Card Reader Pre-Shutter Read Head Disable Mechanism
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Card reader devices, particularly in ATMs, are vulnerable to card skimming attacks where fraudsters intercept data from the pre-shutter read head as the card is transported, allowing unauthorized access to account funds.
Innovation Solution
A card reader device with a controller that disables the pre-shutter read head once data is detected on the card, preventing unauthorized data interception by short-circuiting the read head using a mechanical or electronic switch, and incorporating a card width sensor to ensure only valid cards are processed.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If the pre-shutter read head is used to detect card orientation and trigger shutter opening, then card processing efficiency is improved, but the read head becomes vulnerable to data interception attacks
Solution Approach 1:
The system performs card orientation detection using the pre-shutter read head before opening the shutter, then immediately disables the read head after data detection. This preliminary action allows the system to benefit from the read head's detection capability while minimizing the window of vulnerability to interception attacks.
Solution Approach 2:
The read head's operational state is dynamically changed from enabled to disabled based on the detection of card data. The controller monitors the read head's output and automatically disables it once valid card data is detected, creating a dynamic security response that adapts to the operational state.
2Adaptability or versatility
If the read head remains enabled during card transport, then data reading capability is maintained, but fraud risk increases due to potential data tapping
Solution Approach 1:
The system disables the read head immediately after detecting valid card data, before the card is fully transported into the secure enclosure. This preliminary disabling action prevents any potential data tapping during the card transport phase while ensuring data was already successfully detected.
Solution Approach 2:
The patent converts the potential harm of having an enabled read head during transport into a benefit by using the read head's detection capability to trigger its own disabling. The very feature that could be exploited for fraud (continuous data reading) is used to initiate security protection.
3Reliability
If the shutter remains closed during card insertion, then security is maintained, but card orientation verification cannot be performed
Solution Approach 1:
The card reading function is segmented into two distinct phases: orientation detection phase (with shutter closed, using pre-shutter read head) and data reading phase (with shutter open, using main read head inside enclosure). This segmentation allows security to be maintained during insertion while still enabling orientation verification.
Solution Approach 2:
The pre-shutter read head acts as an intermediary component that enables card orientation verification without requiring the main secure reading enclosure to be opened. It serves as a bridge between the need for security (closed shutter) and the need for verification (reading capability).
Data Source
AI summary
A card reader device has a card entrance for receiving a card, such as an ATM card, a card enclosure in registration with the card entrance and defining an area in which the card is read, and a shutter for controlling access to the card enclosure from the card entrance. The card reader device also has a read head located in the card entrance for reading data from the card, and a controller for controlling the operation of the card reader device. The controller is operable to: (i) open the shutter in response to reading data from the card, and (ii) disable the read head when the shutter is opened.