Touchscreen PIN Entry Device with Encrypted Position Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing devices for reading magnetic stripe and chip cards, such as ATMs and payment terminals, face challenges in securely entering personal identification numbers (PINs) due to the vulnerability of Encrypted Pin Pads (EPP) keyboards to interception and skimming, requiring expensive installation space and being susceptible to fraudulent manipulation.
Innovation Solution
A device with a touch module that encrypts and transmits touch position data to a security module, using encrypted offset values to secure PIN entry, preventing unauthorized access and manipulation, and integrating a display unit to control the keyboard's position randomly, ensuring secure PIN entry without the need for separate EPP keyboards.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If an EPP keyboard is used for PIN entry, then security against interception is improved, but device complexity and cost increase
Solution Approach 1:
The patent combines the display unit and touch module into an integrated touchscreen interface, merging the functions of visual output and input detection into a single component. This eliminates the need for a separate EPP keyboard while maintaining security through encrypted touch position transmission, thereby reducing device complexity without compromising security.
Solution Approach 2:
The patent replaces the mechanical EPP keyboard system with an electronic touchscreen system that transmits touch positions digitally. Instead of physical key presses on a specialized keyboard, the system uses touch coordinates captured by the touch module, which are then encrypted and transmitted to the security module, substituting mechanical input with electronic sensing and data processing.
2Reliability
If an EPP keyboard is installed, then secure PIN entry is achieved, but installation space requirements increase
Solution Approach 1:
The display unit and touch module are merged into a single touchscreen assembly that serves both as display and input device. This integration eliminates the need for separate EPP keyboard space, reducing the overall installation footprint while maintaining secure PIN entry capabilities through encrypted touch position data transmission.
3Reliability
If an EPP keyboard is used, then PIN entry security is improved, but susceptibility to skimming attacks worsens
Solution Approach 1:
The patent replaces the mechanical EPP keyboard with an electronic touchscreen system that captures touch positions directly through sensors. This substitution eliminates the physical interface that skimming devices could attach to, as the touch module internally detects touch coordinates without exposing a mechanical keyboard surface that could be compromised by external skimming attachments.
Solution Approach 2:
The touch module acts as an intermediary between the user's finger and the security module, capturing touch positions and encrypting them before transmission. This intermediary layer prevents direct access to PIN information, as the touch coordinates are encrypted by the touch module itself before reaching the security module, blocking potential skimming attempts at multiple levels.
4Speed
If touch position data is transmitted unencrypted, then processing speed is improved, but security against interception deteriorates
Solution Approach 1:
The touch module performs encryption of touch position data before transmission to the security module, rather than encrypting after reception. This preliminary encryption action ensures that even if data is intercepted during transmission, it remains secure. The encryption process is integrated into the touch module's data processing pipeline, minimizing additional processing time while maintaining security.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The invention relates to a device (10) for reading magnetic stripe and/or chip cards, in particular bank cards, debit cards, and/or credit cards. The device (10) comprises a display unit (14) and a touch module (16) arranged in front of it for determining the position of a touch on a display area. Furthermore, the device (10) has a security module (18) for controlling the display unit (14) and the touch module (16). The security module (18) transmits initial data to the display unit (14) to display a keypad for PIN entry. Upon touching the display area, the touch module (16) generates second data containing information about the position of the touch, encrypts this data, and transmits the encrypted data to the security module (18).