Secure Pin Entry Device with Capacitance Eavesdropping Detection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current PIN entry devices lack effective security measures to prevent unauthorized eavesdropping and tampering, particularly from malicious overlays that can intercept PIN entries.

Innovation Solution

A secure PIN entry device is designed with capacitance sensing functionality that generates an electromagnetic field and uses mutual and self-capacitance sensing to detect unauthorized eavesdropping elements, providing a security check that prevents operation unless the device is clear of bugs, and includes case open detection to further enhance security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional PIN entry devices are used without security checks, then ease of operation is maintained, but security against eavesdropping is compromised

Engineering Contradiction:
Improvesecurity against eavesdroppingVSAvoidsecurity check functionality
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements preliminary security checks by scanning capacitance values of key pads before allowing PIN entry operations. The controller performs capacitance measurements and compares them against stored baseline values to detect any unauthorized overlays or eavesdropping devices before the user enters their PIN, thereby preventing security breaches in advance

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent replaces traditional mechanical or simple electrical key pad detection with capacitance sensing technology. By measuring the electrical capacitance changes that occur when a finger touches a key pad, the system can detect not only valid user input but also the presence of unauthorized overlay films or eavesdropping devices, providing enhanced security without requiring mechanical components

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Reliability

If capacitance sensing security checks are implemented, then detection of unauthorized elements is improved, but use of energy increases

Engineering Contradiction:
Improvedetection of unauthorized elementsVSAvoidenergy consumption of security checks
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The patent implements periodic capacitance scanning at strategically chosen moments rather than continuous monitoring. The security checks are performed periodically during specific operational states (such as when the device is idle or between PIN entry sessions), allowing the system to maintain high detection capability while minimizing energy consumption by keeping the capacitance sensing circuit inactive during non-critical periods

Inventive Principle:
Principle #19Periodic action

3Reliability

If security checks are performed before PIN entry, then security is improved, but loss of time occurs due to additional verification steps

Engineering Contradiction:
Improvesecurity verificationVSAvoidtime for security checks
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent performs capacitance baseline measurements and security verification in advance, storing the baseline capacitance values in memory during device initialization or manufacturing. This preliminary action allows the system to have security checks already prepared and configured before actual PIN entry operations begin, reducing the time required during critical user interactions

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent implements optimized capacitance comparison algorithms that quickly compare real-time measurements against stored baselines using threshold-based decision making. When capacitance values fall within acceptable ranges, the system rapidly confirms security and proceeds without delay, skipping detailed analysis for routine operations and only performing deeper verification when anomalies are detected

Inventive Principle:
Principle #21Skipping (Rushing through)

Applied Scientific Principles

This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.

Function Achieved in This Case

The solution effectively prevents unauthorized PIN entry by detecting and responding to malicious overlays and physical tampering, ensuring secure PIN entry operations by disabling functions or alerting when unauthorized access is detected.

Implementation Method 1

an electric field generator for simultaneously generating an electromagnetic field at a first multiplicity of locations in the PIN entry device

Methodology Applied
Scientific EffectElectromagnetic field: Electromagnetic Induction

Implementation Method 2

a second multiplicity of capacitance sensors at a second plurality of locations for sensing mutual capacitance between at least some of the first multiplicity of locations and at least some of the second multiplicity of locations resulting from the electromagnetic field

Methodology Applied
Scientific EffectMutual capacitance: Capacitance

Implementation Method 3

self-capacitance sensing functionality for sensing self-capacitance of multiple elements of the secure PIN entry device

Methodology Applied
Scientific EffectSelf-capacitance: Capacitance

Data Source

PatentEP2661740B1Secure pin entry device
Publication Date: 2019.04.17 VERIFONE INC
  • EP2661740B1 patent drawingFigure 1A
  • EP2661740B1 patent drawingFigure 1B
  • EP2661740B1 patent drawingFigure 2A

AI summary

A secure PIN entry device including a PIN entry assembly operative to receive a PIN from a user, a PIN entry prompter operative when actuated to prompt a user to enter a PIN via the PIN entry assembly, a PIN entry prompt security check enabled controller operative to prevent operation of the PIN entry prompter unless a predetermined security check has been successfully completed and security check functionality operative to check at least part of the PIN entry device for the presence of an unauthorized PIN eavesdropping element thereat and to provide an output to the PIN entry prompt security check enabled controller indicating whether the predetermined security check has been successfully completed.