card data is captured. The machine learning model analyzes these physical characteristics in advance to identify unauthorized devices, preventing data capture before it occurs.
Solution Approach 2:
The patent introduces an intermediary validation layer using capacitance sensors and magnetic field detectors that stand between the card reader and the data capture process. This intermediary system measures physical characteristics and uses machine learning to determine whether to allow or block the transaction, mediating the interaction between cards and readers.
2Reliability
If real-time validation of card and card reader authenticity is implemented using sensor data and machine learning, then unauthorized transactions are prevented, but the device complexity increases
Solution Approach 1:
The card reader is designed with multi-functionality, serving both as a data capture device and as a detection device for unauthorized components. The same hardware infrastructure (capacitance sensors, magnetic field detectors) is used for both validating card authenticity and detecting skimming/shimming devices, eliminating the need for separate dedicated systems.
Solution Approach 2:
The system performs self-validation by using the card itself as part of the detection process. The capacitance and magnetic field measurements are taken during the normal card insertion and reading process, so the system validates itself without requiring additional external equipment or complex separate validation hardware.
3Measurement precision
If capacitance sensors and magnetic field detectors are integrated into cards and readers, then detection precision is improved, but the manufacturing complexity increases
Solution Approach 1:
The patent merges the detection functions directly into the existing card and reader structures. The capacitance sensors and magnetic field detectors are integrated with the card reader hardware and card components, combining multiple functions (data capture, authentication, and unauthorized device detection) into a single unified system rather than adding separate discrete components.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
Effectively detects the presence of skimming and shimming devices, prevents unauthorized transactions, and ensures real-time validation of card and card reader authenticity, thereby protecting user data and transactions.
Implementation Method 1
The computing platform may receive, from one or more sensors arranged on the transaction processing card, capacitance data associated with a capacitance detected when the transaction processing card is inserted into the card reader
Implementation Method 2
The computing platform may receive, from one or more sensors arranged on the transaction processing card, magnetic field data associated with a magnetic field detected when the transaction processing card is inserted into the card reader
Data Source
AI summary
Arrangements for providing unauthorized activity detection are provided. A computing platform may receive an indication that a transaction has been initiated at a transaction processing device. The computing platform may receive, from one or more sensors arranged on the transaction processing card, capacitance data associated with a capacitance detected when the transaction processing card is inserted into the card reader. The computing platform may execute a machine learning model using, as inputs, the capacitance data, to output any detected discrepancies between the current capacitance data and expected capacitance data. If a discrepancy is detected, the computing platform may identify that a skimming device is present at the card reader of the transaction processing device. A notification indicating that the skimming device is present may be generated and transmitted to, for instance, the transaction processing card and may cause a light emitting diode on the transaction processing card to illuminate.