Peripheral Device Authentication via Global Mutex
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Self-service machines, such as ATMs, face security risks due to complex dependencies between hardware and software layers, making it difficult to detect and react to unauthorized replacement of peripheral devices like keypads, which can compromise security and violate legal stipulations.
Innovation Solution
Implementing a global mutex in the operating system layer to detect and prevent unauthorized peripheral device replacements by setting a flag when a non-original device is installed, ensuring that only approved components can be used, and triggering appropriate reactions, such as canceling transactions and reporting status, if a counterfeit device is detected.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of manufacture
If standard components and operating systems are used to build self-service machines, then device complexity and ease of manufacture are improved, but security and reliability deteriorate due to inability to detect unauthorized component replacements
Solution Approach 1:
The patent implements preliminary authentication of peripheral devices during system startup before the operating system fully loads. An authentication process verifies the identity of peripheral devices (such as keypads) before they are allowed to communicate with the system, preventing unauthorized devices from compromising security while still allowing standard components to be used for ease of manufacture
Solution Approach 2:
The patent introduces an intermediary authentication layer between the operating system and peripheral devices. This intermediary process acts as a mediator that verifies device identities and controls access, allowing standard components to be used while maintaining security through the additional authentication layer
2Reliability
If hardware layers are kept fixed to maintain security, then reliability is improved, but adaptability and ease of repair worsen due to inability to replace components
Solution Approach 1:
The patent implements dynamic authentication that adapts to different peripheral devices while maintaining security. The system can authenticate and work with various approved devices (different keypads, cash dispensers, etc.) while preventing unauthorized replacements, thus providing both reliability and adaptability
3Reliability
If authentication mechanisms are added to detect device replacements, then security is improved, but device complexity increases
Solution Approach 1:
The patent implements partial authentication by focusing only on critical peripheral devices (such as keypads and cash dispensers) rather than attempting to authenticate every component. This selective approach provides adequate security for the most security-critical devices while minimizing the added complexity
Data Source
AI summary
The invention relates to a method for evaluating the authenticity of peripheral devices of a self-service machine having an operating system that provides at least one global mutex, having software layers, that are arranged on the operating system, having processes that run on the self-service machine and that access the operating system and/or the software layers, comprising the steps of:evaluating of authenticity of a connected peripheral device by a first process;if it was determined during the evaluation that the peripheral device could not be authenticated, setting of the mutex;evaluating the mutex by a second process based on an event and, if the mutex is set, switching the self-service machine to an error state.