Card Reader Shim Attack Detection via Contact Area Monitoring
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing card readers fail to reliably detect shimming attacks, where a manipulation foil is used to maintain electrical connection and intercept data, compromising security.
Innovation Solution
Incorporation of a detector device, such as a one-way light barrier, reflection light barrier, camera, or inductive sensor, to monitor the contact area for the presence of a manipulation foil, which checks for deviations before and after chip card insertion, preventing unauthorized data reading.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a manipulation foil is applied to the chip card to maintain electrical connection, then data exchange continues, but security is compromised due to shimming attack
Solution Approach 1:
The detector device performs preliminary detection of the contact area before data exchange occurs. By checking for the presence of manipulation foil in advance using optical, inductive, or capacitive sensing, the system can prevent shimming attacks before they compromise security, rather than detecting them after damage occurs.
Solution Approach 2:
The detector device acts as an intermediary between the contact and the data exchange process. It senses physical or electromagnetic properties of the contact area without interfering with normal electrical contact, providing security verification as a mediating layer between the card and reader.
2Reliability
If a detector device is added to monitor the contact area, then shimming attack detection is enabled, but device complexity increases
Solution Approach 1:
The detector device is designed to perform multiple detection functions using a single integrated unit. It can detect optical properties, electromagnetic fields, or capacitive changes depending on the implementation, allowing one device to cover various manipulation foil types without requiring separate specialized sensors for each threat type.
Solution Approach 2:
The patent replaces complex mechanical inspection systems with non-contact or minimal-contact detection methods. Instead of physical examination mechanisms, the system uses optical barriers, inductive sensors, or capacitive fields to detect manipulation foil presence, reducing mechanical complexity while maintaining detection effectiveness.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
Effectively detects and prevents shimming attacks by monitoring changes in the contact area, ensuring secure data exchange processes.
Implementation Method 1
a one-way light barrier passing for example through the through-opening
Implementation Method 2
as a reflection light barrier directed for example at the contact face or at the through-opening
Implementation Method 3
as an inductive sensor directed for example at the contact face or at the through-opening
Data Source
AI summary
A card reader for data exchange uses a chip card inserted into a card reader housing up to a data exchange position having an electrical contact arranged fixedly in the card reader housing or displaceably in the card insertion direction. In the data exchange position, projecting into the card path of the inserted chip card by way of a contact area, includes a detector device. In the case of a contact fixedly arranged in the card reader housing, the detector device is directed at the contact face of the contact or at the region around said contact face or which, in the case of a contact that is displaceably arranged in the card reader housing in the card insertion direction, is directed at the position in the card reader at which the contact face is located in the data exchange position, or is directed at the region around this position.